Your Privacy Matters
to Us.

Who we are and what this policy covers

XEqualTo Analytics (“XEqualTo”, “we”, “us” or “our”) is a data, AI and cloud consultancy. This Privacy Policy explains how we collect, use, share and protect personal data when you visit xequalto.com (the “Site”), contact us, apply for a role, or engage us for services.

This policy applies to personal data we handle as a data controller — that is, data about visitors, prospects, clients’ personnel, partners and candidates. When we process data inside a client’s systems as part of a consulting engagement, we act as a data processor on the client’s instructions; that processing is governed by our agreement with the client, and the client’s own privacy notice applies to the individuals concerned.

Information we collect

Information you give us

• Contact and enquiry details — name, work email, phone number, company, job title and the content of your message when you fill in a contact, demo-request or newsletter form.
• Engagement information — details of the people we work with at client organisations, including names, roles, business contact details and project communications.
• Career applications — your CV, work history, qualifications and any other information you choose to share when applying for a position.
• Correspondence — emails, calls and meeting notes exchanged with our team.

Information collected automatically

• Usage data — pages viewed, links clicked, time spent on the Site, referring URLs and approximate location derived from your IP address.
• Device and technical data — browser type and version, operating system, screen size, language and device identifiers.
• Cookies and similar technologies — see the Cookies section below.

Information from other sources

We may receive business contact information from partners, event organisers, publicly available professional profiles (such as LinkedIn) and B2B data providers, which we use only for business-to-business outreach in line with applicable law.

How we use your information

We use personal data for the following purposes:

• to respond to your enquiries and provide the information, demos or proposals you request;
• to deliver, manage and improve our consulting services and fulfil our contractual obligations to clients;
• to operate, secure, analyse and improve the Site and our marketing content;
• to send you insights, case studies, event invitations and other marketing communications where you have opted in or where we are otherwise permitted to do so — you can unsubscribe at any time;
• to assess job applications and manage our recruitment process;
• to comply with legal and regulatory obligations, resolve disputes and enforce our agreements.

We do not sell personal data, and we do not use personal data collected through the Site to train AI models.

Legal basis for processing

Where the Digital Personal Data Protection Act, 2023 (India), the EU/UK General Data Protection Regulation or similar laws apply, we rely on one or more of the following lawful bases:

• Consent — for newsletter subscriptions, optional cookies and any other processing where we ask for your permission. You may withdraw consent at any time.
• Performance of a contract — to deliver services you or your organisation have engaged us for, or to take steps at your request before entering into a contract.
• Legitimate interests — to run and secure our business, respond to enquiries, conduct B2B marketing and improve our services, provided your rights and interests do not override these interests.
• Legal obligation — where processing is required to comply with applicable law.

How we share information

We share personal data only where necessary and with appropriate safeguards:

• Service providers — hosting, analytics, CRM, email, communication and productivity tools that process data on our behalf under contract (for example, our website is hosted on Webflow and fonts are served by Google Fonts).
• Cloud and platform partners — where an engagement requires it and the client has agreed, such as AWS, Microsoft Azure, Google Cloud, Snowflake or Databricks.
• Professional advisers — lawyers, auditors, accountants and insurers under a duty of confidentiality.
• Authorities — where required by law, court order or to protect our rights, safety or property.
• Business transfers — in connection with a merger, acquisition, financing or sale of assets, subject to confidentiality obligations.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Cookies and analytics

Cookies are small text files stored on your device. We use them to keep the Site working correctly, remember your preferences, and understand how visitors use the Site so we can improve it.

• Strictly necessary cookies — required for the Site to function and always active.
• Analytics cookies — help us measure traffic and understand which content is useful. Data is aggregated wherever possible.
• Functional cookies — remember choices you make, such as a dismissed banner.

You can control or delete cookies through your browser settings. Blocking some cookies may affect how the Site works. Where required by law, we will ask for your consent before setting non-essential cookies.

International data transfers

XEqualTo is based in India and works with clients and partners around the world. Your personal data may therefore be transferred to, stored and processed in countries other than the one in which you live, including countries that may not offer the same level of data protection.

Where we transfer personal data internationally, we take steps to ensure it remains protected — for example, by using standard contractual clauses approved by the relevant regulator, transferring only to countries recognised as providing adequate protection, or relying on other lawful transfer mechanisms.

Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. As a guide:

• enquiry and marketing data is retained while you remain engaged with us and for up to 24 months after our last interaction;
• client engagement records are retained for the duration of the engagement and up to 7 years thereafter for contractual and tax purposes;
• unsuccessful candidate applications are retained for up to 12 months, unless you ask us to keep them longer for future roles;
• website analytics data is retained in aggregated form for up to 26 months.

When data is no longer needed, we securely delete or anonymise it.

How we protect your data

Security is central to the work we do for clients, and we apply the same discipline to our own operations. We use administrative, technical and physical safeguards appropriate to the sensitivity of the data, including encryption in transit, access controls based on least privilege, multi-factor authentication for internal systems, secure development practices and regular review of our vendors.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• delete your data where we no longer have a lawful reason to keep it;
• restrict or object to certain processing, including direct marketing;
• port your data to another provider in a structured, machine-readable format;
• withdraw consent at any time where we rely on consent;
• nominate another person to exercise these rights on your behalf, where permitted by the DPDP Act;
• lodge a complaint with your local data-protection authority, including the Data Protection Board of India.

To exercise any of these rights, email connect@xequalto.com. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law — typically within 30 days. You can unsubscribe from marketing emails at any time using the link in the footer of every message.

Children’s privacy

The Site and our services are directed at businesses and professionals and are not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. The revised policy will be posted on this page with a new “Last updated” date. Where a change is significant, we will take additional steps to notify you, such as an email or a notice on the Site.