Privacy Policy

Last Updated: 19-Feb-2026

GenicMinds Private Limited (“GenicMinds,” “Company,” “we,” “us,” or “our”) recognizes that the responsible collection, processing, storage, transfer, and protection of personal data is fundamental to maintaining trust, operational integrity, and regulatory compliance.

As a technology-driven enterprise operating in domestic and international markets, we adhere to the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.

This Privacy Notice (“Notice”) describes in detail how we process personal data collected through:

• Our official website and associated subdomains
  
• Business communication channels
  
• Recruitment portals and talent acquisition systems
  
• Event registration forms and marketing platforms
  
• Vendor and partner onboarding systems
  
• Any other digital or physical interface linking to this Notice
  

This Notice is designed to align with:

• The Digital Personal Data Protection Act, 2023 (India)
  
• The Information Technology Act, 2000 and applicable Rules
  
• Internationally recognized data governance best practices
  

2. SCOPE OF APPLICATION

This Notice applies to:

• Website visitors
  
• Prospective and existing clients
  
• Vendors and business partners
  
• Job applicants
  
• Event participants
  
• Individuals interacting with GenicMinds through digital or offline means
  

This Notice does not apply to:

• Client-managed systems governed by separate contractual arrangements
  
• Third-party platforms not under our control
  

3. DATA CONTROLLER STATUS

For the purposes of applicable data protection laws, GenicMinds Private Limited acts as:

• A Data Fiduciary under Indian law
  
• A Data Controller where applicable under international standards
  

4. CATEGORIES OF PERSONAL DATA COLLECTED

We may collect, process, and store the following categories of data depending on the nature of engagement:

4.1 Identity Information

• Full name
  
• Professional title
  
• Organizational affiliation
  
• Government-issued identification (where legally required)
  

4.2 Contact Information

• Email address
  
• Telephone number
  
• Corporate mailing address
  
• Country and time zone
  

4.3 Professional and Commercial Information

• Company details
  
• Industry classification
  
• Business requirements
  
• Contractual engagement information
  

4.4 Recruitment and Employment Data

• Resume/CV
  
• Employment history
  
• Educational background
  
• Certifications
  
• Professional references
  
• Interview notes
  
• Background verification results (where applicable)
  

4.5 Technical and Usage Data

• IP address
  
• Browser type and version
  
• Device identifiers
  
• Operating system
  
• Access timestamps
  
• Clickstream data
  
• Referring and exit URLs
  

4.6 Marketing and Communication Preferences

• Newsletter subscription preferences
  
• Event registrations
  
• Feedback submissions
  
• Survey responses
  

4.7 Sensitive Personal Data

We do not intentionally collect sensitive personal data unless required for lawful recruitment, compliance, or contractual purposes, and only with appropriate safeguards.

5. LAWFUL BASIS FOR PROCESSING

We process personal data under one or more of the following lawful bases:

• Explicit consent provided by the data principal
  
• Performance of contractual obligations
  
• Pre-contractual measures requested by the individual
  
• Compliance with legal obligations
  
• Legitimate business interests not overridden by individual rights
  

Where consent is relied upon, individuals may withdraw consent at any time, subject to legal and operational constraints.

6. PURPOSES OF DATA PROCESSING

Personal data may be processed for the following purposes:

6.1 Website Management and Security

To administer, secure, monitor, and optimize website functionality.

6.2 Business Development and Client Engagement

To evaluate inquiries, proposals, partnerships, and contractual engagements.

6.3 Recruitment and Talent Acquisition

To assess, evaluate, and manage candidate applications and employment processes.

6.4 Communication and Relationship Management

To respond to inquiries and maintain professional communication.

6.5 Marketing and Thought Leadership

To share newsletters, research insights, service updates, and event invitations (subject to consent where required).

6.6 Regulatory and Legal Compliance

To comply with statutory obligations, audits, investigations, or lawful governmental requests.

6.7 Risk Management and Fraud Prevention

To detect, investigate, and prevent cybersecurity threats, misuse, and fraudulent activities.

7. DATA SHARING AND DISCLOSURE

We may share personal data strictly on a need-to-know basis with:

7.1 Group Entities and Affiliates

For administrative and strategic coordination.

7.2 Authorized Service Providers

Including:

• Cloud hosting providers
  
• IT infrastructure vendors
  
• Analytics providers
  
• Recruitment platforms
  
• Professional advisors
  

Such parties are bound by confidentiality and data protection agreements.

7.3 Legal and Regulatory Authorities

Where required by law or lawful order.

7.4 Corporate Transactions

In connection with mergers, acquisitions, restructuring, or asset transfers, subject to confidentiality safeguards.

We do not sell personal data.

8. INTERNATIONAL DATA TRANSFERS

Where cross-border transfers occur, we implement appropriate safeguards including:

• Contractual clauses
  
• Vendor due diligence
  
• Access control restrictions
  
• Encryption standards
  

9. DATA RETENTION

We retain personal data only for as long as:

• Necessary to fulfill the purpose of collection
  
• Required by contractual obligations
  
• Mandated by legal or regulatory requirements
  
• Necessary to defend legal claims
  

Upon expiry of retention periods, data is securely deleted, anonymized, or archived in accordance with internal retention policies.

10. DATA SECURITY MEASURES

We implement layered administrative, technical, and physical safeguards, including:

• Role-based access control
  
• Multi-factor authentication
  
• Encryption in transit and at rest (where appropriate)
  
• Secure server infrastructure
  
• Intrusion detection systems
  
• Regular vulnerability assessments
  
• Incident response and breach notification procedures
  
• Employee confidentiality agreements
  
• Periodic compliance audits
  

11. RIGHTS OF DATA PRINCIPALS

Subject to applicable law, individuals may exercise the following rights:

• Right to access personal data
  
• Right to correction and rectification
  
• Right to erasure
  
• Right to withdraw consent
  
• Right to grievance redressal
  
• Right to nominate a representative (as applicable under Indian law)
  

Requests will be subject to identity verification and legal limitations.

12. CHILDREN’S DATA

Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal data from minors.

13. GRIEVANCE OFFICER

In accordance with applicable law, GenicMinds designates a Grievance Officer.

Contact Details:
GenicMinds Private Limited
[Insert Address]
Email: info@genicminds.com
[Insert Officer Name & Contact, if applicable]

14. POLICY AMENDMENTS

This Privacy Notice may be updated periodically to reflect regulatory changes, operational developments, or technological advancements.

The updated version shall be effective upon publication.