Privacy Notice

This notice explains how IncidentMatters (“we”, “us”) processes personal data collected through incidentmatters.com, in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it. For the data described here, we act as the Data Fiduciary. “You” means the Data Principal whose data we process.

1. Personal data we collect and why

Source	Data	Purpose
Contact form	Name, work email, organisation, phone, industry, message	To respond to your enquiry and discuss our services
Careers form	Name, email, phone, position, experience, resume, cover note	To assess your application and contact you about it
Email to us	Details you include in your message	To respond to you
Website use	Technical data such as IP address, browser and pages visited, only where cookies or analytics are enabled	To keep the site secure and understand how it is used

We collect only what is needed for these purposes. Please do not send passwords, government ID numbers or other sensitive data through our forms.

2. Consent

We ask for your consent through a clear tick-box on each form before we process your data for the stated purpose. Your consent is free, specific and informed, and you can submit the form only if you agree. We may also process data without consent where the DPDP Act allows, for example to comply with law, respond to a legal request, or deal with a security incident.

3. Withdrawal of consent

You may withdraw consent at any time by emailing privacy@incidentmatters.com. Withdrawal is as easy as giving consent. We will stop processing and delete your data unless the law requires us to keep it. Withdrawing does not affect processing done before withdrawal. For job applicants, withdrawal means we can no longer consider your application.

4. Retention

• Enquiries: kept while we deal with your request and for up to 24 months afterwards.
• Job applications: kept for up to 12 months after the hiring decision, unless you ask us to delete them sooner.
• Records we must keep by law: kept for the legally required period.
• Website logs: kept for a short period needed for security.

5. Sharing and transfers

We do not sell personal data. We share it only with: service providers who process it for us under contract (such as email, hosting and form services); professional advisers; and authorities where the law requires. Our service providers may process data outside India. We make such transfers only as the DPDP Act allows.

6. Security

We use reasonable safeguards including access controls, encryption in transit and limited staff access. If a personal data breach occurs, we will notify the Data Protection Board of India and affected Data Principals as the law requires.

7. Children

This website is for businesses and job seekers. We do not knowingly collect personal data of children (under 18) and do not track or target them.

8. Your rights as a Data Principal

• Access a summary of the personal data we process and the processing activities.
• Correct inaccurate or incomplete data, complete it, or update it.
• Erase data we no longer need.
• Seek grievance redressal.
• Nominate another person to exercise your rights if you die or become incapacitated.

Write to privacy@incidentmatters.com from the email address you used. We may verify your identity first.

9. Grievance redressal

If you have a concern about how we handle your data, contact our Grievance Officer first:

Grievance Officer: [Name to be added]
Email: grievance@incidentmatters.com
Address: [Registered office address to be added]

We will acknowledge your complaint and respond within the timelines the law prescribes. If you are not satisfied, you may complain to the Data Protection Board of India after first using our grievance process.

10. Cookies and analytics

This website uses only essential technical storage needed for it to work. We do not use advertising cookies. If we add analytics or other non-essential cookies, we will ask for your consent first and update this notice.

11. Privacy contact

Privacy queries: privacy@incidentmatters.com

12. Changes to this notice

We may update this notice. The date at the top shows the latest version. Where changes affect how we use your data, we will seek fresh consent where required.