Privacy Policy

1. Who We Are

Together Global Business Services Pvt Ltd (known as 'Together Global India', and referred to in this Policy as "Together Global", "we", "us" or "our") is a company registered in India. We provide cross-border delivery consulting and the Teams in Flow programmes to Indian and global organisations.

For the purposes of the Digital Personal Data Protection Act, 2023, Together Global Business Services Pvt Ltd is the Data Fiduciary in respect of personal data collected through this website and in the course of our services.

2. Personal Data We Collect

We collect personal data only where it is necessary for a specific, lawful purpose. The categories of personal data we collect include:

Data you provide directly

• Name (first and last name)
• Work email address
• Organisation name and your role within it
• Any information you include in the message field of our contact form
• Communications you send to us by email

Data collected automatically

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on site
• Referring URL

We do not collect sensitive personal data (as defined under the DPDP Act 2023 and the IT Rules 2011) through this website.

3. How We Use Your Personal Data

We use your personal data only for the purposes for which it was collected, including:

• Responding to enquiries submitted through our contact form
• Scheduling and conducting introductory calls and demos
• Delivering our services where you or your organisation has engaged us
• Sending service-related communications directly relevant to your enquiry
• Improving the content and functionality of this website
• Complying with applicable legal obligations

We do not use your personal data for automated decision-making or profiling. We do not send unsolicited marketing communications.

4. Legal Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following bases:

• Consent - where you have voluntarily provided your details through our contact form or by emailing us directly
• Legitimate uses - where processing is necessary to respond to your enquiry, perform a contract with you or your organisation, or comply with a legal obligation

Where we rely on consent, you have the right to withdraw it at any time by contacting us at contact@togetherglobal.in.

5. Data Sharing and Third Parties

We do not sell, rent or trade your personal data. We may share your data in the following limited circumstances:

• Service providers - third-party tools we use to operate this website and manage communications (for example, email and CRM platforms), who process data only on our instructions and under appropriate data processing agreements
• Professional advisers - lawyers, accountants or insurers where necessary
• Legal obligations - where we are required to disclose data to a competent authority under Indian law
• Group companies - Together Group Ltd (UK) where relevant to delivering a joint engagement, subject to appropriate safeguards

Any cross-border transfer of personal data outside India will be conducted in accordance with the DPDP Act 2023 and any rules or notifications issued thereunder.

6. Data Retention

We retain your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Specifically:

• Enquiry and contact form data - retained for up to 3 years from the date of last contact
• Client engagement data - retained for 7 years from the end of the engagement, in line with Indian financial record-keeping requirements
• Website analytics data - retained for up to 26 months

After the applicable retention period, data is securely deleted or anonymised.

7. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights in respect of your personal data:

• Right to access - the right to obtain confirmation of whether we process your personal data and to receive a summary of that data
• Right to correction and erasure - the right to have inaccurate data corrected and, in certain circumstances, to have your data erased
• Right to grievance redressal - the right to have any grievance regarding our processing of your data addressed promptly
• Right to nominate - the right to nominate another individual to exercise your rights on your behalf in the event of your death or incapacity
• Right to withdraw consent - where processing is based on consent, the right to withdraw that consent at any time

To exercise any of these rights, please contact our designated Data Protection Officer at contact@togetherglobal.in. We will respond within the timeframes required under applicable law.

8. Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction, in accordance with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Where a personal data breach occurs that is likely to result in harm to you, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023.

9. Cookies

This website may use cookies and similar technologies to improve your experience and to collect anonymised analytics data. Where cookies involve the processing of personal data, we will seek your consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of this website.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and applicable rules, we have appointed a Grievance Officer to address any concerns regarding your personal data. You may contact our Grievance Officer at:

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in applicable law or our practices. Where we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts of India.