Last updated on January 18, 2022

PRIVACY POLICY

• 1.0 Objective
  
  This Data Privacy Policy (hereinafter “The Policy”) explains the privacy and data protection principles adopted by ICRA Analytics Limited with regards to the personal information of its customers, partners, employees (current or former employees, trainees), job applicants, contractors, prospects and vendors and current or former members of the Board of Directors (collectively you, your), whose Personally Identifiable Information (hereinafter referred to as “PII”) and / or Sensitive Personal Data or Information (hereinafter referred to as “SPI”), collectively personal data are processed by ICRA Analytics Limited .
  
  The Policy sets forth the reasonable security practices and procedures adopted by ICRA Analytics Limited to provide a convenient and safe online experience, while maintaining and safeguarding the confidentiality and integrity of the personal data provided to ICRA Analytics Limited, during use, storage, transmission of information and delivery of services over the internet.
• 2.0 Scope and Applicability
  
  The Policy is applicable to any personal data collected and managed by ICRA Analytics Limited and is subject to local law. For the purposes of this Privacy Policy, “ICRA Analytics Limited”, "we", "us", and "our" means ICRA Analytics Limited.
  
  Managing of personal data will cover collection, using, storage, processing, disclosure and transmission. Personal data collected may be stored, used, processed or disclosed through email, offline means or on websites owned and operated by ICRA Analytics Limited, collectively the “Site”.
  
  ICRA Analytics Limited will not be liable for any unsolicited information provided by you. You consent to ICRA Analytics Limited using such information as per ICRA Analytics Limited ’s Privacy Policy.
• 3.0 Review and Update
  
  ICRA Analytics Limited may from time to time update this Privacy Policy. Changes to this Privacy Policy will become effective when we post or link to the revised Privacy Policy on the Site. Please review the “LAST UPDATED” legend at the top of this page to determine when this Privacy Policy was most recently revised.
• 4.0 Personal Data collected by ICRA ANALYTICS LIMITED
  
  • Personally Identifiable Information (‘PII’) collected by ICRA ANALYTICS LIMITED:
    Personally Identifiable Information (‘PII’) means any information about an individual through which the individual can be identified. It does not include data where the identity has been removed (anonymous data). ICRA Analytics Limited may collect, use, store and transfer different kinds of PII which we have been grouped together as follows:
    • Identity Data includes first name, maiden name, last name, AADHAR, PAN, username or similar identifier, marital status, title, date of birth and gender, qualification credentials;
    • Contact Data includes billing address, delivery address, email address and telephone numbers;
    • Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website;
    • Profile Data - your username, purchases or orders made by you, your interests, preferences, feedback and survey responses;
    • Usage Data includes information about how you use our website, products and services;
    • Marketing and Communications Data includes your preferences in receiving marketing from us and your communication preferences. We may collect personal information such as your First Name, Last Name, E-mail Address, Job Title, Organization Name, Country, City and Phone Number. When you provide information, it enables us to respond to your request for products or services.
    • PII in client scoped data refers to any PII of clients or the client of client. Such data is handled as per the Master Service Agreement/SoW with the client
  • Sensitive Personal Data or Information (SPI)
    We may collect Sensitive Personal Data or Information (SPI) only if the same is necessary and required for lawful purpose including for execution of contractual, regulatory or statutory requirements and you consent to such use. SPI shall be used only for the purpose for which it is collected. We shall retain your SPI for reasonable time period only or as per applicable law. SPI that we collect may include the following:
    • Financial Data including bank account and payment card details;
    • Transaction Data details about payments made / received
    • Biometric data of our employees (permanent and contractual), limited to fingerprint collected for attendance monitoring and access control system
    • Medical records of employees such as drug reports and medical documents related to Mediclaim insurance are collected and kept securely in HR custody
    • SPI in client scoped data refers to any SPI of clients or the client of client. Such data is handled as per the Master Service Agreement/SoW with the client
• 5.0 Collection of Personal Data
  
  ICRA Analytics Limited may from time to time update this Privacy Policy. Changes to this Privacy Policy will become effective when we post or link to the revised Privacy Policy on the Site. Please review the “LAST UPDATED” legend at the top of this page to determine when this Privacy Policy was most recently revised.
  • Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email, at front desk at our offices, at our Site or otherwise. This includes personal data that you provide when you:
    • Register on the Site. The registration process requests that you provide your name, business email address, business address, business phone number, and company affiliation, and agree to the User Agreement presented at the time of registration. This may require you to select a username and a password. For this reason, please safeguard your username and password carefully and do not disclose it to any other person.
    • Fill up online and offline forms for order, registration, surveys, promotion participation, and through offline means
    • Apply for our solutions or services
    • Apply for a job or gain employment with us
    • Use our mobile applications
    • Disclose information on our social media pages, message boards, comment fields, chat areas or other community forums
    • Give us some feedback
    You need not provide us with any personal data to visit the Site. However, if you choose to withhold requested information, you may not be able to visit all sections or use all features of the Site.
  • Automated technologies or interactions. As you interact with our website or mobile applications, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.
  • Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
    • Public Forums - ICRA Analytics Limited is not responsible or liable for personal data that you post in public forums or otherwise choose to make public. We have the right but not the obligation to monitor any activity and remove information from comment fields, message boards, events and other interactive sections of the Services.
    • Technical Data collected from various sources and analytics providers
• 6.0 Use of Personal Data Collected
  
  The personal data we collect may be used to:
  • provide information and services as requested by you
  • assess queries, requirements, and process requests for products and services
  • to provide subscription related services and information
  • to enable you to download collaterals and marketing materials
  • perform client communication, service, billing and administration
  • conduct data analysis
  • assess web site performance and usage analysis
  • maintain leads
  • run marketing or promotional campaigns
  • create brand awareness
  • provide better services and generate demand
  • market products and services based on legitimate business interest under the applicable law; or
  • conduct processing necessary to fulfil other contractual obligations for the individual
  • meeting government regulatory requirements such as sales tax collection, audits, etc
  The legal basis may differ depending on applicable local laws, but generally we consider that our legitimate interests justify the processing; we find such interests to be justified considering that the data is limited to browsing activities related to what is considered business or professional related (our website does not offer any content directed to individual consumers as well as any content which might be used for any inferences about your private life habits or interests), we provide easy opt-out and limit the retention of data. The data that we may receive directly from you is completely voluntary and at your option. Where consent is required specifically, we will obtain consent before processing.
• 7.0 Collection and Use of Other Data
  
  
  • Monitoring Data. ICRA Analytics Limited and its service providers may collect and/or track other information such as demographic information, domain names, computer type, browser types, screen resolution, and other statistical data involving the use of the Site ("Monitoring Data"). We use Monitoring Data to help us understand who uses the Site and to improve and market it, as well as our other web sites and services.
    -Unless combined with PII, Monitoring Data does not personally identify you or any other user, and we may use it for any purpose.
  • Aggregated Data. Additionally, we may aggregate PII in a manner such that the end-product does not personally identify you or any other user of the Site, for example, by using information to calculate the percentage of our users who have a particular telephone area code. Such aggregate information may also be used for any purpose.
  • Cookies. To enhance the Internet experience on the Site, ICRA Analytics Limited and our service providers may use ‘cookies’ on the Site. Cookies are data that a web server transfers to an individual's computer for recordkeeping and other purposes. We use cookies and other technologies to facilitate users' ongoing access to and use of our Site. If you do not want information collected through the use of cookies, there is a simple procedure in most browsers that allows you to automatically decline cookies, or to be given the choice of declining or accepting the transfer of a particular cookie, or cookies from a particular web site, to your computer. If cookies are disabled, however, all features of the Site may not operate as intended. Information about the procedure you are required to follow in order to disable cookies can be found on your Internet browser provider’s web site. We expect our service providers to honor any decision by you to block or disable cookies in connection with the Site.
  • Tools. We and our service providers may also use various common Internet tools such as 'pixel tags,' ‘action tags,’ ‘web beacons,’ ‘.gif tags,’ 'JavaScript' or similar technologies (together, "Tools") in connection with Site pages and email messages in certain formats to among other things, track the actions of Site users and email recipients, to determine the success of marketing campaigns and to compile statistics about Site usage and response rates. Tools allow us to count users who have visited certain pages of the Site, to deliver branded services, and to help determine the effectiveness of promotional or advertising campaigns. When used in email messages in certain formats, Tools can tell the sender whether and when the email has been opened.
  • ICRA Analytics Limited uses cookies and Tool technologies to understand how the Site is used and to customize and enhance the Internet experience of individual users. When you revisit the Site, ICRA Analytics Limited may recognize you by a Tool and customize your experience. For example, once you have completed the registration process, a cookie and/or Tool will be used to avoid having you register again. We believe cookies and Tool technologies add value to the user experience.
  • IP Addresses. When you visit and interact with the Site, we and our third-party service providers may collect Internet Protocol (IP) addresses. Your IP address is a number that is automatically assigned to the computer that you are using by your Internet Service Provider (ISP). This number is identified and logged automatically in our server log files whenever you visit the Site, along with the time(s) of your visit(s) and the page(s) that you visited. We use IP addresses to understand how the Site is used by our users and to improve the Site. Where required by applicable law, IP addresses will be treated as PII.
• 8.0 Cookie Policy
  
  A cookie is a small file, typically of letters and numbers, downloaded to a user's computer or mobile device when the user accesses certain websites. Cookies are then sent back to originating website on each subsequent visit. Cookies are useful because they allow a website to recognise a user’s device. They are used for a wide variety of purposes such as website analytics – counting visitors and their behaviour, targeted advertising, recording user preferences or for authentication.
  
  Strictly Necessary Cookies - These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
  
  Performance cookies - These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site and will not be able to monitor its performance.
  
  Functionality cookies - These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies, then some or all of these services may not function properly.
  
  Our Site may use cookies. By using our Site and agreeing to its terms of use, you consent to our use of cookies in accordance with the terms of our Privacy policy.
  
  Cookies help us:
  • - remember and process the items that you are looking for
  • - understand and save your preferences based on previous or current site activity, which enables us to provide you with improved services
  • - compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in future
  You can choose to direct your computer warn you each time a cookie is being sent, or you can turn off all cookies through your browser settings. Each browser is different, so you may refer your browser's Help menu to learn the correct way to modify your cookies. However, if you disable cookies you can still visit our site but some features may not be available. This could affect your site experience and efficiency, and some of the features may not function as desired.
  
  We may also use web beacons or tracking pixels in our emails and web pages which help us to monitor whether you have opened any newsletters we may have sent to you. A web beacon is one of various techniques used on web pages or email, to unobtrusively (usually invisibly) allow checking that a user has accessed some content. Common uses are email tracking and page tagging for web analytics. We use this information to deliver you a personalized service by ensuring that we send you information that we believe you will find interesting based on the content we know you have engaged with previously.
  
  Our website also includes functionality to interact with social media websites where you may have accounts, such as Facebook, Twitter and LinkedIn, etc. You should be aware that these sites may set cookies while you’re using this website, and use of these features may result in the collection or sharing of information about you. We encourage you to review your privacy settings on the social media sites with which you interact, together with their privacy policies, to make sure you understand the information that could be shared by those sites. ICRA Analytics Limited is neither responsible nor liable for any actions or policies of any third parties, and you are expressly advised to check the applicable privacy policy of such third party before providing personal data to such third parties.
• 9.0 Anti-Spam policy
  
  ICRA Analytics Limited recognizes the receipt, transmission or distribution of spam emails (i.e. unsolicited bulk emails) as a major concern and has taken reasonable measures to minimize the transmission and effect of spam emails in our computing environment. All emails received by ICRA Analytics Limited are subject to spam check. Any email identified as spam will be rejected with sufficient information to the sender for taking necessary action. With this measure, along with other technical spam reduction measures, ICRA Analytics Limited hopes to minimize the effect of spam emails. ICRA Analytics Limited reserves the right to reject and/or report any suspicious spam emails, to the authorities concerned, for necessary action.
• 10.0 Disclosure of Personal Data Collected
  
  We may disclose personal data for the following purposes:
  • 1. Third-Party Service Providers. We may provide personal data to third-party service providers, who provide services to us, including but not limited to, data analysis, order fulfilment, payment processing, and other services of an administrative nature. These service providers work on behalf of us under strict confidentiality agreements. However, these companies do not have any independent right to further share or disseminate this information.
  • 2. Affiliate Communications. As permissible under the applicable laws and regulations, we may transfer personal data among our affiliates (the details of which can be found on the https://icraanalytics.com website) to allow our affiliates to contact you regarding products, programs, services and promotions that they believe may be of interest to you, and such affiliates may otherwise use your personal data in accordance with this Privacy Policy. If you would prefer not to receive marketing communications from ICRA Analytics Limited or our affiliates, please see the "Your Choices" section below. ICRA Analytics Limited will be the party responsible for jointly used personal data.
  • 3. Assignment. We may transfer any and all personal data that we collect to an affiliated entity or a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock (including without limitation in connection with any bankruptcy or similar proceedings). -Law enforcement; emergencies; compliance. We may disclose personal data about you to others as we believe to be appropriate: (a) to enforce our Terms of Use; (b) to protect our operations or those of any affiliated entities; (c) to protect the rights, privacy, safety or property of ICRA Analytics Limited , its affiliated entities, you, or others; and (d) to permit us to pursue available remedies or limit the damages that we may sustain.
  • 4. We may share personal data with statutory authorities, government institutions, law enforcement agencies or other bodies where required for compliance with legal requirements.
  • 5. We may use the personal data to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims.
  • 6. We may share personal data where we believe it is necessary in order to investigate, prevent, or take action against any illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.
• 11.0 Your Choices
  
  We give you choices regarding our use and disclosure of your personal data for marketing purposes.
  
  -If you no longer want to receive marketing-related emails from us on a going-forward basis, you may stop receiving these marketing-related emails by sending an e-mail to compliance@icraanalytics.com .
  
  -If you would prefer that we do not share your personal data on a going-forward basis with our affiliates or with any third parties for their marketing purposes, you may cease this sharing by sending an e-mail to compliance@icraanalytics.com .
  
  We will try to comply with your request(s) within reasonable timeline. Please note that if you exercise the second option as described above, we will not be able to remove your personal data from the databases of our affiliates or third parties with which we have already shared your personal data (i.e., to which we have already provided your personal data as of the date that we implement your request). Further, please note that requesting us not to share your personal data with affiliates or third parties may result in you no longer receiving any marketing emails from ICRA Analytics Limited. Please also note that if you choose not to receive marketing-related messages from us, we may still send you important administrative messages, and you cannot elect to stop receiving such administrative messages, unless you choose to stop receiving services from us.
  
  If we intend to use your personal data for a purpose that is incompatible with the purposes detailed in this Privacy Policy, or if we intend to disclose it to a type of third party not previously identified, we will notify you and offer you the opportunity to opt-out of such uses and/or disclosures.
  
  You may also indicate your choices regarding marketing-related emails by changing your preferences on your Site profile at any time, or contacting us via postal mail or telephone using the “Contact Information for ICRA Analytics Limited ” below.
• 12.0 How you can access, change or suppress your Personal Data
  
  If you would like to review, correct, update, suppress, delete or otherwise limit our use of your personal data that has been previously provided to us, you may make a request by contacting us using the information provided in the “Contact Information for ICRA Analytics Limited” below. We will try to comply with your request within reasonable timeline and consistent with the applicable law.
• 13.0 Third Party Links
  
  ICRA Analytics Limited may provide links to third-party websites for your convenience and information. If you access those links through our website, you will leave the ICRA Analytics Limited website. ICRA Analytics Limited has no control on those sites or their privacy practices. We do not endorse or make any representations about third-party websites. If you provide any personal data through any third-party web site, your transaction will occur on that third party's web site (not the Site) and the PII you provide will be collected by, and controlled by the privacy policy of, that third party. We recommend that you familiarize yourself with the privacy policies and practices of any such third parties. PLEASE NOTE THAT THIS PRIVACY POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY THIRD PARTIES, INCLUDING, WITHOUT LIMITATION, AFFILIATED ENTITIES THAT DO NOT POST OR LINK DIRECTLY TO THIS PRIVACY POLICY.
• 14.0 Security Measures
  
  ICRA Analytics Limited has established reasonable organizational and technical measures to protect PII from loss, misuse, unauthorized access, disclosure, alteration, or destruction. ICRA Analytics Limited ’s information security management standards are in compliance with ISO 27001. ISO 27001 (Information Technology – Security Techniques – Information Security Management System - Requirements), a widely recognized international security management standard.
  
  You are responsible for maintaining the security of your account credentials and other authentication involved in obtaining access to password-protected or secure areas of the services we provide to you. ICRA Analytics Limited will treat access to those services through your account credentials as authorised by you. We shall bear no liability in respect of such unauthorised use of your account. Unauthorised access to password-protected or secure areas is prohibited and may lead to criminal prosecution. We may suspend your use of all or part of the services without notice if we suspect or detect any breach of security.
  
  Please note that while ICRA Analytics Limited has endeavoured to create a secure and reliable Site for users, no site is 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any account you might have with us has been compromised), please notify us of the problem immediately by contacting us using the information provided in "Contact Information for ICRA Analytics Limited " (note that if you choose to notify us via physical mail, this will delay the time it takes for us to respond to the problem).
• 15.0 Data Integrity
  
  ICRA Analytics Limited will use your personal data only in ways that are compatible with the purposes for which it was collected, authorized by this Privacy Policy, or authorized by you. ICRA Analytics Limited will take reasonable steps to ensure that personal data is relevant to its intended use, and is accurate, complete, and current (as provided by you). ICRA Analytics Limited depends on you to update or correct your personal data whenever necessary.
• 16.0 Retention Period
  
  We will retain personal data about you for the period reasonably necessary to fulfil the purposes for which you provided the information, including for the purposes of satisfying any legal, accounting, or reporting obligations, to resolve disputes, to enforce agreements and for such other purposes as are consistent with retention periods required or permitted by law. In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
• 17.0 Enforcement
  
  ICRA Analytics Limited periodically will review its compliance with this Privacy Policy. ICRA Analytics Limited will also review and respond to any formal written complaints that we receive from you. Please contact us at the address listed below in “Contact Information for ICRA.”
• 18.0 Use of this Site by Minors
  
  This Site is not directed to individuals under the age of eighteen (18), and we request that these individuals do not provide personal data through this Site.
• 19.0 Grievance Redressal
  
  Any grievance or complaint, in relation to processing of personal information, should be sent to ICRA Analytics Limited in writing to following contact email ID. Grievance shall be redressed as expeditiously as possible. The contact information for the Grievance Officer is Mr Nilabh Vishnu, Secretarial & Compliance ; e-mail address compliance@icraanalytics.com

CONTACT INFORMATION FOR ICRA ANALYTICS LIMITED

Questions or concerns regarding ICRA Analytics Limited 's data protection practices should be addressed to:

• Legal Department
• ICRA Analytics Limited
• Infinity Benchmark, 17th Floor,
• Plot – G-1, Block GP, Sector V, Salt Lake,
• Kolkata – 700091, West Bengal, India
• Phone: +91-33-40170100
• E-mail: compliance@icraanalytics.com