Privacy Policy

Privacy Policy

How Pragmatiq collects, uses, shares and protects personal data, and how you can exercise your rights under India’s Digital Personal Data Protection Act, 2023.

Version 1.0Effective [Date of publication]Last updated 18 October 2026

This policy explains how Pragmatiq Systems Private Limited and its group company Pragmatiq Inc. (“Pragmatiq”, “we”, “us”) handle personal data when you use this website, contact us, apply for a job, or enquire about the Pragmatiq Academy of Life Sciences (PALS).

It is written to meet India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), whose main obligations apply from 13 May 2027. Until then, we also comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).

1. Who we are

For personal data collected through this website, the Data Fiduciary is:

  • Pragmatiq Systems Private Limited, CIN U72900TG2019PTC136969, [registered office address], Hyderabad, Telangana, India.
  • Pragmatiq Inc., [address], New Jersey, USA, for enquiries handled by our North American team.

2. What this policy covers

This policy covers this website and the enquiries, applications and messages you send us. It does not cover:

  • Products we build or run for clients. When we process personal data inside a client’s product, we act as a Data Processor on the client’s instructions, and the client’s own privacy notice applies.
  • Partner and product websites, such as clinally.com, theritebook.com, landlordz.in and purplegene.in, which have their own privacy policies.

3. Personal data we collect

  • When you contact us: your name, email address, organisation (optional), the category you choose (for example client, investor or student) and your message.
  • When you apply for a job: the details and CV you send us, and notes from interviews.
  • When you enquire about PALS: your name, contact details and educational background and, if you are under 18, the name and contact details of your parent or lawful guardian.
  • When you browse the site: your IP address, browser type, the pages you request and the date and time, recorded in server and security logs.
  • When staff sign in to the admin panel: email address, name, role and sign-in times.

We don’t ask for financial, health or biometric information through this website. Please don’t include it in your messages.

4. Why we use it

We use each type of personal data only for the purpose stated here:

  • To reply to your enquiry and, if you are a client or partner, to discuss the work you asked about. Basis: your consent.
  • To assess job applications and, if you join us, for employment. Basis: your consent, and the legitimate uses for employment permitted by Section 7 of the DPDP Act.
  • To handle PALS enquiries and admissions, including sharing your details with the Tata Institute of Social Sciences (TISS) and a host company when you apply for an apprenticeship. Basis: your consent, or your parent’s or guardian’s verifiable consent if you are under 18.
  • To keep the website secure, prevent misuse and investigate incidents. Basis: legitimate uses permitted by law, and compliance with CERT-In directions.
  • To comply with the law, respond to lawful requests from authorities and enforce our terms. Basis: legitimate uses under Section 7 of the DPDP Act.

We do not sell personal data, and we do not use it for advertising or profiling.

5. Consent

Where we rely on consent, we ask for it with a clear, separate statement before you send us your details, and we record when you gave it and which version of this policy applied. Giving consent is optional. If you don’t, we can’t act on your enquiry through the website, but you can still reach us by phone or post.

You can withdraw consent at any time, as easily as you gave it, by emailing [privacy@pragmatiq.in] or using the contact form with the category “Data privacy request”. Withdrawing doesn’t affect anything we did lawfully before. Once you withdraw, we stop processing your data and erase it, unless the law requires us to keep it. Where available, you may also manage your consent through a Consent Manager registered with the Data Protection Board of India.

6. Children

This website isn’t aimed at children. If you are under 18 and want to join PALS, we need the verifiable consent of your parent or lawful guardian before we process your details, as Section 9 of the DPDP Act requires. We do not track, monitor the behaviour of, or target advertising at children.

7. Who we share it with

We share personal data only when needed for the purposes above:

  • Service providers who host this website, store data and send email for us. They act as our Data Processors under contracts that require them to protect the data and use it only on our instructions.
  • Within our group, between Pragmatiq Systems Private Limited and Pragmatiq Inc., so the right office can respond to you.
  • PALS partners: the Tata Institute of Social Sciences and host companies, only for students who apply, and only the details they need.
  • Authorities, when the law requires it.

8. Transfers outside India

This website is hosted in [hosting location]. Enquiries from North America may be handled by Pragmatiq Inc. in the USA. We transfer personal data outside India only to countries the Government of India has not restricted under Section 16 of the DPDP Act, with safeguards in our contracts.

9. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, then erase it:

  • Enquiries: up to [24 months] after our last interaction, unless they lead to a contract.
  • Job applications: up to [12 months] after the role is filled, unless you join us or ask us to keep your details for future roles.
  • PALS records: for the duration of the programme and as required by our agreements with TISS and applicable education laws.
  • Server and security logs: at least 180 days, as CERT-In directions require, and at least one year where the DPDP Rules require it.

10. How we protect it

We use reasonable security safeguards suited to the data, including encryption in transit (HTTPS), access limited to staff who need it, hashed passwords, activity logging, backups and regular review of our systems. We require the same of our Data Processors.

11. If there is a data breach

If a personal data breach occurs, we will tell the people affected without delay, explaining what happened, the likely impact and what we are doing about it. We will report it to the Data Protection Board of India as the DPDP Rules require, including a detailed report within 72 hours. We also report cyber security incidents to CERT-In within 6 hours, as its directions require.

12. Your rights

Under the DPDP Act, you have the right to:

  1. Access information about the personal data we hold about you, how we process it and who we have shared it with (Section 11).
  2. Correct, complete, update or erase your personal data (Section 12).
  3. Withdraw consent at any time (Section 6).
  4. Have your grievances addressed by us (Section 13).
  5. Nominate a person to exercise your rights if you die or become unable to (Section 14).

To exercise a right, email [privacy@pragmatiq.in] or use the contact form with the category “Data privacy request”. We may ask you to verify your identity. We aim to respond within 30 days, and in any case within the time the law allows (90 days under the DPDP Rules).

You also have duties under Section 15 of the DPDP Act, for example to give accurate information and not to file false or frivolous complaints.

13. Grievance Officer

If you have a concern about how we handle personal data, contact our Grievance Officer:

  • Name: [Name]
  • Designation: [Designation]
  • Email: [privacy@pragmatiq.in]
  • Address: [Address], Hyderabad, Telangana, India

We will acknowledge your grievance and aim to resolve it within one month, as the SPDI Rules require. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

14. Cookies

This website does not use advertising or analytics cookies, and visitors to the public site are not tracked. We set one strictly necessary cookie, only for staff who sign in to the admin panel, to keep them signed in. Our fonts and images are served from our own servers. Links to other websites, such as Google Maps or LinkedIn, take you to services with their own privacy policies.

If we add analytics in future, we will update this policy and ask for your consent where the law requires it.

15. Visitors outside India

If you contact us from outside India, we handle your data as this policy describes. You may have additional rights under the laws where you live. Contact us and we will help.

16. Changes to this policy

We will update this policy when our practices or the law change, and show the new version and effective date at the top. If a change affects how we use data you have already given us, we will tell you and, where required, ask for your consent again.

17. Contact

For questions about this policy, email [privacy@pragmatiq.in].