Privacy policy

Information you provide directly

• Contact and enquiry data. When you fill in a form, ask for a call or email us, we collect your name, business email, company name, role, phone number (if provided) and the contents of your message.
• Careers data. When you apply for a role through our careers pages, we collect your name, contact details, resume or CV, work history, portfolio or profile links, and anything you choose to include in your application.
• Blog subscriptions. When you subscribe to our blog, we collect your email address.
• Event data. When you register for, speak at, sponsor or exhibit at one of our conferences, we collect the details needed to run the event: your name, company, role and contact details, and, where a fee applies, payment details handled by our payment provider.
• Engagement data. When you become a client, we collect business contact details for your authorised representatives, billing information, and any data you share with us under our services agreement, statement of work or data processing addendum.
• Correspondence. We keep emails, call notes and meeting records related to active or prospective engagements.

Information collected automatically

• Device and log data. IP address, browser type and version, operating system, referring URL, pages viewed, timestamps and approximate location derived from the IP address.
• Cookies and similar technologies. Session cookies, persistent cookies, pixels and local storage used for site functionality, analytics and remembering preferences. See section 6.
• Analytics data. Aggregated usage data collected through analytics tools such as Google Analytics and HubSpot.

Information from third parties

• Business contact databases. When we conduct business outreach, we may obtain professional contact details from reputable enrichment providers and public sources such as LinkedIn.
• Integrations. If you connect a third party tool (for example a calendar app to schedule a call), we receive limited data from that service to enable the integration.
• Public review platforms. If you leave a review on Clutch or a similar platform, we may reference your public review on our site.

We use the information we collect to:

• Respond to enquiries, schedule calls and prepare proposals.
• Deliver, support and improve our services under signed agreements.
• Process job applications and communicate with candidates.
• Run our conferences: registration, communication with delegates, speakers, sponsors and exhibitors, and the follow-up after an event.
• Send service announcements, blog updates and event invitations (you can unsubscribe at any time).
• Operate, secure and improve our website and internal systems.
• Detect, investigate and prevent fraud, abuse, security incidents and violations of our terms.
• Comply with our legal, regulatory, accounting and contractual obligations.
• Establish, exercise or defend legal claims.

Where required by law (for example under the EU or UK GDPR), our legal bases for processing are: performance of a contract with you or your employer; legitimate interests in operating and growing a business-to-business services company; compliance with legal obligations; and consent where consent is the appropriate basis (for example certain marketing communications or non-essential cookies).

We do not sell personal information, and we do not share personal information for cross-context behavioural advertising or targeted advertising. We share information only in the following circumstances:

• Service providers. Vetted vendors that help us operate our business, including hosting, email delivery, CRM, analytics, event registration and ticketing, payment processing and security tooling, under written contracts that restrict their use of personal data to providing services to us.
• Professional advisers. Auditors, accountants, lawyers and insurers, bound by confidentiality.
• Legal compliance. Government authorities, regulators or other parties when required by law, valid legal process, or to protect rights, safety or property.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to standard confidentiality protections.
• With your direction. When you ask us to share information with a third party (for example a reference check during an engagement).

When we deliver AI consulting and transformation, engineering, staff augmentation or digital marketing services, we may process personal data on behalf of a client as a service provider, processor or sub-processor, depending on the engagement. Such processing is governed by the services agreement and any applicable data processing addendum. We use a limited set of cloud and tooling sub-processors (for example AWS, Atlassian and Google) and will provide a current sub-processor list on request to authorised client contacts.

We use the following categories of cookies and similar technologies:

• Strictly necessary. Required for the site to function, for example security, remembering your cookie choice, and Google reCAPTCHA, which protects our forms from automated abuse. These cannot be disabled.
• Analytics. Help us understand how visitors use the site so we can improve content and performance. Examples include Google Analytics and HubSpot.
• Marketing. Used for advertising measurement and remarketing, and for tools whose providers may also use the data for their own advertising purposes. These load only if you choose Accept on our cookie card. Examples include Google Ads conversion measurement, the LinkedIn Insight Tag and the Meta Pixel.
• Preferences. Remember settings such as your accepted cookie choice.

You can manage non-essential cookies through our cookie card: Accept turns the marketing tools on, Only necessary keeps them off. You can also control cookies through your browser settings, and clearing this site's cookies brings the card back. Disabling certain cookies may limit site functionality.

India

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to access a summary of your personal data and how it is processed, to have it corrected or erased, to grievance redressal, and to nominate a person to exercise these rights on your behalf. Write to us at the address in section 12.

European Economic Area, United Kingdom and Switzerland

If you are located in the EEA, UK or Switzerland, you have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

California

If you are a California resident, you have the right to: know what personal information we collect, use, disclose and (if applicable) sell or share; access and obtain a copy of your personal information; correct inaccurate information; delete personal information, subject to legal exceptions; limit the use of sensitive personal information; and not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioural advertising.

Other US state laws

Residents of states with comparable privacy laws (such as Virginia, Colorado, Connecticut and Utah) have similar rights, including access, correction, deletion, portability and the right to opt out of certain processing.

How to exercise your rights

To submit a request, email [email protected] from the address associated with your records, or write to us at the postal address in section 12. We will verify your request (typically by confirming details we already hold) and respond within the period required by applicable law. You may authorise an agent to act on your behalf; we may ask for proof of authorisation.

We keep personal information only as long as needed for the purpose for which it was collected, including to satisfy legal, accounting, tax and contractual requirements. Retention criteria include: the duration of our relationship with you or your employer, the nature and sensitivity of the data, applicable legal hold or limitation periods, and the existence of any unresolved claims. When personal data is no longer required, we delete or anonymise it.

RNF Technologies is based in India and works with clients, partners, delegates and service providers in other countries. When personal data crosses borders, for example to a client abroad or to a service provider, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum where they apply, recognised adequacy decisions where available, and contractual protections with our providers. Copies of the relevant transfer mechanisms are available on request.

We implement reasonable physical, technical and administrative safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction. These include role-based access controls, encryption in transit, hardened cloud configurations on AWS, secret management, vulnerability scanning and security awareness training for our engineers. No method of transmission or storage is perfectly secure. You are responsible for keeping any credentials we issue confidential, and you should notify us promptly if you suspect a security incident affecting your data.

Our website, our conferences and our services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from children under 16 (or under 13 where that is the applicable threshold). If you believe a child has provided us with personal information, please contact us so we can delete it.

Questions, requests or complaints about this privacy policy or our data practices can be sent to:

• RNF Technologies Pvt. Ltd., Attn: Privacy
• Logix Cyber Park, C28-29, Tower A, 7th Floor, Sector 62
• Noida, Uttar Pradesh 201301, India
• Email: [email protected]

If you have an unresolved privacy concern that we have not addressed satisfactorily, you may contact your local data protection authority.

We may update this privacy policy from time to time. When we make material changes, we will revise the date at the top and, where appropriate, provide additional notice (for example by email to active clients or a notice on the site). Continued use of our website or services after an update constitutes acceptance of the revised policy.

For more about RNF Technologies, see our home page, our About page, our Contact page and our Disclaimer.