PRIVACY POLICY

Effective Date: 6 March 2026

Last Updated: 6 March 2026

1. About This Policy

This Privacy Policy applies to Brand Vantage Marketing Pvt. Ltd., a company incorporated in India under the Companies Act, 2013, with its registered office at 11th Floor, Sigma Soft Tech Park, Gamma Block, Bengaluru, Karnataka (“Brand Vantage”, “we”, “us”, or “our”).

We operate the website https://brandvantage.in and provide offshore staffing, talent sourcing, and recruitment services to businesses globally.

This Policy explains how we collect, use, store, disclose, and protect personal information in accordance with:

  • The Information Technology Act, 2000 (India)
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
  • The Digital Personal Data Protection Act, 2023 (DPDPA) and applicable rules thereunder
  • Other applicable data protection laws, including the GDPR (EU), Australian Privacy Act 1988, and relevant US state privacy laws, to the extent they apply to our international clients and contacts

2. Information We Collect

2.1 Information You Provide to Us

When you contact us, submit an enquiry, or engage our services, we may collect:

  • Full name and job title
  • Business name and ABN/company registration details
  • Business and personal email addresses
  • Phone numbers
  • Postal and billing addresses
  • Details of your staffing or recruitment requirements
  • Payment and invoicing information (processed through secure third-party providers)
2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages visited and time spent on site
  • Referring website or source
  • Device type and operating system
  • Cookies and similar tracking technologies (see Section 8)
2.3 Candidate Information

If you apply for a role facilitated by Brand Vantage, we may collect:

  • Resume or CV, including employment history and qualifications
  • Communication and language test results (including Versant assessments)
  • Technical evaluation scores
  • Interview notes
  • References and referee contact details
  • Right to work documentation
2.4 Sensitive Personal Data

To the extent required by applicable law, we treat the following as sensitive personal data or information (SPDI) under the SPDI Rules 2011:

  • Financial information, to the extent required for billing
  • Health or medical information, only where relevant to a candidate’s role suitability and disclosed voluntarily

We do not collect sensitive personal data unless it is necessary for the purpose for which it is collected, and we will obtain your explicit consent before doing so.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide talent sourcing, staffing, and recruitment services
  • To communicate with you about your enquiry, application, or engagement
  • To assess candidate suitability through testing and evaluation
  • To issue invoices and process payments
  • To comply with our legal and regulatory obligations
  • To improve our website and services
  • To send service-related communications and updates
  • To maintain records as required by Indian law

We will not use your personal data for purposes that are incompatible with the original purpose for which it was collected without your consent.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process personal data on the following lawful grounds:

  • Consent: Where you have given us clear consent to process your personal data for a specific purpose
  • Contract: Where processing is necessary to perform a contract with you, or at your request, prior to entering into a contract
  • Legal obligation: Where we need to process your data to comply with a legal requirement
  • Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights

For international clients based in the EU, UK, or Australia, we may also rely on equivalent legal bases under their applicable laws, including the GDPR and the Australian Privacy Act.

5. Disclosure of Personal Information

We do not sell your personal data. We may share your information in the following circumstances:

5.1 Service Providers

We may engage third-party service providers who assist us in operating our business, including IT infrastructure providers, assessment platform providers (such as Versant), and payment processors. These parties are contractually bound to maintain confidentiality and process data only as instructed.

5.2 Client Businesses

Where you are a candidate, we will share relevant profile information with prospective client businesses as part of our talent placement process. We will inform you before doing so.

5.3 Legal Requirements

We may disclose your personal data where required by law, court order, or governmental authority in India or any other applicable jurisdiction.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

6. Cross-Border Data Transfers

Brand Vantage operates globally, with offices in India, the United States, Australia, and the UAE. We may transfer personal data across borders in the course of our business operations.

Where we transfer personal data originating from the European Economic Area, the United Kingdom, or Australia to India or other third countries, we will ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by the relevant authority
  • The recipient country being on a list of countries notified by the Indian Government under the DPDPA as providing adequate data protection
  • Other appropriate transfer mechanisms as required by applicable law

7. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

  • Client and candidate records: 7 years from the end of the engagement, in accordance with Indian tax and company law requirements
  • Website visitor data: 12 months from collection
  • Marketing and enquiry data: Until you withdraw consent or request deletion, subject to any legal retention obligations

Once retention periods expire, personal data is securely deleted or anonymised.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and to analyse site traffic. Cookies are small data files stored on your device.

We use the following types of cookies:

  • Essential cookies: Required for the website to function properly
  • Analytical cookies: Help us understand how visitors use our site (e.g., Google Analytics)
  • Functional cookies: Remember your preferences

You may control cookie settings through your browser. Disabling cookies may affect your experience on our website. By continuing to use our website, you consent to our use of cookies in accordance with this Policy.

9. Security of Personal Data

We implement reasonable security practices and procedures as required under the SPDI Rules 2011, including administrative, technical, and physical safeguards to protect your personal data from unauthorised access, loss, misuse, or disclosure.

Where we engage data processors, we require them to maintain equivalent security standards.

In the event of a data breach that affects your rights and interests, we will notify you and the relevant authority as required under applicable law.

10. Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

  • Right to access: Request confirmation of whether we hold your personal data and obtain a copy
  • Right to correction: Request correction of inaccurate or incomplete personal data
  • Right to erasure: Request deletion of your personal data, subject to any legal retention obligations
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time
  • Right to grievance redressal: Lodge a complaint with our Grievance Officer (see Section 12)
  • Right to nominate: Under the DPDPA, you may nominate another individual to exercise rights on your behalf in the event of your death or incapacity

For clients and candidates in Australia, you also have rights under the Australian Privacy Act 1988, including the right to complain to the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, please contact us using the details in Section 12.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it promptly.

12. Grievance Officer and Contact Details

In accordance with the Information Technology Act, 2000 and the SPDI Rules, and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address concerns regarding the processing of personal data.

Grievance Officer Brand Vantage Marketing Pvt. Ltd. 11th Floor, Sigma Soft Tech Park, Gamma Block, Bengaluru, Karnataka, India Email: contact@brandvantage.in Website: https://brandvantage.in

Complaints will be acknowledged within 5 business days and resolved within 30 days of receipt, or such shorter period as may be prescribed under applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this document and post the updated version on our website. For material changes, we will notify you by email or by a prominent notice on our website.

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka.