Privacy Policy

1. Data Fiduciary Identity & Scope

Coreytics Data Solutions is the “Data Fiduciary” responsible for determining the purpose and means of processing personal data collected through our website (coreyticsdatasolutions.com), contact forms, WhatsApp communications, and advisory consultations.

2. Minimal Personal Data We Collect

In accordance with data minimization principles, we only request information strictly required for professional communication and project scoping:

• Direct Inquiries: Full name, professional/business email, organization name, phone/WhatsApp number, and high-level descriptions of your analytics objectives.
• Newsletter & Updates: Business email address (with explicit, opt-in consent and one-click unsubscribe).
• Technical Interaction Data: Non-personally identifiable technical telemetry (e.g. browser type, approximate viewport resolution, referring domain) collected via server logs to maintain system security and uptime.

3. Lawful Grounds for Processing (DPDP Act Compliance)

Under the DPDP Act 2023, personal data is processed solely based on explicit, informed, and unambiguous consent provided by you when submitting our contact forms or initiating direct correspondence, or for legitimate business execution pursuant to a formalized client Statement of Work (SOW). You have the right to withdraw your consent at any time without retroactive penalty.

4. Client Confidentiality & Proprietary Datasets

During our data audit, KPI dashboard development, and reporting automation services, clients may grant access to proprietary operational datasets, schema structures, or metric calculations. Before any client data is transferred, we execute a legally binding mutual Non-Disclosure Agreement (NDA). Client datasets remain 100% the property of the client, are stored in isolated, encrypted working environments, and are permanently purged upon project conclusion and written acceptance.

5. Cookies & Tracking Technologies

Our website uses strictly essential session cookies to remember security tokens, user viewport preferences, and cookie consent choices. We do not employ third-party tracking pixels, advertising retargeting networks, or invasive cross-domain trackers. For a detailed breakdown of all cookies and how to adjust preferences, please review our Cookies Policy.

6. Your Rights as a Data Principal (DPDP Act & Global Standards)

Under Chapter III of the Digital Personal Data Protection Act, 2023, and international data protection regulations, you hold the following enforceable rights:

• Right to Access: Request a clear summary of your personal data being processed by us and the processing activities undertaken.
• Right to Correction & Erasure: Request the correction of inaccurate or incomplete personal data, or the complete deletion of your records where processing is no longer necessary.
• Right of Grievance Redressal: Submit inquiries or grievances directly to our designated Grievance Officer, with guaranteed review within 30 days.
• Right to Nominate: Nominate any individual to exercise your data principal rights in the event of incapacity or demise.
• Right to Withdraw Consent: Revoke any previously granted consent for communications or data handling with ease.

7. Data Retention & Secure Disposal

Inquiry communications are retained only as long as necessary to answer your request or manage active commercial negotiations (maximum 24 months from last activity). Client project files and staged data pipelines are retained for the contracted warranty period (typically 30–90 days following final sign-off) and subsequently purged using cryptographically secure wiping protocols.

8. Third-Party Disclosures & Cross-Border Transfers

Coreytics does not sell, trade, or monetize personal information. We only share information with verified cloud infrastructure providers (e.g., enterprise email hosting, encrypted project staging servers) that maintain strict contractual safeguards conforming to ISO 27001, SOC 2, and DPDP Act standards. We do not transfer personal data to any restricted foreign territories.

9. Grievance Redressal Officer (DPDP Act Requirement)

In compliance with Section 10(2) of the Digital Personal Data Protection Act, 2023, Coreytics has designated an official Grievance Redressal Officer to handle data protection inquiries, consent revocations, and complaints:

10. Policy Updates

We may periodically update this Privacy Policy to reflect statutory developments or technological enhancements. Significant revisions will be highlighted with an updated revision date at the top of this document.