Privacy Policy

1. Who we are

Effinium Consulting India Private Limited

Email: hello@effinium.com

2. Information we may collect

The information we collect depends on how you interact with us.

Information you provide directly

We may collect:

• your name;
• business email address;
• telephone number;
• company name and job title;
• information included in enquiries, meeting requests or project discussions;
• communications exchanged with us;
• billing, contracting and vendor information;
• résumés, employment history and other recruitment information; and
• any other information you voluntarily provide.

Information collected when you use our website

We may collect limited technical information, including:

• IP address;
• browser and device type;
• operating system;
• pages visited;
• referral source;
• approximate geographic region;
• date and time of access; and
• website performance and diagnostic information.

We may collect this information through server logs, security services and privacy-conscious analytics tools.

Information obtained through business relationships

We may receive professional contact information from:

• your employer or colleagues;
• clients and prospective clients;
• technology and implementation partners;
• professional networking platforms;
• event organisers; and
• publicly available business sources.

3. How we use personal data

We may use personal data to:

• respond to enquiries and meeting requests;
• understand your business and integration requirements;
• prepare proposals, statements of work and contracts;
• provide consulting, engineering, support and managed services;
• administer client, partner and vendor relationships;
• communicate about projects, services and operational matters;
• maintain records of business communications;
• process payments and meet accounting or tax obligations;
• operate, secure and improve our website;
• detect misuse, security incidents or fraudulent activity;
• evaluate job applications and manage recruitment;
• establish, exercise or defend legal claims; and
• comply with applicable legal and regulatory requirements.

4. Client systems and project data

Effinium provides integration engineering and consulting services involving platforms such as MuleSoft, Workato, APIs, cloud services, enterprise applications and AI-enabled systems.

During an engagement, our personnel may have controlled access to information contained within a client's systems. In these circumstances:

• the client generally determines the purpose and scope of the processing;
• Effinium processes the information only to provide the contracted services;
• access is limited to authorised personnel with a business need;
• processing is subject to the applicable agreement, confidentiality obligations and client instructions; and
• security, access, retention and deletion requirements may be further defined in the relevant contract or data-processing agreement.

5. AI-enabled services

Where our services involve AI models, agents, retrieval systems, MCP-enabled tools or intelligent automation, we aim to apply appropriate technical and organisational controls.

Depending on the engagement, these controls may include:

• restricting the data sent to an AI service;
• masking or minimising personal data;
• applying access controls and approved tool permissions;
• maintaining human approval steps;
• recording model or tool activity;
• implementing provider and model-selection controls; and
• preventing client data from being used for model training where contractually required and supported by the selected provider.

The specific AI providers, data flows and safeguards will depend on the client engagement and applicable contractual terms.

6. Legal grounds and permitted processing

We process personal data where permitted under applicable law, including where:

• you have provided consent;
• processing is necessary to respond to your request;
• processing is required to perform or prepare a contract;
• processing is necessary for legitimate business activities permitted by law;
• processing is required to comply with a legal obligation; or
• processing is necessary to protect rights, systems or individuals.

Where processing is based on consent, you may withdraw that consent by contacting us. Withdrawal will not affect processing that occurred before the consent was withdrawn.

7. How we share information

We may share personal data with:

• employees and authorised contractors;
• cloud-hosting, email, collaboration and productivity providers;
• website hosting, security and analytics providers;
• professional advisers such as accountants, auditors and legal counsel;
• recruitment or background-verification providers;
• delivery partners and subcontractors involved in an authorised engagement;
• government, regulatory or law-enforcement authorities where legally required; and
• an acquiring or successor organisation in connection with a merger, restructuring or transfer of business assets.

We require service providers to handle personal data only for authorised purposes and with appropriate confidentiality and security safeguards.

8. International processing

Some of our technology providers, project partners or clients may process information outside India.

Where personal data is transferred or accessed internationally, we will take reasonable measures to ensure that the transfer is permitted under applicable law and is subject to appropriate contractual, organisational or technical safeguards.

9. Cookies and analytics

Our website may use essential cookies or similar technologies required for:

• security;
• session management;
• network delivery;
• performance; and
• basic website operation.

We may also use limited analytics to understand aggregate website usage and improve performance.

Where legally required, we will request consent before using non-essential cookies. You can also control cookies through your browser settings.

A separate cookie notice may be provided if we introduce advertising, behavioural tracking or additional analytics technologies.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

• provide services;
• maintain business and contractual records;
• comply with legal, accounting and tax requirements;
• resolve disputes;
• enforce agreements; and
• maintain security and audit records.

Retention periods vary based on the nature of the information, contractual obligations and applicable legal requirements.

When information is no longer required, we will delete, anonymise or securely dispose of it, subject to lawful retention requirements.

11. Information security

We use reasonable technical and organisational safeguards appropriate to the nature of the information and the risks involved.

These measures may include:

• access controls and least-privilege permissions;
• authentication and credential-management controls;
• encryption where appropriate;
• logging and monitoring;
• secure development and deployment practices;
• vulnerability and dependency management;
• employee confidentiality obligations;
• incident-management procedures; and
• periodic review of access and security controls.

12. Your rights

Subject to applicable law, you may have the right to:

• request information about the personal data we process;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of personal data where applicable;
• withdraw consent;
• raise a grievance regarding our handling of your data; and
• nominate another person to exercise certain rights where permitted by law.

To submit a request, contact us at hello@effinium.com.

We may need to verify your identity before processing a request. We may also retain certain information where required by law or where a valid legal exception applies.

13. Children's privacy

Our website and consulting services are intended for businesses and professional users. They are not directed to children.

We do not knowingly collect personal data from children through the website. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete the information.

14. Third-party websites

Our website may link to third-party websites or services.

Effinium does not control those external services and is not responsible for their privacy practices. We recommend reviewing the privacy policy of each third-party service before providing personal data.

15. Recruitment

When you apply for a role, we may use your information to:

• assess your qualifications and suitability;
• communicate with you about the recruitment process;
• conduct interviews and assessments;
• verify information or references where permitted; and
• comply with employment-related legal obligations.

Unless a longer period is required or agreed, unsuccessful applicant information will be retained only for a reasonable recruitment and record-keeping period.

16. Grievances and contact

For privacy questions, rights requests or grievances, contact:

Privacy Contact
Effinium Consulting India Private Limited
Creware Coworks
Building No. 4, 2nd Floor
Himagiri Silicon Layout, Thogur Cross
Electronic City Phase I, Electronic City
Doddathoguru, Karnataka 560100
India

Email: hello@effinium.com

We will review and respond to privacy enquiries in accordance with applicable law.

17. Changes to this policy

We may update this Privacy Policy to reflect changes to:

• our services;
• our data-handling practices;
• technology providers;
• legal requirements; or
• organisational arrangements.

The updated version will be published on this page with a revised “Last updated” date. Material changes may also be communicated through another appropriate channel.

Return to the Effinium home page.