Privacy Policy

Effective Date: 19-09-2026

1. Introduction and Scope

Aegis Compliance Tech Pvt. Limited (“Aegis”, “the Company”, “we”, “us”, or “our”) is committed to protecting the Personal Data of every visitor, customer, job applicant, and other individual (“you”, “the Data Principal”) who interacts with our website https://aegiscomplytech.com

This Policy describes how we collect, use, store, share, and protect your Personal Data, and the rights available to you as a Data Principal.

By accessing the Site or providing your Personal Data to us, you acknowledge that you have read and understood this Policy. Where processing is based on your consent, that consent is sought separately and specifically at the point of collection, and this Policy does not itself constitute consent.

2. Definitions

“Consent Manager” means a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review, or withdraw consent through an accessible, transparent, and interoperable platform.

“Data Fiduciary”means Aegis Compliance Tech Pvt. Limited, which alone or with others determines the purpose and means of processing your Personal Data.

“Data Principal”means the individual to whom the Personal Data relates. Where you are a parent or lawful guardian submitting data on behalf of a child, or a lawful guardian of a person with disability, “Data Principal” includes such parent or guardian.

“Data Processor”means any person who processes personal data on behalf of Aegis, such as our website hosting provider, CRM vendor, or marketing technology partners.

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

“Processing” means any operation performed on Personal Data, including collection, recording, storage, use, sharing, and erasure.

3. Personal Data We Collect

We collect Personal Data only to the extent necessary for the purposes disclosed to you. Depending on how you interact with us, we may collect:

3.1 Data you provide directly

 •  Enquiry and contact forms: name, contact number, pin code, and inquiry type.

 •  Newsletter / “Aegis Compliance Digest” subscription: email address.

 • Career applications: name, contact details, resume/CV, and other details you choose to submit.

3.2 Data collected automatically

  •  IP address and the internet service provider through which the Site is accessed.

 •  Date, time, and duration of your visit.

 •  Device, operating system, and browser type and version.

 •  Pages and sections viewed, documents downloaded, and the referring website.

 •  Cookie and tag data, as described in our separate Cookie Policy.

We do not knowingly collect more Personal Data than is necessary for the stated purpose, in line with our data minimisation principle.

4. Purpose of Processing and Consent

We process your Personal Data only for the specific, itemised purposes disclosed to you at or before the point of collection, and only on the basis of your free, specific, informed, unconditional, and unambiguous consent given through a clear affirmative action or, where applicable, on the “certain legitimate uses” recognised under the DPDP Act (for example, where you have voluntarily provided data for a specific purpose and processing is necessary for that purpose, such as responding to a complaint).

Purpose

Personal Data Used

Basis

Responding to your enquiry or complaint

Name, contact number, pin code, enquiry details

Consent / voluntary provision for a specific purpose

Sending product and promotional updates (calls, SMS, email)

Name, contact number, email

Separate, itemised consent opt-in, not bundled with enquiry submission

Newsletter communications

Email address

Consent (opt-in)

Career applications

Resume, contact and professional details

Consent

Website security, fraud prevention and performance monitoring

IP address, device/browser data

Legitimate use for security of the Site

Withdrawal of consent : You may withdraw consent at any time, and the process for withdrawal is as easy as the process by which you gave it. You may withdraw consent by emailing privacy@aegiscomplytech.com or by using the unsubscribe / preference-centre link included in our marketing communications. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and does not affect our ability to process data where retention is otherwise required by law.

5. Disclosure of Personal Data

  • Data Processors engaged for website hosting, maintenance, CRM, email/SMS delivery, and IT support bound by written contracts requiring them to process data only per our instructions and to apply equivalent safeguards.
  • Government or regulatory authorities, where required by applicable law, court order, or to establish, exercise, or defend a legal claim.
  • A prospective acquirer in connection with a corporate transaction, subject to confidentiality obligations.

We do not sell your Personal Data. We may share your Personal Data with:

6 Cross-Border Transfer of Personal Data

  • Data Processors engaged for website hosting, maintenance, CRM, email/SMS delivery, and IT support bound by written contracts requiring them to process data only per our instructions and to apply equivalent safeguards.
  • Government or regulatory authorities, where required by applicable law, court order, or to establish, exercise, or defend a legal claim.
  • A prospective acquirer in connection with a corporate transaction, subject to confidentiality obligations.

7. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required to comply with applicable legal, accounting, tax, or regulatory obligations, whichever is longer. As a general guide:

  • Enquiry and complaint data: retained for the duration required to resolve the matter and for a reasonable period thereafter for record-keeping.
  • Marketing consents and communication data: retained until you withdraw consent or unsubscribe, and deleted or anonymised thereafter, subject to a summary record kept solely to document your opt-out.
  • Career applications: retained for a defined period for recruitment purposes, after which they are deleted unless you consent to longer retention for future opportunities.

On expiry of the applicable retention period, or on withdrawal of consent where no other legal ground for retention exists, we will erase or anonymise the personal data, unless retention is required under law.

8. Your Rights as a Data Principal

Subject to the DPDP Act and applicable Rules, you have the right to:

  1.  Obtain a summary of the personal data we hold about you and the processing activities undertaken.
  2.  Request correction, completion, or updating of your Personal Data.
  3.  Request erasure of your Personal Data that is no longer necessary for the purpose for which it was processed, subject to legal retention requirements.
  4.  Withdraw consent at any time, as described in Section 4.
  5.  Nominate another individual to exercise your rights in the event of death or incapacity.
  6.  Register a grievance regarding the processing of your Personal Data, and to have it addressed within the timelines prescribed under the DPDP Rules.

To exercise any of these rights, please write to our Grievance Officer / Data Protection Officer at the contact details in Section 10. We will respond within 30 days from the receipt of your complaint. If you are not satisfied with our response, you may approach the Data Protection Board of India.

9. Children's Personal Data

The Site is not directed at children (individuals below 18 years of age), and we do not collect personal data of children. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

10. Grievance Officer / Data Protection Officer

In accordance with the DPDP Act, Aegis has designated the following person to address your questions, requests, and grievances relating to this Policy and the processing of your personal data:

Designation                 

 Details

Name

Anindya Majumdar

Title

Grievance Officer / Data Protection Officer

Email

anindya@aegiscomplytech.com

Postal Address

705 Tower B Millennium Plaza, Sushant Lok Phase – 1 Gurugram, Haryana 122009​

Response timeline

48 hours

11. Security Safeguards

We implement reasonable technical and organisational measures, including access controls, encryption in transit, and contractual safeguards with Data Processors, to protect personal data against unauthorised access, alteration, disclosure, or destruction, in line with the DPDP Act.

12. Personal Data Breach Notification

In the event of a personal data breach, we will notify the Data Protection Board of India and the affected Data Principals in the manner and within the timelines prescribed under the DPDP Rules.

13. Third-Party Links

The Site may contain links to third-party websites. We do not control and are not responsible for the privacy practices of such third-party sites. We encourage you to review the privacy policy of any external site you visit.

14. Relationship to Our Cookie Policy

Our use of cookies, web beacons, pixels, and similar tracking technologies on the Site including the categories of cookies we use, the third-party trackers involved , and how you can manage your cookie preferences is addressed in full in our separate Cookie Policy . That Policy forms part of, and should be read together with, this Privacy Policy.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. The “Effective Date” at the top of this Policy will indicate when it was last revised. Material changes affecting how we process your Personal Data will be notified to you through the Site or, where required, through a fresh consent request.

16. Contact Us

For any questions about this Policy or our data practices, please contact:

Aegis Compliance Tech Pvt. Limited

Email:
privacy@aegiscomplytech.com

Registered Office:
705 Tower B Millennium Plaza,Sushant Lok Phase – 1 Gurugram, Haryana 122009​