Privacy Policy

1. Who we are

[OptimIQ Consultus Private Limited], a company incorporated in India (CIN [●]), with its registered office at [address, India] (“OptimIQ”, “we”, “us”, “our”), operates the website [www.optimiqconsultus.com], its sub-domains, forms, surveys, mobile and web applications, and related communications channels (together, the “Platform”).

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), OptimIQ is the Data Fiduciary for the personal data described in this Policy. Where the EU or UK General Data Protection Regulation applies, OptimIQ is the controller.

When a sister or affiliate entity of OptimIQ is established outside India (including in the United Arab Emirates), that entity will be identified in Section 22 and will act as Data Fiduciary or controller for the services it provides.

2. Scope

This Policy applies to personal data of:

It does not apply to the data practices of clients, consulting firms or other third parties, who are responsible for their own processing once they receive data through the Platform.

3. Your data across the OptimIQ journey

OptimIQ is a professional consulting platform, so most of the data we hold is career and capability evidence that you choose to give us so we can assess, certify and match you. The table shows what we collect at each stage, who can see it, and how long we keep it.

4. Personal data we collect

We collect only what is necessary for the purposes in Section 5. Depending on your relationship with us, this may include:

Case studies and project descriptions must not disclose confidential information or personal data of past clients unless you have permission. Where you provide details of referees or colleagues, you confirm you have told them and are entitled to share their details with us.

5. Why we use your data and our legal basis

Under the DPDP Act, we process personal data on the basis of your consent or for a legitimate use permitted by Section 7 of the Act. Where GDPR applies, the equivalent legal basis is shown in brackets.

We will not use your personal data for a new purpose that is incompatible with the above without telling you and, where required, obtaining fresh consent.

6. Consent and how to withdraw it

Each notice we give you at the point of collection will state the data requested and its purpose, in clear language. You may withdraw consent at any time through account settings, the unsubscribe link in email, by replying “STOP” on WhatsApp, or by writing to [privacy@optimiqconsultus.com].

Withdrawal does not affect processing already carried out. If withdrawal prevents a service such as scoring or matching, we will tell you what that means for your account.

7. Scoring, automated processing and AI

OptimIQ evaluates consultants using its CTQ framework, combining verified experience, consulting hours, case studies, certifications, assessments, interviews, third-party evaluations and delivery performance into a composite score.

8. Who we share your data with

We do not sell your personal data. We share it only as follows:

• Clients and consulting firms: profiles, scores and relevant evidence for matching and procurement, with visibility controlled by you.
• Service providers: cloud hosting, email/messaging, telephony/AI, scheduling, analytics, payment gateways, identity verification and professional advisers.
• Professional bodies: with separate consent for credential verification or certification.
• OptimIQ group companies: including sister or affiliate entities for requested regional services.
• Legal and regulatory: authorities, courts and regulators where required by law.
• Business transfers: a buyer, investor or successor in a merger, acquisition, financing or asset sale.

9. International transfers

OptimIQ serves clients and consultants across India, the GCC and elsewhere. Data may therefore be stored in or accessed from countries outside India, including the UAE, Saudi Arabia and other client locations.

We transfer personal data outside India only as permitted under Section 16 of the DPDP Act and applicable government restrictions. Where GDPR, UAE or Saudi law applies, we use appropriate safeguards such as adequacy findings, standard contractual clauses or explicit consent, as applicable.

10. How long we keep your data

11. Account deletion and your data after deletion

You can delete your OptimIQ account at any time. Within 24 hours your profile disappears from the Platform, and within 30 days after a 14-day cooling-off period we erase your personal data, except limited records required by law.

11.1 How to delete your account

1. Go to Settings → Account → Delete account, or email [privacy@optimiqconsultus.com] from your registered email address.
2. We confirm the request through your registered email or phone.
3. Before deletion you can export your profile, CTQ evidence, scorecard, IDP and engagement history.
4. Nominees may request deletion on your behalf after death or incapacity with supporting proof.

11.2 What happens and when

If you would rather skip the cooling-off period, say so in your request and we will begin erasure immediately.

11.3 What we erase and what we keep

Profile, CV, contact details, CTQ evidence, verification documents, assessment results, recordings, transcripts, scorecards and IDPs are erased, subject to the limited legal retention described in the Policy. Contracts, tax records, security logs and legal-hold records may be retained for the periods stated in the source Policy.

11.4–11.8 Other deletion cases

Copies already held by Clients or Firms may remain under their own policies. Processors and partners are instructed to erase data within contractual deadlines. Inactive accounts may be closed after 3 years with advance notice; misconduct-related records may be retained in minimal form to prevent re-registration and defend claims. Firm accounts and returning users are handled as described in the Policy.

12. How we protect your data

We apply reasonable security safeguards aligned to ISO/IEC 27001 practice, including encryption in transit and at rest, role-based access with multi-factor authentication, segregation of verification and financial data, logging and monitoring, vulnerability testing, secure development practices, staff confidentiality obligations, training, backup and recovery.

No system is completely secure. Please keep your password confidential and tell us immediately at [security@optimiqconsultus.com] if you suspect unauthorised access.

13. Your rights

1. Access a summary of the personal data we hold and relevant processing information.
2. Correct, complete and update inaccurate or incomplete data.
3. Erase data no longer necessary, subject to legal retention.
4. Withdraw consent at any time.
5. Seek grievance redressal through our Grievance Officer.
6. Nominate another individual to exercise rights after death or incapacity.
7. Contest scores and significant decisions.

If GDPR or UAE law applies, additional rights may include restriction, objection and data portability. Use account settings or email [privacy@optimiqconsultus.com]. We will verify identity and respond within 30 days or the period required by law.

14. Children

The Platform is intended only for professionals aged 18 or over. We do not knowingly collect personal data of children under 18. If we learn that we have, we will delete it promptly.

15. Cookies and similar technologies

We use cookies, pixels and local storage to run, secure and improve the Platform.

You can accept, reject or customise non-essential cookies through the cookie banner, Cookie Settings and your browser.

16. Marketing communications

We send marketing only with your consent. Every email has an unsubscribe link; on WhatsApp reply “STOP”. Service messages about your account, engagements or security are not marketing and continue while your account is active.

17. Third-party links and integrations

The Platform may link to or integrate with services such as LinkedIn, WhatsApp, Calendly and payment gateways. Their privacy practices are governed by their own policies. Connecting an integration is optional, and you can disconnect it at any time.

18. Accuracy of your data

You are responsible for ensuring the information you provide is accurate, complete and current. Where your data is used to make a decision about you or shared with a client, we take reasonable steps to keep it accurate and prompt you periodically to review your profile.

19. Grievance Officer and contact

We will acknowledge your grievance within 48 hours and resolve it within 30 days, and in any case within the applicable maximum period under the DPDP Rules, 2025.

20. Changes to this Policy

We may update this Policy as our services or the law change. We will post the updated version with a new effective date and, for material changes, notify you by email or Platform notice at least 15 days in advance and seek fresh consent where required.

21. Language and precedence

This Policy is written in English. If we provide a translation, the English version prevails to the extent of any inconsistency, except where local law requires otherwise.