Privacy Policy

Hab Business Solutions ("Hab", "we", "us") is the data controller (under EU/UK GDPR) and data fiduciary (under India's Digital Personal Data Protection Act 2023, "DPDP") for personal data collected through www.habsolutions.cloud and our engagements. We operate from India and serve clients globally.

For any privacy question, request, or complaint, contact our Grievance Officer / Data Protection contact at haribharathi@habsolutions.cloud.

We collect only the personal data we need. Typical categories include:

• Contact & enquiry data — name, work email, company, phone (if provided), and the message you send us through forms.
• Engagement data — information you or your team share during a paid engagement (documents, process data, business metrics).
• Product data — when you use MinMaxHR, CandidRanker, or JobRankd, data you upload, generate, or configure inside that product.
• Technical data — IP address, browser and device info, referer, and standard server logs.
• Consent records — the fact, time, and version of Terms / Privacy Policy you accepted on a form.

We do not knowingly collect data from anyone under 18.

We use personal data to:

• respond to enquiries and schedule calls;
• deliver and improve engagements and product features you use;
• maintain security, prevent abuse, and keep audit trails;
• issue invoices and comply with tax, accounting, and legal obligations;
• send occasional service updates to existing clients (never third-party marketing).

Under GDPR, we rely on: (a) your consent for form submissions and optional communications, (b) performance of a contract for engagement and product delivery, (c) legitimate interests for security, service improvement, and B2B communication with existing clients, and (d) legal obligation for tax, accounting, and regulator requests.

Under DPDP, we process personal data on the basis of your consent (obtained through the checkbox on every form) or certain legitimate uses permitted by the Act (for example, complying with law or responding to an enquiry you initiated).

This section is our Data Protection Policy. It describes the safeguards we apply today; we improve them continuously and do not claim any specific certification unless separately published on our website.

• Access control — access to personal data is limited to Hab personnel who need it to deliver the Services, on a least-privilege basis.
• Encryption in transit — the website and product APIs are served over HTTPS/TLS.
• Authentication — administrative accounts on our infrastructure and product platforms use strong authentication.
• Vendor review — we review the security and privacy posture of sub-processors before engaging them, and require appropriate contractual protections.
• Segregation — client engagement data and product tenant data are logically segregated.
• Incident response — we investigate suspected incidents promptly. If a personal data breach is likely to result in risk to your rights, we will notify affected parties and relevant authorities as required by applicable law (including GDPR Article 33/34 and DPDP timelines).

Report a suspected security issue to haribharathi@habsolutions.cloud with the subject line "Security".

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Typical defaults:

• Website form submissions: up to 24 months from last contact, then deletion or anonymisation.
• Active engagement records: for the duration of the engagement plus the retention period stated in the Engagement Document (typically 3 years).
• Invoicing & tax records: as required by Indian law (currently 8 years).
• Product accounts: per the applicable product terms; on account closure, personal data is deleted or anonymised within a reasonable period unless retention is legally required.

We do not sell personal data. We share it only with:

• Sub-processors we rely on to run our website, products, communications, and AI features — categories include cloud hosting and application platforms, email delivery, analytics, and large-language-model / AI-inference providers. A current named list is available on request to haribharathi@habsolutions.cloud.
• Your organisation's own users and administrators, where applicable to a product tenant.
• Regulators, courts, or law-enforcement when required by law.

Because we operate from India and use global cloud infrastructure, personal data may be processed in India and other countries. Where personal data of EU/UK data subjects is transferred outside their region, we rely on lawful transfer mechanisms (Standard Contractual Clauses under GDPR Article 46, and the UK IDTA / Addendum where applicable). Under DPDP, cross-border processing is undertaken in accordance with Section 16 of the Act and any restrictions notified by the Central Government.

Under India's DPDP Act (Data Principals), you have the right to: (a) access a summary of your personal data and processing, (b) correct or complete it, (c) request erasure, (d) nominate another person to exercise your rights, and (e) raise a grievance with our Grievance Officer.

Under EU/UK GDPR (Data Subjects), you additionally have the right to: (a) access, (b) rectification, (c) erasure, (d) restriction of processing, (e) data portability, (f) objection to processing based on legitimate interests, (g) withdrawal of consent at any time, and (h) lodging a complaint with your local supervisory authority.

To exercise any right, email haribharathi@habsolutions.cloud with the subject "Data rights request" and enough information for us to verify your identity. We respond within the timelines required by applicable law.

Our website uses only essential cookies required to deliver the site (for example, preserving your session and preferences). We do not deploy advertising cookies. If we later introduce analytics or measurement tools, we will update this section and, where legally required, ask for your consent before setting non-essential cookies.

We may update this Privacy Policy from time to time. When we do, we change the "Last updated" date at the top and, for material changes, notify you by email or a website notice.

For any privacy question, request, or complaint, contact:

Hari Bharathi
Grievance Officer / Data Protection contact, Hab Business Solutions
haribharathi@habsolutions.cloud
India · serving clients globally

If we cannot resolve your concern, EU/UK data subjects may complain to their local supervisory authority. Data Principals in India may approach the Data Protection Board of India under the DPDP Act.