Enterprise Online Privacy Statement

Delivering Excellence

At IFocus Systec India Pvt Ltd (IFocus), our commitment to privacy goes beyond the minimum legal and regulatory requirements. We strive for best-in-class data protection and privacy management; this requires a sound data privacy governance structure and an effective data privacy compliance and best practices program. With these measures, IFocus aims to comply with ever-changing and increasingly complex regulatory standards; meet contractual privacy obligations; and build trust with our employees, customers, business partners, and other stakeholders.

Statement Purpose

This Enterprise Online Privacy Statement (Privacy Statement) describes IFocus Systec India Pvt Ltd’s approach, requirements, and expectations in relation to our collection, use, storage, and transfer of Personal Data wherever we operate.

Scope

Subject to the following exceptions, this Privacy Statement applies to all IFocus Systec India Pvt Ltd Sites and Services. A privacy policy or statement specific to a particular IFocus service, program, or subsidiary may supersede or supplement this Privacy Statement. The Privacy Statement also governs the offline collection and processing of Personal Data concerning IFocus and its customers, business partners, job applicants, employees, and former employees (collectively, Data Subjects). Where a contract with a customer defines different requirements, those take precedence.

Programmatic Approach

Operating within the IFocus Systec India Pvt Ltd Integrity organization, IFocus has established a comprehensive set of integrated ethics and compliance as well as privacy and data protection programs and initiatives. Outlined below, these promote and support the responsible collection, use, storage, and transfer of Personal Data.

Governance

Compliance Policies, Standards, and Processes

Employee Communications and Training

Risk Assessment, Monitoring, and Auditing

Incident Handling

Cross-Disciplinary Partnerships

Flexible Service Delivery Model

Formal Dispute Resolution Mechanism

DEFINITIONS This section defines various terms that are frequently used in this Policy.

COLLECTION AND PROCESSING OF PERSONAL DATA IFocus Systec India Pvt Ltd may collect and process Personal Data in connection with a variety of interactions that you may have with IFocus as a Data Subject. These include access to IFocus Sites or Services; ordering channels; hiring and employment administration processes; communications with IFocus representatives; or the purchase of goods or services.

The Personal Data We Collect To the extent required and permitted by law, IFocus may collect and use the following information:

Personal Data Voluntarily Provided

IFocus collects Personal Data about you in connection with many of our services, with the goal of improving our service to you and providing you with the best possible experience. When using our webstore or website, you may be prompted to make an account which may hold personal data such as name, mailing address, email address, or credit card information. When contacting IFocus, you may be required to submit contact information. When communicating with IFocus, all communications will be transmitted and stored by us. To be clear, you may be providing Personal Data when: i) communicating with IFocus via phone calls, chats, emails, web forms, social media, and other methods of communication; ii) subscribing to IFocus’s marketing materials; or iii) applying for a job.

Personal Data Collected from Other Sources

IFocus may also collect information about you from other sources to help us correct or supplement our records, improve the quality or personalization of our services to you, and prevent or detect fraud.

Use of Personal Data

We will only collect, use, and share your Personal Data where we are satisfied that we have an appropriate legal right to do so. We may have the legal right to do so because:

  1. You have consented to us using the Personal Data.
  2. Our use of your Personal Data is in our legitimate interest as a commercial organization.
  3. Our use of your Personal Data is necessary to perform a contract or take steps to enter into a contract with you.
  4. And/or our use of your Personal Data is necessary to comply with a relevant legal or regulatory obligation that we have.

Fulfilling Your Transaction Request

We will use your Personal Data to fulfill requests you make for IFocus’s products or services, marketing materials, or anything else requiring action from IFocus. To fulfill your request, we may share information with others, including IFocus group companies and business partners involved in fulfillment. In connection with a transaction, we may also contact you as part of our customer satisfaction surveys or for market research purposes; any such contact will comply with applicable laws and regulations.

Personalizing Your Experience on Our Websites

We may use information we collect about you to provide you with a personalized experience on our websites by providing you with content that may interest you or make navigating our websites easier. We use the data we collect during your time on our websites to improve your future experience. The data collected during the course of browsing our websites will be analyzed and used to generate statistics that help us improve our website, products, and services to you.

Providing Support

We may use your Personal Data to support IFocus products or services that you have purchased. This includes technical support, which can involve incidental access to data you have provided to us or is located on your system. This Customer Data may contain information about you, your organization’s employees, customers, partners, or suppliers. This Privacy Statement does not apply to our access to or handling of your Customer Data on systems not owned or controlled by IFocus. The handling and processing of your Customer Data are covered by the terms of use between you and IFocus and its group companies.

Marketing

The information you provide to IFocus, as well as the information we lawfully collect about you, may be used by IFocus for marketing purposes. You may opt in/opt out to allow IFocus to use your information. At any time, you may choose not to receive marketing materials from us. Each marketing email we send you will include instructions on how to unsubscribe. Alternatively, you may unsubscribe from marketing communications by visiting the IFocus Preference Center, or by contacting IFocus directly at privacy@ifocussystec.com.

Some of our offerings may be co-branded, as they are sponsored by both IFocus and third parties, such as IFocus Alliance Partners. If you sign up for these offerings, be aware that your information may be collected by or shared with those third parties. You should familiarize yourself with their privacy policies to gain an understanding of the way they will handle information about you.

Recruitment

In connection with a job application—whether advertised on an IFocus website or otherwise—you may provide us with information about yourself, such as a resume or curriculum vitae (CV). We may use this information throughout IFocus and our group companies to assess your job application.

Monitoring or Recording of Calls, Chats, and Other Interactions

Certain online transactions may involve you calling us or us calling you. They may also involve online chats. IFocus may monitor, and in some cases record, such interactions for staff training or quality assurance purposes or to retain evidence of a particular transaction or interaction.

Mobile Applications and Use of Information in Social Media

IFocus makes available mobile applications for download from various marketplaces. IFocus also employs social media tools on some of its websites, including forums, wikis, blogs, and other social media platforms. These tools promote collaboration among those who have registered to use them. When downloading and using these applications or registering to use these social media tools, you may be asked to provide certain Personal Data. These applications and tools may also include supplemental privacy statements with specific information about collection and handling practices. We encourage you to read those supplemental statements to understand how the tools and applications may process your data.

Any other content you post, such as pictures, information, opinions, or any other type of Personal Data that you make available to other participants on these social platforms or applications, is not subject to this Privacy Statement. Rather, such content is subject to the terms of use of those applications or platforms, and any additional guidelines and privacy information provided in relation to their use, as well as the process by which you can remove your content from such tools. You should be aware that the content you post on any such social computing platforms may be made broadly available to others inside and outside IFocus.

Automated Decision-Making

We will not take any action that will have a significant impact on you based solely on automated decision-making unless we have a lawful basis for doing so and we have notified you.

Protecting IFocus Systec India Pvt Ltd’s Rights and Property

We may also use or share your information to protect the rights or property of IFocus, our business partners, suppliers, customers, or others when we have reasonable grounds to believe that such rights or property have been or could be affected. In addition, we reserve the right to disclose your Personal Data as required by law and when we believe that disclosure is necessary to protect our rights, or the rights of others, or to comply with a judicial proceeding, court order, law enforcement, or legal process.

Global Protection

IFocus will not sell, rent, or lease your Personal Data to others. As a global organization with business processes, management structures, and technical systems that cross borders, IFocus may share information about you within IFocus and transfer it to countries in the world where we do business subject to the uses identified above and in accordance with this Privacy Statement. This Privacy Statement and our internal policies and practices are designed to provide a globally consistent level of protection for Personal Data.

Service Providers and Alliance Partners

IFocus retains service providers, suppliers, and other alliance partners located in various countries to manage or support our business operations; provide professional services; deliver customer services and solutions; and otherwise, process information on our behalf. It is IFocus's practice to require such service providers, suppliers, and alliance partners to handle Personal Data and other confidential information in a manner consistent with this Privacy Statement.

Corporate Reorganization

Circumstances may arise where, for strategic or other business reasons, IFocus may decide to sell, buy, merge, or otherwise reorganize businesses in some countries. Such a transaction may involve the disclosure of Personal Data to prospective or actual purchasers, or the receipt of such information from sellers. It is IFocus’s practice to seek appropriate protection for information in these types of transactions.

Mandatory Disclosures

IFocus will only disclose Personal Data to the extent required and permitted by law, for example, if we are under a duty to disclose your Personal Data to comply with a legal obligation, establish, exercise or defend our legal rights.

CHOICES AND PRIVACY PRINCIPLES

Generally, registration is not required to gain access to IFocus websites. However, if you choose to receive certain services, specific material, or information, certain IFocus websites require your subscription. In this regard, IFocus may collect Personal Data from you including your name, phone number, email address, or other information you choose to provide at various times; for example, when you complete an online form or request or participate in an online community.

You can make or change your choices about subscriptions or general communications at the data collection point. You can do so within your account preference settings or by using other methods, which are listed in this Privacy Statement. You may opt out at any time using the links at the bottom of any email or via the IFocus Preference Center.

Please note that it is not possible to opt out of communications primarily aimed at administering business relationships; this includes contracts, support, or other administrative and transactional notices where the primary purpose of the communications is not promotional in nature.

CROSS-BORDER DATA TRANSFERS

When Personal Data is transferred outside a country’s borders, we are committed to ensuring special safeguards are in place to protect the data.

Compliance with India and International Standards

IFocus’s privacy policies and standards take account of the major privacy and data protection principles and frameworks around the world, and amendments to them. Examples include: Digital Personal Data Protection Act, 2023, Organization for Economic Cooperation and Development (OECD) Guidelines on the Protection of Privacy and Transborder Flows of Personal Data; European Union (EU) General Data Protection Regulation (GDPR); United Kingdom (UK) Data Protection Act; Asia Pacific Economic Cooperation (APEC) Privacy Framework; Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA); Brazil’s General Data Protection Law (LGPD); and the Australian Privacy Act.

EU/UK Personal Data Transfers

IFocus uses lawful data transfer mechanisms for Personal Data originating in an EU member state or the UK. These include the EU Standard Contractual Clauses (SCCs) and/or the UK International Data Transfer Agreement (IDTA).

IFocus has an Intragroup Data Processing and Transfer Agreement (IGDTA) on the transfer and processing of Personal Data within the IFocus group worldwide; this incorporates the EU SCCs and UK IDTA. The IGDTA promotes adequate protection of Personal Data, including that originating in the EU or UK, which is transferred cross-border and processed by other IFocus group companies located outside the EU and UK.

Before IFocus implemented the IGDTA, IFocus implemented properly executed data transfer agreements, including the EU SCCs and UK IDTA, to legitimize our customer Personal Data transfers globally; these include those that are necessary to conduct customer and company business between the USA and EU/UK nations. These agreements continue in full force and effect today.

INFORMATION SECURITY, ACCURACY AND RETENTION

Information security is a high priority for IFocus. To protect Personal Data and other confidential information, and to maintain its accuracy and integrity, we have implemented appropriate administrative, technical, and physical safeguards. These are designed to prevent unauthorized access, use, or disclosure of Personal Data. We hold third parties with whom we share Personal Data to the same high information security standards.

We apply the same rigor to maintaining the accuracy of Personal Data. We will retain Personal Data only for as long as legally required or permitted and in accordance with IFocus Records and Data Management Policy.

For more information, please refer to IFocus’s overview of Technical and Organizational Measures (TOMs). As indicated by the TOMs, IFocus maintains a Privacy Information Management System (PIMS) that achieved an ISO/IES 27701 certification for strategic global and regional delivery center.

ACCESS TO YOUR PERSONAL DATA

As required by applicable laws, IFocus provides you with reasonable access to Personal Data that you provided to us; we also give you a reasonable ability to review and correct your data or ask for anonymization or deletion. To protect your privacy and security, we will take reasonable steps to verify your identity before granting access to your data. We may, for example, require a password and user ID to log into an application and/or other unique personal identifiers. To submit your access request, please email IFocus Global Data Protection (GDP) Program at privacy@ifocussystec.com and provide your legal name, relationship with IFocus, and country/state of residency.

DISPUTE RESOLUTION

IFocus is committed to resolving any privacy complaints pertaining to IFocus's collection and use of your Personal Data. Please send any privacy-related complaints or requests to privacy@ifocussystec.com. You may also reach out to your relevant national privacy authority and ask for their assistance. IFocus is also committed to coordinating and collaborating with regulatory authorities, such as EU and UK data protection authorities.

CHILDREN’S PRIVACY

We do not knowingly collect Personal Data online from children. Adults who interact with IFocus should take care not to provide any information about children.

COOKIES AND OTHER TECHNOLOGIES Rationale and Controls

By collecting Cookies or making use of an internet browser's storage capabilities, IFocus is better able to identify visitors to our websites and their website access preferences. IFocus may use information derived from Cookies or local storage to direct you, as a site visitor, to information similar to that which you have visited previously; in this way, we are better able to personalize your visit to our sites and can lead you to information that is likely to be of particular interest to you, based on your prior browsing history. We offer visitors to our websites the opportunity to control Cookie collection and placement. If you do not wish to have any Cookies placed on your computer, you should set your browser to refuse Cookies before visiting our websites. Please note, however, that without the aid of Cookies, certain website features may not function properly. If you wish to limit third-party advertising Cookies, you may enable your browser’s “Do Not Track” functionality.

Please note that our websites are constantly being updated and the Cookies we use will change over time. If you have any additional questions about the use of a particular Cookie, please do not hesitate to email privacy@ifocussystec.com.

Embedded Third-Party Content

Pages on IFocus’s websites will occasionally embed content from third-party sites, such as YouTube for videos. Our websites allow content to be shared through social networks, but only at your request. Embedding and sharing content may result in Cookies being placed by those third-party sites. IFocus does not control the dissemination of those Cookies. Please visit these third-party sites if you wish to learn more about their use of Cookies and similar tools.

ONLINE ADVERTISING

IFocus makes use of third-party advertising systems to promote content on our external website. These services will often make use of Cookies and pixel tags to provide targeted IFocus advertisements based on your activities and interests.

PROSPECTIVE APPLICANTS PRIVACY NOTICE

IFocus’s Prospective Applicants Privacy Notice explains how we process Personal Data that you may need to share when you apply for job openings at IFocus group companies using our Careers website. The Prospective Applicants Privacy Notice supplements and should be read in conjunction with this Privacy Statement.

EXTERNAL LINKS

IFocus sites or services may provide links to third-party applications, products, services, or websites for your convenience and information. IFocus does not control these third-party sites or their privacy practices, which may differ from IFocus's practices. We do not endorse or make representations about third-party sites and privacy practices. Any Personal Data you choose to provide to these third parties and that is collected by them is not covered by Privacy Statement. We encourage you to review the privacy policy of any site you visit before allowing the collection and use of your Personal Data.

We may provide social media features that enable you to share information with your social networks and to interact with IFocus and its group companies on social media sites. Your use of these features may result in the collection or sharing of information about you. We encourage you to review the privacy policies and settings on the social media sites with which you interact to make sure you understand the information that may be collected, used, and shared by those sites.

INQUIRIES AND CONTACT

IFocus may review and update this Privacy Statement periodically without any prior notice.

We value your opinion; if you have any comments or questions about this Privacy Statement, IFocus's handling of your Personal Data, or a possible breach of your privacy, email IFocus Global Data Protection at privacy@ifocussystec.com.

We will treat your requests or complaints confidentially. Our representative will contact you within a reasonable time after receipt of your email. We will aim to ensure that your request is resolved in a timely and appropriate manner.

You may obtain further information and guidance by contacting your local privacy authority.