Litmus7 Systems Consulting Private Limited, its subsidiaries, associates, affiliates (collectively, “Litmus7”, “we” “us”, or “our”) are committed to protecting your privacy and respecting your choices.

This Privacy Notice (“Privacy Notice”) outlines how we collect and process your Personal Data in accordance with applicable data privacy laws.

We value your privacy and are committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your Personal Data across our operations.

In this Privacy Notice, “Personal Data” or “Personal Information” shall mean any information about an individual who can be identified from that information or from that information combined with other information to which we are likely to have access, including without limitation, information such as name, address, telephone number, email address, identification numbers, location data, and online identifiers.

The following Personal Data shall be collected by Litmus7 (“Personal Data”)

We process your Personal Data when it is necessary for the performance of a contract to which you are the party or in order to take steps at your request prior to entering into a contract or based on your consent, as per applicable laws.

We process your Personal Data only where we have a lawful basis under applicable law. Depending on the jurisdiction and processing activity, this may include consent, performance of a contract or pre-contractual steps, compliance with legal obligations, legitimate interests pursued by us or a third party where not overridden by your rights, vital interests, public interest or legally recognised legitimate uses. Where we rely on legitimate interests, we consider and balance those interests against your privacy rights and expectations. Where consent is required, including for certain marketing, cookies, sensitive Personal Data, cross-border transfers, or children’s data, we will seek consent in the manner required by applicable law.

We may process sensitive Personal Data, where permitted by applicable law and necessary for a specified and lawful purpose. This may include government-issued identifiers, financial data, background verification data, CCTV footage, access logs, and related physical security information. We process such data only to the extent required for identity verification, onboarding, statutory compliance, payments, background checks, workplace safety, security, fraud prevention, contractual obligations, or legal claims. Where applicable law requires consent for processing sensitive Personal Data, we will obtain such consent unless another lawful basis or statutory exception applies.

We do not generally make decisions producing legal or similarly significant effects concerning you based solely on automated processing, including profiling, without human involvement. Where we do carry out such automated decision-making or profiling, we will do so only as permitted by applicable law and, where required, on the basis of your consent. In such cases, you have the right to request human review of the decision, to express your point of view, and to contest the decision.

Your Personal Data will be accessible to certain authorized Litmus7’ employees in internal functions such as marketing, sales, human resources, finance, project delivery units, etc.as on case-to-case basis, depending upon the purpose for which information was shared. We do not sell your Personal Data.

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When no longer required, data is securely deleted, anonymized, or destroyed.

A cookie is a piece of data that a website can send to your browser, which may then be stored on your computer as a tag that identifies your computer. While cookies are often only used to measure website usage and effectiveness and to allow for ease of navigation or use and as such, are not associated with any Personal Data, they are also used at times to personalise a known visitor's experience to a website by being associated with profile information or user preferences.

To know more about cookies used by Litmus7, please visit our Cookie Policy.

The Website may contain links to external applications, plug-ins, or websites operated by third parties. Please note that Litmus7 does not own, control, or assume responsibility for the privacy practices, security measures, or tracking mechanisms utilized by these external entities.

Your interactions with any third-party services, including their use of cookies and tracking pixels, are governed strictly by their respective privacy policies rather than this Privacy Notice. We strongly encourage you to exercise caution and thoroughly review the privacy notices of any outside websites or applications you visit.

We do not collect and process the personal data of children under the relevant minimum age under applicable local legal requirements except for specific services and upon the consent of the holder of parental responsibility.

We may transfer your Personal Data to Litmus7 group entities, service providers, vendors, professional advisers, or other authorised recipients located outside your country or region of residence, including jurisdictions that may not provide the same level of data protection as your home jurisdiction.

Where required by applicable law, we rely on appropriate safeguards or transfer mechanisms, which may include adequacy decisions, standard contractual clauses, data transfer agreements, intra-group transfer arrangements, consent, contractual necessity, security assessments, certification mechanisms, regulatory filings, or other legally recognised transfer mechanisms.

For transfers from China, Japan, Singapore, Australia, the United Kingdom, the European Economic Area, the UAE, India, California or other applicable jurisdictions, we will apply the relevant local requirements, including any required notice, consent, transfer impact assessment, comparable protection assessment, contractual protection, regulatory filing, or security assessment.

We implement and maintain robust technical, organizational, and physical security measures designed to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, damage, alteration, or disclosure. Our commitment to data privacy is embedded in our corporate culture. All employees undergo mandatory, periodic data protection and cybersecurity training aligned with global compliance requirements. We practice strict data minimization, ensuring we only collect and retain data that is necessary for specified business purposes. Furthermore, we subject all third-party vendors, suppliers, and cross-border partners to rigorous privacy and security risk assessments.

In the event of a Personal Data breach, we will assess the incident and notify affected individuals, regulators, supervisory authorities, or competent authorities where required by applicable law and within the timelines prescribed by such law. This may include notification to the Data Protection Board of India, the UK Information Commissioner's Office, relevant US state authorities or affected individuals, the Australian Information Commissioner, Singapore's Personal Data Protection Commission, China's competent authorities, Japan's Personal Information Protection Commission, the UAE Data Office, or other applicable authorities, depending on the facts of the incident and the jurisdictions involved.

Mr. Jacob P. Thampy will be responsible for addressing any complaints or grievances related to the Personal Data shared with Litmus7. The contact details of the designated grievance officer are provided below:

Attention: Mr. Jacob P. Thampy
Email ID: jacob@litmus7.com
Contact Number: +91 - 9048652717
Address: #1501, 15th Floor, Lulu Cyber Tower 2, Infopark SEZ, Infopark P.O, Kakkanad, Ernakulam, Kerala - 682042

Where the Digital Personal Data Protection Act, 2023 applies, we process your Personal Data on the basis of your consent or for the "legitimate uses" permitted under Section 7 of the DPDP Act (for example, where you voluntarily provide your Personal Data, for employment purposes, to comply with a legal obligation, or to respond to a medical emergency). Where we rely on your consent, that consent will be free, specifically informed, unconditional and unambiguous, given through clear affirmative action, and limited to the Personal Data necessary for the specified purpose. Before or at the time of seeking consent, we will provide you with an itemized notice describing the Personal Data to be collected and the purpose of processing.

You may withdraw your consent at any time, and we will make the process of withdrawal as easy as it was to give consent. On withdrawal, we will cease processing your Personal Data within a reasonable time unless we are permitted or required by law to continue. The consequences of withdrawal will be borne by you, and withdrawal will not affect the lawfulness of processing carried out before the withdrawal. This Privacy Notice is available in English and, on request, in any language specified in the Eighth Schedule to the Constitution of India.

For Data Principals in India, a "child" means a person who has not completed eighteen (18) years of age. We will not process a child's Personal Data without obtaining verifiable consent from a parent or lawful guardian. We will not undertake any processing of a child's Personal Data that is likely to cause a detrimental effect on the well-being of the child, nor will we carry out tracking, behavioral monitoring, or targeted advertising directed at children. The same protections apply to persons with a disability who have a lawful guardian.

If you are a Data Principal in India, you have, in addition to the rights described above: (a) the right to obtain a summary of the Personal Data we process and the processing activities undertaken; (b) the right to correction, completion, updating and erasure of your Personal Data; (c) the right to readily-available grievance redressal; and (d) the right to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity. Where we no longer need your Personal Data for the specified purpose, and retention is not required by law, we will erase it and cause our Data Processors to do the same. You may also lodge a complaint with the Data Protection Board of India, ordinarily after exhausting our grievance redressal mechanism.

If Litmus7 is notified by the Central Government as a Significant Data Fiduciary under the DPDP Act, we will appoint a Data Protection Officer based in India who will be responsible for answering questions about the processing of your Personal Data and who will report to our Board or equivalent governing body.

Where required by other applicable laws, we will also appoint, designate, or make available appropriate privacy contacts, representatives, or responsible persons, such as a Data Protection Officer, UK or EU representative, Singapore Data Protection Officer, China personal information protection representative or contact, or other privacy contact required by applicable law.

We monitor the countries from which we collect Personal Data and ensure that the local applicable data protection laws are complied with. For Illustration:

In case of any clarifications or any comments, you may have on this Privacy Notice, you may reach out to legal@litmus7.com

We may amend, modify, or update this Privacy Notice at our sole discretion whenever necessary. The latest published version will always take precedence over any prior version. We will not reduce your rights under this Privacy Notice without your explicit consent. To remain informed, we encourage you to review this Privacy Notice periodically for updates.