Privacy Policy

1. Information We Collect

We collect only what we need to respond to you, deliver our services and run our business.

We do not ask for sensitive personal data such as health, financial account or government ID information through our website. Please do not send it to us unless we specifically request it for a contract or legal requirement.

2. How We Use Your Information

We use personal data for these purposes:

• To respond to enquiries, schedule discovery meetings and prepare tailored demos and proposals
• To deliver, manage and support ERP implementation, consulting, development and managed services
• To send relevant business communications about Oracle NetSuite and our services, by email, LinkedIn, phone or WhatsApp
• To run webinars and events, and to share related content
• To analyse website and campaign performance and improve our content and services
• To process job applications
• To meet legal, tax, accounting and regulatory obligations, and to protect our rights

Basis for processing. We process personal data on the basis of your consent, or for legitimate uses permitted by law, such as when you voluntarily share your details with us for a specific purpose, to perform a contract with you or your organisation, or to comply with law. You can withdraw consent at any time (see Section 7). Withdrawal does not affect processing already carried out.

3. Sharing Your Information

We do not sell, rent or trade your personal data. We share it only in these cases:

• Oracle. As an Oracle NetSuite partner, we may share necessary business contact and requirement details with Oracle to register opportunities, arrange licensing, provision accounts or escalate support. Oracle handles this data under its own privacy policy.
• Service providers. Trusted vendors who help us operate, such as hosting, email, CRM, calendar and meeting tools, analytics, marketing and outreach platforms, and B2B data providers. They may use the data only to provide services to us.
• Legal requirements. When required by law, court order or a government authority, or to protect our rights, property or safety.
• Business transfers. In connection with a merger, acquisition, restructuring or sale of assets, subject to equivalent protections.
• With your consent. In any other case where you have agreed.

4. Client Data in ERP Projects

During implementation, migration and support work, our consultants may access data held in a client's systems, such as employee, customer, vendor and financial records. For this data, the client is the Data Fiduciary and CPT acts as a Data Processor.

• We process client system data only on the client's documented instructions and for the agreed project scope
• Access is limited to the team members assigned to the engagement, under confidentiality obligations
• Data migrated from legacy systems (such as Tally, Zoho or on-premise ERPs) is handled in secure environments and not kept after the project unless the contract requires it
• The terms of our services agreement or data processing agreement with the client take precedence over this policy for such data

If you are an individual whose data sits in a client's system, please direct privacy requests to that organisation. We will support them in responding.

5. Data Security

We use reasonable security safeguards to protect personal data from unauthorised access, alteration, disclosure, loss or destruction. These include access controls, encryption where appropriate, secure cloud platforms, confidentiality agreements with staff and vendors, and periodic reviews of our practices.

No method of transmission or storage is fully secure. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India as required by law.

6. Data Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Prospect and marketing data is kept until you opt out or it is no longer relevant. Client and contract records are kept for the contract term plus the period required under tax and accounting laws. Recruitment data is kept for 12 months unless you agree to a longer period. After that, we delete or anonymise the data.

7. Your Rights and Choices

Subject to applicable law, you have the right to:

• Access: get a summary of the personal data we hold about you and how we use it
• Correction and update: have inaccurate or incomplete data corrected
• Erasure: ask us to delete your data, unless we must keep it by law
• Withdraw consent: stop processing that relies on your consent
• Opt out of marketing: unsubscribe using the link in any email, reply "unsubscribe", or write to us. We will stop marketing messages within 7 working days
• Grievance redressal: raise a complaint with our Grievance Officer, and if unresolved, with the Data Protection Board of India
• Nominate: nominate another person to exercise your rights in case of death or incapacity

If you are in the UK or EU, you may also object to processing, ask for restriction or data portability, and complain to your local supervisory authority. We respond to requests within 30 days and may need to verify your identity first.

8. Cookies and Tracking

Our website uses cookies and similar technologies to keep it working, remember preferences and understand how visitors use it. Our emails may contain tracking pixels to measure opens and clicks. You can manage cookies through our cookie banner or your browser settings. Blocking some cookies may affect how the site works.

9. Third-Party Links

Our website and communications may link to third-party sites, including Oracle. We are not responsible for their privacy practices, so please read their policies before sharing information.

10. International Data Transfers

We are based in India and work with clients in India, the USA, the UK and the UAE. Your data may be stored or processed in India or in other countries where we, Oracle or our service providers operate. We transfer data only to countries not restricted by the Government of India, and use contractual and security safeguards so it stays protected in line with this policy.

11. Children's Privacy

Our services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If we learn that we have, we will delete it.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or the law. The updated version will be posted on this page with a new effective date. For significant changes, we may also notify you by email.

13. Contact Us and Grievance Officer

For questions, requests or complaints about this policy or your personal data, contact:

General enquiries: info@connatepeople.com · sales@connatepeople.com · +91 88283 39541

© 2026 Connate People Technology LLP. All rights reserved.