Privacy Notice

Last updated: November 02, 2026

Prodapt Solutions Private Limited and its affiliates (“Prodapt”, “We”, “Our”, or “Us”) are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, store, and safeguard your personal data when you interact with us through our website, business communications, events, services, or other engagement channels.

Personal Data means any information that relates to an identified or identifiable individual.

If you have any questions regarding this Privacy Notice or our privacy practices, please contact us at data.privacy@prodapt.com Or Sandeep.s@prodapt.com

Personal Data We Collect

Depending on your interaction with Prodapt, we may collect personal data such as:

1. Name and contact information
2. Business email address
3. Organization and job title
4. Location information
5. Telephone number
6. Information submitted through forms, emails, messages, or other communications
7. Website usage information and technical data such as IP address, browser type, device information, and cookie preferences

Where required, we may also collect additional information necessary to fulfill legal, contractual, recruitment, or business requirements.

Social Media and Public Platforms

Prodapt maintains official social media pages and professional networking channels to communicate with customers, prospects, partners, and the public. Information shared through these platforms may be processed in accordance with this Privacy Notice and the privacy policies of the respective platform providers.

How We Use Personal Data

Prodapt uses personal data for legitimate business purposes, including:

1. Providing requested information, products, or services
2. Responding to inquiries and support requests
3. Managing business relationships and communications
4. Recruitment and employment-related activities
5. Conducting business operations and service delivery
6. Improving website functionality and user experience
7. Monitoring compliance with legal, regulatory, and contractual obligations
8. Protecting security, preventing fraud, and managing risks
9. Maintaining records of communications, consent preferences, and privacy requests

We process personal data only to the extent necessary for these purposes.

Legal Basis for Processing Personal Data

Prodapt processes personal data only where a valid legal basis exists under applicable data protection laws. Depending on the circumstances, processing may be based on:

1. Consent : Consent provided by the individual
2. Contractual Necessity : Performance of a contract or steps taken prior to entering into a contract
3. Legal Obligation : Compliance with legal or regulatory obligations
4. Vital Interest : Protection of vital interests of an individual
5. Public Interest : Performance of tasks carried out in the public interest
6. Legitimate Interest : Legitimate business interests, provided such interests do not override the individual's rights and freedoms

Where processing is based on consent, individuals may withdraw their consent at any time, subject to applicable legal requirements.

Disclosure of Personal Data

We may share personal data with:

1. Authorized Prodapt personnel who require access for legitimate business purposes
2. Affiliates and group companies
3. Service providers, contractors, and business partners supporting our operations
4. Regulatory authorities, law enforcement agencies, courts, or government bodies when required by law

Other parties where consent has been provided or disclosure is otherwise permitted by applicable law

All third parties receiving personal data are required to maintain appropriate confidentiality and security safeguards.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to support website functionality, enhance user experience, analyse website performance, and, where applicable, support marketing activities.

The categories of cookies may include:

1. Necessary cookies: Required for the website to function properly and securely.
2. Analytics cookies: Help us understand how visitors interact with the website and improve its performance.
3. Marketing Cookies: Used to deliver relevant communications and measure the effectiveness of marketing activities.
4. Third-party cookies: Set by external service providers to support functionality, analytics, or other integrated services.

Users may manage their cookie preferences through the cookie banner or browser settings. Additional information is available in our Cookie Policy.

Third-Party Service Providers

Prodapt engages carefully selected third-party service providers to perform certain business functions on our behalf. These providers are contractually obligated to process personal data only for authorized purposes and to implement appropriate security and privacy controls.

Security Measures

Prodapt is an ISO 9001:2015 (Quality Management System), ISO 27001:2022 (Information Security Management System), and ISO 42001:2023 (Artificial Intelligence Management System) certified organization and is independently audited under SSAE 18 / ISAE 3402 (SOC 1 Type II).

We maintain appropriate administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction. Access to personal data is restricted to authorized personnel who require such access for legitimate business purposes.

We regularly review and enhance our security controls, processes, and practices to address evolving risks, business requirements, and applicable regulatory obligations.

While we implement industry-standard security measures to safeguard personal data, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure. Therefore, although we strive to protect your personal data, we cannot guarantee its absolute security.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, regulatory, contractual, operational, and reporting requirements.

The retention of personal data is governed by Prodapt's internal Data Retention Policy, which is maintained within the organization's official policy repository and is available to authorized personnel.

When personal data is no longer required, it is securely deleted, anonymized, or archived in accordance with the Data Retention Policy and applicable legal obligations.

Principles Governing Personal Data Processing

Prodapt processes personal data in accordance with the following fundamental privacy principles:

1. Lawfulness, Fairness and Transparency - processing personal data in a lawful, fair, and transparent manner.
2. Purpose Limitation – collecting personal data only for specified, legitimate purposes.
3. Data Minimization – collecting only the personal data necessary for the intended purpose.
4. Accuracy – taking reasonable steps to keep personal data accurate and up to date.
5. Storage Limitation – retaining personal data only for as long as necessary.
6. Integrity and Confidentiality –protecting personal data through appropriate security measures.
7. Accountability – demonstrating compliance with applicable data protection requirements.

Children's Privacy

Prodapt's website and services are not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data relating to a child has been collected inadvertently, appropriate steps will be taken to remove such information.

International Data Transfers

As a global organization, Prodapt may transfer personal data across jurisdictions where we operate or engage service providers.

Where personal data is transferred internationally, we implement appropriate safeguards and contractual protections to ensure that personal data remains protected in accordance with applicable data protection laws.

Your Privacy Rights

Subject to applicable laws, individuals may have the following rights regarding their personal data:

1. The Right of Access : Request access to your personal data.
2. The Right to Rectification : Request correction of inaccurate or incomplete personal data.
3. The Right to Erasure : Request deletion of your personal data where permitted by law.
4. The Right to Restriction of Processing : Request limitation of the processing of your personal data.
5. The Right to Data Portability : Request a copy of your personal data in a structured and machine-readable format.
6. The Right to Object : Object to the processing of your personal data in certain circumstances.
7. The right to withdraw consent : Withdraw consent at any time where processing is based on consent.
8. Right Against Automated Decision-Making : Request not to be subject solely to automated decisions, including profiling, where applicable.
9. Right to Nominate : Nominate another individual to exercise your rights in accordance with applicable laws.
10. The right to lodge a complaint: Lodge a complaint with the applicable data protection authority.
11. Right to Grievance Redressal : Raise concerns regarding the processing of your personal data and seek resolution through our grievance mechanism.

Requests to exercise these rights may be submitted using the contact details provided below.

Grievance Redressal and Contact Information

If you have any questions, concerns, or requests relating to this Privacy Notice or our processing of personal data, please contact at grievanceofficer@prodapt.com.

We will review and respond to requests and complaints in accordance with applicable data protection laws.

If you are not satisfied with our response, you may have the right to contact the applicable data protection authority.

Changes to this Privacy Notice

Prodapt may update this Privacy Notice from time to time to reflect changes in legal, regulatory, operational, or business requirements. Updated versions will be published on this website together with the effective date of the revision.

Data Subject Rights Information

For additional information regarding the rights available to data subjects and the process for exercising those rights, please refer to our Data Subject Rights available below.

Symbol	Meaning
✓	Right explicitly granted in statute
✕	Right not granted or does not exist
NA	No applicable law / right not addressed