Last Updated: January 2026

1. Introduction

BaffleSol Technologies Private Limited and its affiliated entities, including operations in India and the United Arab Emirates (“BaffleSol”, “we”, “us”, or “our”), are committed to protecting the privacy and personal data of individuals who interact with us.

This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal data when you visit www.bafflesol.com, engage with our marketing activities, use our services, attend events, or interact with us as a client, prospect, partner, or candidate.

This Policy complies with applicable data protection laws, including the DPDP Act (India), GDPR (EU/EEA), and UAE PDPL. 

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Data Principal: The individual to whom the personal data relates.
• Data Fiduciary / Controller: BaffleSol, which determines the purpose and means of processing.
• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion. 

3. Personal Data We Collect

a) Information You Provide

• Name, email address, phone number
• Company name, job title, business contact details
• Enquiries, demo requests, downloads, webinar or event registrations
• Recruitment data (resume, qualifications, work history)

b) Automatically Collected Information

• IP address, browser and device information
• Website usage data, pages visited, session duration
• Cookies and similar tracking technologies

c) Client & Contractual Data

• Business contact information
• Support communications and service records
• System access data limited strictly to contractual scope 

4. Legal Basis for Processing

We process personal data only where permitted by law. 

5. How We Use Personal Data

We use personal data strictly for:

• Responding to enquiries, demo requests, and downloads
• Sales, marketing, and business communication (with consent)
• Event and webinar management
• Delivering contracted services and support
• Recruitment and employment evaluation
• Website analytics, performance, and security
• Fraud prevention, risk management, and legal compliance

We do not process personal data for purposes incompatible with those stated above. 

6. Consent & Withdrawal

• Consent is obtained through explicit, unticked opt-in mechanisms on our website and digital forms.
• Consent is freely given, informed, specific, and revocable.
• You may withdraw consent at any time by contacting us (see Section 12).
• Withdrawal does not affect processing carried out prior to withdrawal. 

7. Data Sharing & Disclosure

We do not sell personal data.

We may share personal data with:

• Service providers (CRM, cloud hosting, analytics, marketing tools)
• Affiliates or group entities for operational purposes
• Regulators or authorities, where legally required
• Successor entities in case of merger, acquisition, or restructuring

All recipients are contractually bound to maintain appropriate confidentiality and data protection safeguards. 

8. Cross-Border Data Transfers

As a global services organization operating in India and the UAE and serving clients worldwide, personal data may be processed or stored outside the country of collection.

We ensure that all cross-border transfers:

• Comply with DPDP Act, GDPR, and UAE PDPL
• Are subject to appropriate contractual, technical, and organizational safeguards
• Follow internationally recognised data protection standards 

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.

Indicative retention periods:

• Website analytics and cookie-related data: up to 15 months
• Marketing and sales leads: up to 18 months of inactivity
• Event and webinar registration data: up to 24 months
• Client data: contract duration plus statutory retention
• Recruitment data: up to 12 months

Personal data is securely deleted or anonymised once the applicable retention period expires. 

10. Security Safeguards

We implement reasonable technical and organisational safeguards, including:

• Secure servers and encrypted communications
• Role-based and need-to-know access controls
• Periodic security reviews and monitoring

In the event of a personal data breach, we will comply with applicable notification and remediation obligations. 

11. Your Rights

Depending on your location and applicable law, you may have the right to:

• Access your personal data
• Request correction or updating
• Request erasure
• Withdraw consent
• Raise grievances or complaints
• Nominate a representative (India)

EU/EEA residents may also have rights to data portability, restriction, or objection to processing. 

12. Grievance Redressal & Contact

For privacy-related requests, questions, or grievances:

📧 compliance@bafflesol.com

We will respond within timelines prescribed under applicable laws. 

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies independently. 

14. Governing Law

This Privacy Policy is governed by the laws of India. Where applicable, local data protection laws (including GDPR and UAE PDPL) shall apply. 

15. Updates to This Policy

We may update this Policy from time to time. The latest version will always be available on our website with the updated effective date.