Privacy Policy

1. Corporate Identity and Data Fiduciary

This Privacy Policy outlines how CACTUS IT SERVICES PRIVATE LIMITED ("Company", "we", "us", or "our"), incorporated in Thane, Maharashtra, India (CIN: U62099MH2024PTC436398), collects, stores, processes, and protects personal and business information when you use our official website (https://cactusitservices.com) and communicate with our team.

We act as a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and adhere to principles of purpose limitation, data minimization, and reasonable security safeguards.

2. Information We Collect

We collect information strictly when volunteered by you to facilitate business inquiries, quotations, and career applications:

• Contact Inquiries: Full name, business email address, phone number, company name, project requirements, budget, and timeline.
• Career Applications: Name, contact details, curriculum vitae, portfolio links, and employment experience.
• Technical Telemetry: Anonymized server logs, browser user-agent, and IP address for cybersecurity threat mitigation.

3. Lawful Basis and Purpose of Processing

Your information is processed exclusively for:

• Responding to requests for project quotations and technical evaluations.
• Drafting formal Statements of Work (SOWs) and commercial proposals.
• Processing recruitment applications for advertised openings.
• Complying with statutory accounting and tax obligations under Indian law.

We do not sell, rent, monetize, or trade client or candidate data to any third-party marketing brokers.

4. Data Security and Confidentiality

We implement industry-standard encryption protocols (HTTPS/TLS in transit and encryption at rest), strict role-based access control, and automated audit logging. All employee access to client inquiries is restricted to authorized personnel under active non-disclosure obligations.

5. Data Retention

Business inquiries are retained for the duration of the commercial scoping relationship and up to statutory limitation periods for record compliance. Unsuccessful job applications are purged after candidate review cycles unless affirmative consent is provided for future talent pooling.

6. Your Rights

Under applicable law, you have the right to:

• Request confirmation of personal data being processed.
• Request correction of inaccurate or incomplete records.
• Request erasure of personal data no longer required for legitimate statutory purposes.
• Withdraw consent for optional communications.

7. Contact the Grievance Officer

For data protection inquiries or to exercise your rights, please address: