Privacy Policy

This Privacy Policy explains how Intellious Tech (“Intellious”, “we”, “us” or “our”) collects, uses, discloses, stores and protects personal information when you visit our websites, submit an enquiry, download a resource, communicate with us, apply for employment, or otherwise interact with our online services. It is intended for a business-to-business technology services environment and should be read together with our Terms of Service and Cookie Policy. This document is a legal-review draft. The legal entity, designated privacy contact, applicable jurisdictions, vendor inventory, retention periods and cookie inventory must be validated before publication. Nothing in this policy is intended to expand Intellious’s obligations beyond those imposed by applicable law.

1. Who We Are

Intellious operates enterprise technology, modernization, integration, data, AI, CRM, revenue and managed services. The website currently identifies operating addresses in the United States and India. Depending on the context, Intellious may act as a data controller / business for information collected through its website and as a processor / service provider when processing customer data on behalf of an enterprise customer under a contract. Where a customer provides personal information to Intellious for processing as part of a project or managed service, the customer’s agreement and applicable data-processing terms govern that processing. This website Privacy Policy generally does not replace a customer-specific Data Processing Addendum (DPA).

2. Scope

• This policy applies to Intellious websites, landing pages, forms, resource-download pages, event registrations and other online properties that link to this policy.
• It applies to personal information collected directly from individuals and to certain information collected automatically through the website.
• It does not apply to third-party websites, applications or services that Intellious does not control, even when the website links to them.
• For customer environments, production systems and client data, the applicable Master Services Agreement, Statement of Work, DPA, security terms and other contractual documents take precedence where they conflict with this policy.
  ‍

3. Information We Collect

• Identity and professional information: name, job title, employer, business address and professional profile information.
• Contact information: business email address, telephone number, postal address and information included in enquiries or correspondence.
• Enquiry and engagement information: services of interest, project requirements, messages, meeting requests, event registrations, survey responses and communications with us.
• Career information: information submitted through recruitment or careers channels, such as resume/CV, qualifications, employment history and other information voluntarily provided.
• Technical and usage information: IP address, browser type, device type, operating system, referring URL, pages viewed, dates and times, approximate location, diagnostic information and website interaction data.
• Cookie and similar-technology information: identifiers, preferences and analytics information collected according to our Cookie Policy and applicable consent requirements.
• Information from third parties: business contact information and professional information lawfully obtained from customers, partners, public sources, event organizers, recruitment providers, social networks or other business sources.
• Information you choose to provide: any information included in forms, emails, attachments, demonstrations or other communications.

4. Information We Do Not Intentionally Request

• The public website is not intended to collect payment-card data, government identification numbers, health information, biometric identifiers, precise geolocation or other highly sensitive information unless expressly requested for a documented business purpose and handled under appropriate safeguards.
• Do not submit confidential customer information, source code, credentials, regulated data or other sensitive information through a general website contact form unless Intellious has specifically instructed you to do so.

5. How We Use Personal Information

• Respond to enquiries, schedule meetings and provide requested information.
• Provide, operate, maintain, secure and improve our websites, services and business operations.
• Evaluate and manage prospective business relationships, proposals, contracts and commercial opportunities.
• Deliver requested resources, newsletters, event communications and other business communications where permitted.
• Perform analytics, troubleshooting, testing, security monitoring, fraud prevention and abuse detection.
• Administer recruitment, employment enquiries and related processes.
• Comply with applicable laws, regulations, court orders, regulatory requests and contractual obligations.
• Establish, exercise or defend legal claims and protect the rights, property and safety of Intellious, our personnel, customers and others.
• Create aggregated or de-identified information for legitimate business, analytical or service- improvement purposes where permitted by law.

6. Legal Bases for Processing — EEA/UK and Similar Jurisdictions

Where GDPR, UK GDPR or a substantially similar framework applies, we will identify and rely on an appropriate lawful basis for processing. Depending on the context, this may include performance of a contract or steps at your request, compliance with a legal obligation, legitimate interests, consent, or another lawful basis recognized by applicable law. Where we rely on legitimate interests, we will consider the nature of the processing, the impact on individuals and applicable safeguards. Where consent is required, it will be requested separately and may be withdrawn subject to legal and operational limitations. The website Privacy Policy should not state that all processing is based on consent. GDPR requires transparency about the purpose and legal basis of processing under Article 13/14.

7. How We Share Personal Information

• Service providers and processors that host, secure, operate, analyze, communicate through, or otherwise support our website and business operations.
• Professional advisers, auditors, insurers, banks, legal counsel and other professional service providers where reasonably necessary
• Affiliates and group entities where necessary for business administration, service delivery, security or support.
• Customers or business partners where you have asked us to facilitate an engagement or where disclosure is necessary to perform an agreed service.
• Government authorities, regulators, courts, law enforcement or other parties where required by law or reasonably necessary to establish, exercise or defend legal rights.
• Parties involved in a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, subject to applicable confidentiality and privacy requirements
• Other parties where you have specifically directed or authorized the disclosure.
• Aggregated or de-identified information that cannot reasonably identify an individual.

We do not authorize third parties to use personal information obtained from Intellious for independent purposes inconsistent with applicable law or the contractual restrictions governing the disclosure.

8. International Data Transfers

Intellious operates across India and the United States and may use service providers or group entities located in other countries. Personal information may therefore be accessed, processed or stored outside the country in which it was collected.

‍
For EEA/UK restricted transfers, where required, Intellious will use an applicable transfer mechanism, which may include the European Commission Standard Contractual Clauses, the UK International Data Transfer Agreement/Addendum, an adequacy decision, or another legally recognized mechanism. The European Commission identifies the modernized SCCs as a mechanism for transfers from the EU/EEA to third countries.

For India, cross-border processing will be managed in accordance with applicable Indian data- protection and sector-specific requirements. The Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 establish the current Indian framework, with the Rules providing a phased commencement structure

Where a customer is the controller/data fiduciary and Intellious acts as processor/data processor, the customer’s instructions and applicable DPA govern international transfers of customer data.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, regulatory, contractual, security, dispute-resolution and legitimate business requirements.

Retention periods vary by data category and purpose. We may retain information longer where required by law, needed to establish or defend legal claims, or necessary to maintain business records.

‍
We will not retain personal information indefinitely merely because it was collected. Retention schedules should be maintained internally and applied to the relevant systems.

10. Security of Personal Information

• We maintain reasonable technical, administrative and organizational safeguards appropriate to the nature and risk of the processing.
• Safeguards may include access controls, least-privilege practices, encryption in transit and where appropriate at rest, logging and monitoring, vulnerability management, backups, incident response and personnel confidentiality obligations.
• No method of transmission or storage is completely secure. Accordingly, we cannot guarantee absolute security.
• If Intellious becomes aware of a security incident involving personal information, we will assess and respond in accordance with applicable law, contractual obligations and our incident- response procedures.

11. Your Privacy Rights

Subject to applicable law and relevant exceptions, individuals may have rights to access, correct, delete, restrict or object to processing, withdraw consent, receive a portable copy of certain information, or lodge a complaint with a competent supervisory authority.

‍
California residents may have additional rights under the CCPA/CPRA, including rights relating to access/know, deletion, correction, opt-out of sale or sharing, limitation of certain uses of sensitive personal information, and non-discrimination. Covered businesses must provide specified disclosures and request mechanisms

Where applicable, California opt-out preference signals such as Global Privacy Control must be handled in accordance with the applicable CCPA rules.

Individuals may submit requests using the contact details in this policy. We may need to verify identity before fulfilling a request and may retain information necessary to comply with legal obligations or establish, exercise or defend legal claims.

Where a request relates to customer data that Intellious processes on behalf of a customer, Intellious may refer the request to the relevant customer/controller and provide reasonable assistance as required by the applicable contract and law.

12. Direct Marketing and Communications

• We may send service-related, administrative or transactional communications where permitted by law.
• Marketing communications will be sent in accordance with applicable direct-marketing and electronic-communications requirements.
• You may opt out of marketing communications at any time using the unsubscribe mechanism in the message or by contacting us.
• An opt-out from marketing does not prevent necessary service, security, legal or transactional communications.

13. Cookies and Similar Technologies

Our use of cookies, pixels, tags, local storage and similar technologies is described in the Intellious Cookie Policy.

‍
Where applicable law requires prior consent for non-essential cookies or similar technologies, those technologies will not be activated before the required consent is obtained. For example, UK guidance states that non-essential analytics and advertising cookies generally require consent, while strictly necessary cookies may be exempt

14. Children

The website is intended for business and professional audiences and is not directed to children. We do not knowingly solicit personal information from children through general website forms. If applicable law imposes a higher age threshold or additional requirements, those requirements will apply.

‍
If we learn that personal information has been collected from a child in circumstances where collection was not permitted, we will take reasonable steps to delete it or otherwise process it as required by law.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, applications, social-media services, recruitment platforms, event platforms or other services. Their privacy practices are governed by their own policies.

‍
A link does not constitute an endorsement or guarantee by Intellious. We are not responsible for the privacy, security, availability or content of third-party services that we do not control.

16. Customer and Confidential Business Data

• Information supplied to Intellious by a customer under a services engagement may be confidential business information and may be subject to contractual confidentiality and data- processing obligations.
• Customer data will not be used for unrelated advertising, benchmarking or product development except as expressly permitted by contract or applicable law.
• Nothing in this public Privacy Policy grants Intellious ownership of customer data.

17. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, processing practices, legal requirements or security practices.
Material changes will be communicated through the website or other appropriate means where required. The updated version will state its effective date.

A revised policy does not retroactively change the legal basis for processing that has already occurred unless permitted by applicable law.

18. Governing Law and Dispute Handling

This Privacy Policy is intended to operate subject to mandatory privacy rights and remedies applicable to the individual. Nothing in this section is intended to waive a right that cannot lawfully be waived.

Except where mandatory law requires otherwise, disputes concerning the website and this policy will be governed by the law and forum specified in the Intellious Terms of Service. The final governing- law, jurisdiction and arbitration provisions must be reviewed and completed by counsel based on the contracting Intellious legal entity.

19. Contact and Grievance Redressal

Privacy enquiries, rights requests and complaints should be directed to the privacy contact identified below. The designated Indian grievance mechanism and officer details should be confirmed before publication.

Legal / Privacy Contact

Intellious Tech
USA: 401 E Sonterra Blvd, Suite 375, San Antonio, Texas 78258, USA
India: WeWork Embassy TechVillage, HD-103, Block L, Devarabisanahalli, Outer Ring Road, Bellandur, Bengaluru, Karnataka 560103, India
Email Contact: contact@intellious.tech