Privacy Policy

1. Objective

NSSPL is a technology services company that provides software development, enterprise solutions, cloud, data, digital marketing and back-office services to clients across geographies. In the course of our business we process personal data belonging to our clients, prospective clients, business partners, vendors, employees, contractors and job applicants.

The objective of this Privacy Policy is to be transparent about those activities — what personal data we collect, why we collect it, whom we share it with, how long we keep it, how we protect it, and how you can exercise control over it. We handle personal data in accordance with applicable data protection laws, including the Information Technology Act, 2000 and rules thereunder, the Digital Personal Data Protection Act, 2023 (India), the EU and UK General Data Protection Regulation (GDPR), and other regional laws where they apply to our processing.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data that NSSPL collects through:

• our websites, including nssplindia.com and any sub-domains, landing pages and microsites operated by NSSPL;
• our products, portals, applications and services made available to clients and users;
• our sales, marketing, recruitment, procurement and support activities, whether online, over the phone, by email or in person; and
• events, webinars, trade shows and campaigns that NSSPL hosts or takes part in.

Data processed on behalf of clients. When NSSPL delivers services to a client, we may process personal data that the client controls — for example, data held in a system we develop, host, test or support. In those cases the client is the data controller and NSSPL acts as a data processor under the client’s instructions and the terms of our contract. That processing is governed by the client’s own privacy notice and our agreement with them, not by this Privacy Policy. If you wish to exercise rights over such data, please approach the relevant organisation; we will support them in responding to you.

This Privacy Policy does not apply to third-party websites, platforms or services that we link to but do not operate.

3. Personal Data We Collect

The categories of personal data we collect depend on your relationship with us and how you interact with NSSPL. They may include:

We do not seek to collect sensitive personal data (such as data revealing racial or ethnic origin, religious belief, health, biometric or genetic data) through our website. Where such data is genuinely required — for example, health or disability information needed for statutory employment purposes — we collect it only where permitted by law and, where required, with your explicit consent.

Please do not submit personal data through our website or email that is not necessary for your enquiry. Where a form field is marked optional, you may leave it blank; where a field is mandatory and you choose not to provide it, we may be unable to respond to your request.

4. How We Collect Personal Data

4.1 Information you provide directly

We collect personal data when you submit a contact, quote or careers form on our website, subscribe to updates, download a brochure or case study, register for an event or webinar, interact with our chat or WhatsApp channels, email or call us, or exchange business cards and details with our representatives.

4.2 Information collected automatically

When you visit our website, our servers and analytics tools automatically record technical and usage data through cookies, pixels, web beacons, tags and server logs. This helps us understand how our site is used, diagnose faults, protect against misuse and improve content and performance.

4.3 Information from your device

If you access our website or applications from a mobile device, we may collect device identifiers, operating system version and general network information. Some features may request permission to access device capabilities such as the camera, file storage or location; these are always optional and you can decline or later withdraw permission through your device settings.

4.4 Information from social media and third parties

If you engage with NSSPL on platforms such as LinkedIn, Facebook or Instagram — for example by messaging us, responding to a lead form or interacting with our posts — we may receive the profile and contact information those platforms make available to us, subject to your settings on the platform. We may also obtain business contact data from publicly available sources, business directories, referral partners, event organisers, recruitment agencies and job boards, and marketing or analytics service providers.

5. Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. NSSPL and our service providers use cookies and similar technologies for the following purposes:

• Strictly necessary — to enable core site functions such as page navigation, form submission, security and load balancing. These cannot be switched off.
• Preference — to remember choices such as language, region or previously dismissed notices.
• Analytics and performance — to understand how visitors find and use our site so that we can improve it. This may include third-party analytics services.
• Marketing and advertising — to measure campaign performance and, where permitted, to show you relevant NSSPL content on other platforms.

You can control cookies through your browser settings, including blocking or deleting existing cookies. Please note that disabling certain cookies may affect the availability or behaviour of parts of our website. Where required by law, we seek your consent before setting non-essential cookies.

Do Not Track. Some browsers offer a “Do Not Track” signal. As no common industry standard for interpreting these signals has been established, our website does not currently respond to them. You can instead manage tracking through your browser and device settings and by exercising the choices described in this Privacy Policy.

6. How We Use Personal Data

NSSPL uses personal data for the following purposes:

• to respond to your enquiries, provide quotations and share the information you have requested;
• to deliver, operate, support and improve our services, products and deliverables;
• to manage client, partner and vendor relationships, including onboarding, contracting, project communication, invoicing, payments and collections;
• to send newsletters, service updates, insights, invitations and other marketing communications, where you have consented or where we are otherwise permitted to do so;
• to personalise the content, offers and experience presented to you on our website;
• to carry out analytics, market research, benchmarking and reporting so that we can measure and improve our website, campaigns and service quality;
• to assess job applications, conduct interviews and verification, and manage the recruitment and onboarding process;
• to administer, secure and maintain our systems, including detecting, investigating and preventing fraud, unauthorised access, security incidents and other misuse;
• to comply with legal, regulatory, tax, accounting and contractual obligations, and to establish, exercise or defend legal claims; and
• for any other purpose disclosed to you at the time of collection or otherwise permitted with your consent.

We do not sell your personal data. We do not use personal data for purposes that are incompatible with those described above without informing you and, where required, obtaining your consent.

7. Legal Basis for Processing

Where data protection law requires us to identify a legal basis for processing your personal data, we rely on one or more of the following:

• Consent — where you have given us clear permission, for example to receive marketing emails or to set non-essential cookies. You may withdraw consent at any time.
• Performance of a contract — where processing is necessary to enter into or perform a contract with you or the organisation you represent.
• Legitimate interests — where processing is necessary for our legitimate business interests, such as business development, service improvement, network and information security, and protecting our rights, provided this does not override your interests and freedoms.
• Legal obligation — where we must process data to comply with a law, regulation, court order or lawful request from an authority.
• Vital or public interest — in rare circumstances where processing is necessary to protect someone’s life or safety, or as otherwise permitted by law.

8. Sharing and Disclosure

We share personal data only as needed and with appropriate safeguards in place. Recipients may include:

• NSSPL group entities and offices, including our India operations and our overseas presence, for coordinated sales, delivery and support;
• Service providers and sub-processors that act on our instructions — such as hosting and cloud providers, email and CRM platforms, analytics and marketing tools, payment processors, background verification and recruitment partners, and professional advisers;
• Clients and business partners, where disclosure is necessary to deliver a service or fulfil a contract you or your organisation is party to;
• Authorities and regulators, where disclosure is required by law, regulation, legal process or a valid governmental request, or is necessary to protect our rights, property or safety, or that of our users or the public; and
• Acquirers or successors, in connection with a merger, acquisition, reorganisation, financing or sale of assets, subject to the recipient honouring commitments materially consistent with this Privacy Policy.

We require our service providers to process personal data only for the purposes we specify, to keep it confidential and secure, and to comply with applicable data protection law under written agreements.

9. International Data Transfers

NSSPL operates from India and serves clients internationally, including in the United States, the United Kingdom, Europe, the Middle East and Asia-Pacific. As a result, personal data may be transferred to, stored in or accessed from countries other than the one in which it was collected, and those countries may have different data protection standards.

Where such a transfer takes place, we implement appropriate safeguards required by law, which may include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, transfers to jurisdictions recognised as providing adequate protection, or your explicit consent where applicable. Details of the safeguards used for a specific transfer are available on request using the contact details in Section 20.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, audit or reporting requirements, and to resolve disputes or enforce our agreements.

In determining retention periods we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether those purposes can be achieved by other means, and applicable statutory limitation periods. When personal data is no longer required, we securely delete, destroy or irreversibly anonymise it.

11. Information Security

NSSPL maintains administrative, technical and physical safeguards designed to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These measures include role-based access control, authentication requirements, encryption of data in transit, network and endpoint protection, secure development practices, logging and monitoring, vendor due diligence, employee confidentiality obligations and periodic security awareness training.

While we work to protect your information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities where and as required by applicable law.

12. Your Privacy Rights

Subject to the law that applies to you, you may have the following rights in relation to your personal data:

• Access — to obtain confirmation of whether we process your personal data and a copy of that data;
• Correction — to have inaccurate or incomplete data rectified or updated;
• Erasure — to request deletion of personal data where there is no continuing lawful basis for us to keep it;
• Restriction — to ask us to limit processing in certain circumstances, such as while a dispute about accuracy is resolved;
• Objection — to object to processing based on our legitimate interests, and to object to direct marketing at any time;
• Portability — to receive certain data in a structured, commonly used, machine-readable format or have it transmitted to another controller;
• Withdrawal of consent — to withdraw consent previously given, without affecting the lawfulness of processing carried out before withdrawal;
• Nomination — where applicable under Indian law, to nominate another individual to exercise your rights in the event of death or incapacity; and
• Complaint — to lodge a grievance with us and to complain to the competent data protection authority.

To exercise any of these rights, write to us using the details in Section 20. We may need to verify your identity before acting on a request, and we will respond within the timeframe prescribed by applicable law. In some cases we may be unable to fully comply — for example where the data is required to meet a legal obligation or where a request would adversely affect the rights of others — and we will explain the reason in our response. Exercising your rights is free of charge, although we may charge a reasonable fee for manifestly excessive or repetitive requests.

13. Marketing Preferences and Opt-Out

If you no longer wish to receive marketing communications from NSSPL, you can use the unsubscribe link included in our emails, adjust your preferences where we provide that option, or write to us at privacy@nssplindia.com with the subject line “Unsubscribe”. We will action your request promptly.

Please note that even after you opt out of marketing, we may still send you transactional or service-related messages — such as responses to your enquiry, contract and project communications, invoices, or notices about changes to our terms — as these are not marketing communications.

14. Job Applicants and Recruitment

If you apply for a role at NSSPL, we process the information in your application to evaluate your suitability, communicate with you about the process, conduct interviews and assessments, verify credentials and references where permitted, and comply with employment and immigration obligations. We may receive your details from job portals, recruitment partners or referrals.

If you are not selected, we may retain your application for a reasonable period to consider you for future openings, unless you ask us not to. NSSPL does not charge candidates any fee at any stage of recruitment and will never ask you to make a payment as a condition of employment. If you receive such a request claiming to be from NSSPL, please report it to us immediately.

15. Children’s Privacy

Our website and services are intended for businesses and adults. NSSPL does not knowingly collect personal data from children as defined under applicable law, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has provided us personal data, please contact us and we will delete it.

16. Third-Party Websites and Links

Our website may contain links to third-party sites, social media platforms, embedded content and integrations that NSSPL does not control. This Privacy Policy does not apply to those services, and we are not responsible for their content or privacy practices. We encourage you to review the privacy notice of any third-party site you visit before sharing personal data with it.

17. Automated Decision-Making

NSSPL does not make decisions that produce legal effects or similarly significant effects on you based solely on automated processing without human involvement. We may use automated tools to segment audiences, score marketing engagement or shortlist applications, but meaningful human review is applied before any consequential decision is taken. Where automated decision-making is used and the law grants you the right to human intervention or explanation, we will honour that right.

18. Region-Specific Disclosures

18.1 India

Where the Digital Personal Data Protection Act, 2023 applies, NSSPL acts as a Data Fiduciary for the personal data described in this Privacy Policy and processes it for lawful purposes with your consent or on another legitimate basis permitted under the Act. You may exercise your rights of access, correction, erasure and nomination, and raise a grievance, through our Grievance Officer named in Section 20. If your grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India.

18.2 European Economic Area and United Kingdom

If you are located in the EEA or the UK, the GDPR or UK GDPR grants you the rights set out in Section 12. Where NSSPL acts as a controller, you may lodge a complaint with your local supervisory authority — for UK residents, the Information Commissioner’s Office. Where we transfer your data outside the EEA or the UK, we rely on the safeguards described in Section 9.

18.3 United States

Residents of certain US states, including California, may have the right to know the categories of personal information collected and disclosed, to request access to or deletion of their personal information, to correct inaccurate information, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. NSSPL does not sell personal information for monetary consideration. To submit a request, use the contact details in Section 20; you may also use an authorised agent where the law permits.

18.4 Other jurisdictions

Where local law — including Brazil’s LGPD, Canada’s PIPEDA, Australia’s Privacy Act, Singapore’s PDPA or the data protection laws of the UAE and Saudi Arabia — grants you additional or different rights, we will comply with those requirements in respect of the processing they govern.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, services or legal obligations. The revised version will be published on this page with an updated “Last updated” date. Where changes are significant, we will provide a more prominent notice or, if required by law, seek your consent. We encourage you to review this page periodically.

20. Contact Us and Grievance Redressal

If you have questions, requests or concerns about this Privacy Policy or how NSSPL handles your personal data, please contact us: