Privacy Policy

Innovatics ("Innovatics," "we," "us," or "our") is a data analytics and AI consulting company serving clients across the United States, Australia, Canada, India, and other regions worldwide. We help organizations turn data into measurable business outcomes through data strategy, data engineering, business intelligence, advanced analytics, machine learning, and conversational AI.

We take privacy seriously, and we hold ourselves to the same standard of rigor with personal data that we bring to our client work. This Privacy Policy explains what information we collect, how we use and protect it, the choices you have, and the rights available to you under applicable privacy laws.

This policy applies to our website at teaminnovatics.com, our marketing and sales activities, our recruitment processes, and our business operations. It also explains, separately and clearly, how we handle client data that we process on behalf of our customers during consulting engagements.

By using our website or engaging with us, you acknowledge the practices described in this policy.

1Scope of This Policy

This policy covers two distinct relationships, and the difference matters:

2Information We Collect

We collect only the information we need, and we are transparent about what that is.

2.1 Information You Provide Directly

• Identity and contact details: name, business email address, phone number, job title, and company name.
• Communication content: the messages, inquiries, project requirements, and other information you share when you fill out a form, request a consultation, or correspond with us.
• Event and marketing data: registration details for webinars, events, and downloadable resources, along with your communication preferences.
• Recruitment data: the information you submit when you apply for a position, including your name, contact details, resume, work history, and qualifications.

2.2 Information We Collect Automatically

When you visit our website, we and our analytics providers may collect:

• IP address and approximate location derived from it
• Browser type and version, device type, and operating system
• Pages viewed, links clicked, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 6)

2.3 Information From Third Parties

We may receive limited information from professional networking platforms, lead-generation and marketing partners, recruiting agencies, referrals, and publicly available business sources. We use this information to qualify business opportunities, evaluate candidates, and improve the relevance of our outreach.

We do not knowingly collect sensitive personal information through our website, and we ask that you do not submit it to us unless a specific, lawful business reason requires it.

3How We Use Your Information

We use personal data for clearly defined business purposes:

• To respond to your inquiries and provide the information or consultation you request
• To deliver, manage, and improve our services and our website
• To send relevant business communications, updates, and marketing where permitted, and always with an easy way to opt out
• To organize and follow up on events, webinars, and resource downloads
• To evaluate job applications and manage our recruitment process
• To analyze website performance and understand how visitors engage with our content
• To protect the security and integrity of our systems
• To comply with legal, regulatory, and contractual obligations

4Legal Bases for Processing

Where the GDPR, the UK GDPR, or similar frameworks apply, we rely on one or more of the following legal bases:

• Consent, for example when you opt in to marketing communications or accept non-essential cookies. You can withdraw consent at any time.
• Contract, when processing is necessary to take steps at your request before entering into an agreement or to perform a contract with you or your organization.
• Legitimate interests, such as operating and securing our website, conducting business-to-business marketing, and growing our business, balanced against your rights and freedoms.
• Legal obligation, when we are required to process data to meet legal or regulatory requirements.

Where Indian law applies, we collect and process personal data under the Digital Personal Data Protection Act (DPDPA) on the basis of consent or other lawful grounds, and for specified, lawful purposes.

5How We Share Information

We share personal data only when there is a clear reason to do so, and always with appropriate safeguards.

• Service providers and processors: trusted vendors that support our operations, such as cloud hosting, analytics, email and CRM platforms, recruitment systems, and IT security. These providers act on our instructions under contractual confidentiality and data protection obligations.
• Within our group and locations: our teams in the United States, India, and other locations may access data as needed to respond to you and operate our business.
• Professional advisors: legal, accounting, and audit advisors where necessary.
• Business transfers: if Innovatics is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of that transaction, subject to the protections described in this policy.
• Legal and regulatory disclosure: we may disclose information where we reasonably believe it is necessary to comply with a law, court order, or legal process, to protect our rights or the safety of others, or to investigate fraud or security incidents.

We never sell personal information to third parties.

6Cookies and Tracking Technologies

Cookies are small text files placed on your device that help a website function and help us understand how it is used. We use cookies and similar technologies, and you control how they are applied through our cookie banner and your browser settings.

The categories we use:

• Strictly necessary cookies enable core functions such as security, navigation, and access to secure areas. The site cannot operate properly without them.
• Performance and analytics cookies help us measure traffic and understand how visitors interact with our content so we can improve it. We use tools such as Google Analytics for this purpose.
• Functional cookies remember your preferences and settings to give you a smoother experience.
• Targeting and advertising cookies help us deliver and measure business-focused campaigns, including through platforms such as LinkedIn. These may be set by third parties.

You can accept or decline non-essential cookies at any time. Disabling certain cookies may affect how parts of the website function. For details on how our analytics and advertising partners handle data, please review their respective privacy policies.

7International Data Transfers

Because we operate across the United States, Australia, Canada, India, and other regions, your personal data may be transferred to and processed in countries other than your own, including countries that may not provide the same level of data protection as your home jurisdiction.

When we transfer personal data across borders, we apply appropriate safeguards, which may include Standard Contractual Clauses, adequacy decisions where available, and contractual and technical protections such as encryption and access controls. We transfer data only where a lawful mechanism is in place.

8Data Retention

We retain personal data only for as long as it is needed for the purposes described in this policy, or as required to meet legal, regulatory, tax, accounting, or contractual obligations. When data is no longer required, we securely delete or anonymize it.

Indicative retention periods:

• Sales and marketing contacts: retained while the relationship is active and until you withdraw consent or object, after which we remove or anonymize the data within a reasonable period.
• Recruitment data: retained for the duration of the relevant hiring process and, where permitted, for a limited period afterward so we can consider you for future openings. You can ask us to remove your data sooner.
• Website analytics data: retained according to the configured settings of our analytics tools.
• Contractual and financial records: retained for the period required by applicable law.

9Client Data We Process on Your Behalf

A large part of our work involves processing data that belongs to our clients. We treat this responsibility with the seriousness it deserves.

• We process client data strictly in line with the client's documented instructions and the terms of our services agreement and, where applicable, a Data Processing Agreement.
• The client remains the controller of that data and is responsible for its own privacy notices, lawful bases, and data subject communications.
• We apply confidentiality obligations, access controls, and security measures to protect client data throughout an engagement.
• We do not use client confidential data, including data used in analytics or machine learning engagements, to train our own general-purpose models or for any purpose outside the engagement, unless the client has expressly authorized it in writing.
• On completion of an engagement, we return or securely delete client data in accordance with the agreement.

If you are an individual whose data has been provided to us by one of our clients, please direct your privacy requests to that client, who is the controller. We will support our clients in responding to such requests.

10Data Security

We maintain technical, organizational, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, and alteration. These include encryption, access controls, network protection, monitoring, and regular review of our security practices. We also conduct risk assessments for higher-sensitivity data so that controls match the level of risk.

No method of transmission or storage is completely secure, but we work continuously to maintain a strong security posture and to improve it over time.

11Data Breach Notification

In the unlikely event of a data breach that affects personal data, we will act promptly to contain and assess the incident, take steps to reduce risk, and notify affected individuals and the relevant authorities where required by applicable law. Transparency and timely action are our priorities.

12Your Privacy Rights

Depending on where you live and which laws apply, you may have some or all of the following rights:

• Access: to know what personal data we hold about you and to obtain a copy.
• Correction: to have inaccurate or incomplete data corrected.
• Deletion: to request erasure of your personal data in certain circumstances.
• Restriction and objection: to limit or object to certain processing, including direct marketing.
• Portability: to receive your data in a portable format where applicable.
• Withdraw consent: to withdraw consent at any time, without affecting processing carried out before withdrawal.
• Non-discrimination: to exercise your rights without receiving discriminatory treatment.

For California residents

Under the CCPA and CPRA, you have the right to know what personal information we collect and how we use and disclose it, the right to delete and correct it, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. You may also designate an authorized agent to act on your behalf.

For residents of the EU, UK, and similar jurisdictions

You may exercise the GDPR rights listed above and lodge a complaint with your local supervisory authority.

For residents of India

Under the DPDPA, you have rights to access, correction, and erasure, the right to nominate another person to exercise your rights, and the right to grievance redressal.

For Australian residents

You have rights of access and correction under the Australian Privacy Principles.

To exercise any right, contact us using the details in Section 16. We will verify your identity before responding and will reply within the timeframe required by applicable law.

13Marketing Communications

When we send business communications, we give you a clear way to opt out, either by using the unsubscribe link in the message or by contacting us directly. We honor opt-out requests promptly. We may still send you transactional or service-related messages that are necessary for our relationship.

14Third-Party Links

Our website may contain links to third-party websites and resources. We provide these for convenience and do not control or take responsibility for the content or privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.

15Children's Privacy

Our website and services are intended for businesses and professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

16Contact Us

If you have questions about this policy, wish to exercise your privacy rights, or would like to reach our Data Protection or Grievance Officer, please contact us:

We aim to acknowledge and respond to all privacy requests within the timeframes set by applicable law.

17Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date above and, where appropriate, provide additional notice. We encourage you to review this page periodically.