Privacy Policy

Fusion HCM Consulting (fusionhcmconsulting.com)

Effective Date: 01st  Jan 2021

Fusion HCM Consulting (“Fusion HCM Consulting”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of visitors to fusionhcmconsulting.com (the “Site”) and of individuals connected with our human capital management and HR consulting clients. This Privacy Policy explains what personal data we collect, how we use and protect it, and the rights available to you under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000. By using the Site or engaging our Services, you consent to the practices described in this Policy.

1. Scope of This Policy

This Policy applies to personal data we collect through the Site (e.g. contact forms, newsletter sign-ups, and general browsing) and, where relevant, personal data we process in the course of providing HCM/HR consulting services to our clients and their employees. Where we process employee or candidate data on behalf of a client organisation as part of a consulting engagement, we typically act as a “Data Processor” and that client’s own privacy policy and instructions will govern such processing, in addition to this Policy.

2. Information We Collect

2.1 Information You Provide Directly

  • Contact details: name, email address, phone number, job title, and company name, submitted via contact or enquiry forms;
  • Communications: information you share when corresponding with us by email, phone, or through the Site;
  • Engagement-related information: business, HR, or employee data shared with us in the course of a consulting engagement, as governed by the applicable Engagement Document;
  • Newsletter or marketing sign-up details, where you opt in to receive updates from us.

2.2 Information Collected Automatically

  • Usage data: pages visited, time spent on the Site, referring/exit pages, and browser and device information;
  • Log data: IP address, browser type, operating system, and access timestamps;
  • Cookies and similar tracking technologies, as described in Section 5 below.

3. How We Use Your Information

We use personal data for the following purposes:

  • To respond to enquiries and provide information about our Services;
  • To perform and administer Consulting Services under an Engagement Document;
  • To operate, maintain, and improve the Site and its content;
  • To send newsletters, updates, or marketing communications, where you have consented (you may opt out at any time);
  • To comply with legal, regulatory, tax, and accounting obligations;
  • To detect, prevent, and address fraud, security incidents, or technical issues.

4. Legal Basis for Processing

Under the DPDP Act, we process your personal data on the basis of your consent (for example, when you submit a contact form or subscribe to communications) or, where applicable, for “legitimate uses” recognised under the DPDP Act, such as the performance of a contract with you, compliance with a legal obligation, or purposes for which you have voluntarily provided data and have not indicated any objection. Where we rely on consent, you may withdraw it at any time by contacting us as set out in Section 10, without affecting the lawfulness of processing carried out before such withdrawal.

5. Cookies and Tracking Technologies

The Site may use cookies and similar tracking technologies (such as web analytics tools) to recognise repeat visitors, understand how the Site is used, and improve user experience. Cookies may include essential cookies (necessary for the Site to function) and analytics cookies (to help us understand visitor behaviour). You can control or disable cookies through your browser settings; note that disabling certain cookies may affect Site functionality. Where required by law, we will seek your consent before placing non-essential cookies.

6. How We Share Your Information

We do not sell your personal data. We may share personal data with:

  • Service providers who support our operations (e.g. website hosting, email delivery, analytics, and IT service providers), bound by confidentiality and data protection obligations;
  • Professional advisors, such as legal, accounting, or audit firms, where necessary;
  • Regulatory authorities, courts, or law enforcement, where required by applicable law or to protect our legal rights;
  • A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent protections for your data;
  • Sub-processors engaged in connection with a specific Consulting Services engagement, only as authorised by the relevant client and Engagement Document.

7. Data Storage, Security, and Cross-Border Transfers

We implement reasonable security practices and procedures, in line with the Information Technology Act, 2000 and applicable rules, to protect personal data against unauthorised access, alteration, disclosure, or destruction. These may include access controls, encryption in transit, and restricted access on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Personal data may be stored or processed on servers located outside India, including through cloud service providers. Where we transfer personal data outside India, we do so in accordance with the DPDP Act and any conditions or restrictions notified by the Central Government from time to time.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements, or as otherwise agreed with a client in an Engagement Document. When personal data is no longer required, we will take reasonable steps to delete, anonymise, or securely archive it.

9. Your Rights

As a Data Principal under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you and the processing activities undertaken;
  • Request correction, completion, or updating of your personal data;
  • Request erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations;
  • Withdraw consent at any time, where processing is based on consent;
  • Nominate another individual to exercise your rights on your behalf in the event of death or incapacity;
  • Register a grievance regarding the processing of your personal data with our Grievance Officer (see Section 10).

We will respond to verified requests within the timeframes prescribed under the DPDP Act and applicable rules.

10. Grievance Officer / Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal data, or wish to exercise your rights, please contact our Grievance Officer:

Fusion HCM Consulting Grievance Officer: [insert name] Email: [insert grievance/contact email, e.g. privacy@fusionhcmconsulting.com] Address: [insert registered business address]

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India, once operational, or approach any other authority as permitted under applicable law.

11. Children’s Privacy

The Site and Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. Where processing of a child’s personal data is required in connection with a client engagement, we will obtain verifiable parental or guardian consent as required under the DPDP Act.

12. Third-Party Links

The Site may contain links to third-party websites. This Privacy Policy does not apply to, and we are not responsible for, the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated Policy will be posted on the Site with a revised “Effective Date.” We encourage you to review this Policy periodically. Material changes will, where appropriate, be notified to you directly.