Privacy Notice

1. Data Fiduciary

CyBlore IT Solutions (Data Fiduciary) determines the purpose and means of processing personal data collected through cyblore.com and related forms.

2. Personal data we process

Depending on how you interact with us, we may process:

• Identity & contact: name, email, phone, company, designation, address
• Enquiry / sales: message content, project interest
• Careers: CV/resume, skills, experience, compensation expectations, portfolio/LinkedIn links
• Vendors: company registration, GST/PAN (if provided), bank details (if provided), service capability
• Consent records: purposes accepted or refused, timestamp, notice version, technical metadata
• Analytics (only after opt-in): hashed visitor identifier, pages viewed, device/browser class, referrer/UTM
• Admin accounts: staff email, name, role, login and audit events

We do not run advertising pixels or sell personal data. Optional analytics run only after you opt in. See our Cookie & storage notice.

3. Purposes of processing

• Responding to enquiries and providing requested information or services
• Recruitment — evaluating applications and communicating with candidates
• Vendor onboarding — assessing partnership suitability and contracting
• Optional marketing — product updates or opportunities by email/WhatsApp only if you give separate marketing consent
• Optional analytics — measuring site usage to improve content and performance
• Security & abuse prevention — rate limits, fraud/honeypot checks, audit logs
• Legal compliance — responding to lawful requests and maintaining required records

4. Consent

Where processing is based on consent under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action. You may refuse optional purposes (marketing, analytics) without losing access to the core website.

• Form submissions include a processing notice for the stated purpose (enquiry, application, vendor registration).
• Marketing is optional and unchecked by default.
• Analytics cookies/storage are off until you opt in via the banner or Cookie settings.
• You may withdraw consent as easily as you gave it using Cookie settings, or by emailing privacy@cyblore.com / submitting a data request.

5. Your rights (Data Principal)

Subject to the DPDP Act, you may request:

• Access to personal data we hold about you
• Correction and completion of inaccurate or incomplete data
• Erasure of personal data (subject to legal retention duties)
• Withdrawal of consent for optional processing
• Grievance redressal (see section 9)
• Complaint to the Data Protection Board of India after exhausting our grievance process, once the Board is operational for such complaints

Use Download / delete my data or email privacy@cyblore.com. We may need to verify your identity before fulfilling a request.

6. Sharing & processors

We may share personal data with:

• Hosting providers (e.g. Hostinger for the static site; AWS EC2 for our API)
• Email/WhatsApp notification providers when configured (only for consented or transactional messages)
• Professional advisors and authorities where required by law

We do not sell personal data. Processors are engaged to support the purposes above under appropriate contractual and security controls.

7. Retention

• Contact enquiries: up to 24 months after last meaningful contact
• Career applications: up to 24 months from submission (unless hired or longer retention is required)
• Vendor registrations: for the relationship + up to 7 years where tax/contract records require
• Marketing contacts: until consent is withdrawn, then deleted or suppressed
• Analytics events: up to 26 months
• Consent and security/audit logs: up to 36 months
• Admin account records: for the employment/engagement period + as required by law

Automated retention cleanup runs on the API for form and analytics records according to these periods, unless a longer period is required for legal claims or compliance.

8. Security

We apply reasonable security safeguards including TLS in transit, access control (including role-based admin access and audit logging), hashed passwords for staff accounts, and rate limiting on public endpoints. No method of transmission is perfectly secure; please contact privacy@cyblore.com if you suspect a breach involving your data.

9. Grievance Officer

For grievances relating to personal data processing under the DPDP Act / applicable IT rules:

10. Children

Our website and services are directed at businesses and professionals aged 18+. We do not knowingly process personal data of children. If you believe a child has provided data, contact privacy@cyblore.com for deletion.

11. Changes

We may update this notice. Material changes will update the version identifier and date above. Continued use after an update constitutes acknowledgment of the revised notice. For significant changes to optional processing, we will seek fresh consent where required.