Congregate Tech Solutions

This Privacy Policy explains how Congregate Tech Solutions (India) and its UK affiliate Congregate Limited(registered in England & Wales, Company No. 7404228) (together “Congregate”, “we”, “us”, or “our”) collect, use, store, and protect personal data when you visit our website or engage with our services.

Our UK entity is subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our India entity complies with the Information Technology Act 2000 and applicable data protection rules. We are committed to handling your personal data lawfully, fairly, and transparently.

1. Data We Collect

We may collect and process the following categories of personal data:

Contact data: name, email address, phone number, and company name — provided when you fill in our contact form, request a consultation, or correspond with us.
Usage data: IP address, browser type, operating system, pages visited, time spent, and referring URLs — collected automatically when you browse our website.
Communications: content of emails, enquiries, or messages you send us.
Business data: information about your organisation provided in connection with a services engagement, including financial or operational information shared under a confidentiality agreement.

We do not collect sensitive personal data (such as health, biometric, or financial account data) through this website.

2. How We Use Your Data

We use personal data for the following purposes:

Responding to your enquiries and providing requested information;
Delivering and managing our services under a contract with you;
Sending service-related communications and updates;
Improving our website, services, and user experience;
Complying with legal and regulatory obligations;
Protecting our legitimate business interests, including fraud prevention.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

3. Legal Basis for Processing (UK/EU)

For individuals in the UK or European Economic Area, we rely on the following lawful bases:

Contract: processing is necessary to perform a contract with you or take steps at your request before entering one.
Legitimate interests: operating and improving our website and services, provided your interests and rights do not override ours.
Legal obligation: where processing is required to comply with applicable law.
Consent: where you have explicitly given consent, which you may withdraw at any time.

4. Cookies & Tracking

Our website may use the following types of cookies and tracking technologies:

Essential cookies: required for the website to function correctly.
Analytics cookies: help us understand how visitors interact with our website (e.g. Google Analytics 4). These are only set with your consent where required by law.
Preference cookies: remember choices you make on the website.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

5. Data Sharing

We may share your personal data with:

Service providers: third-party vendors who assist us in operating our website or delivering services (e.g. hosting, email delivery, analytics), bound by confidentiality obligations and data processing agreements.
Professional advisors: lawyers, accountants, and insurers where necessary for our business operations.
Regulators and law enforcement: where required by applicable law, court order, or governmental authority.
Group entities: between our India and UK offices for the purpose of delivering services to you.

6. International Data Transfers

As we operate in both India and the United Kingdom, personal data may be transferred between these jurisdictions. Where data is transferred from the UK to India, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including standard contractual clauses or equivalent protections.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact enquiries are typically retained for up to 3 years. Data relating to a services engagement is retained for up to 7 years for legal and accounting purposes, after which it is securely deleted or anonymised.

8. Your Rights

Subject to applicable law, you may have the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Rectification: request correction of inaccurate or incomplete data.
Erasure: request deletion of your data where there is no legitimate reason for us to retain it.
Restriction: request that we limit how we use your data in certain circumstances.
Portability: receive your data in a structured, machine-readable format (where applicable).
Objection: object to processing based on legitimate interests or for direct marketing.
Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@congregatets.com. We will respond within 30 days. UK residents also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include access controls, encryption in transit, and regular security reviews. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised effective date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or data subject requests regarding this Privacy Policy, please contact us:

India: Congregate Tech Solutions — info@congregatets.com — +91 9044319555
United Kingdom: Congregate Limited, 6 Wigton Green, Leeds, West Yorkshire, LS17 8QR, United Kingdom — +44 786 077 7728