Privacy Policy.

BroadArks Technology Private Limited (“BroadArks”, “we”, “us”) operates broadarks.com. This policy explains how we handle personal information when you visit this website, contact us, enquire about services, apply for an opportunity, or participate in a training, assessment or placement service we provide.

We decide the purposes and means of processing for our own enquiries and services. If we process information solely on a client’s documented instructions, that client determines the relevant purposes and its privacy notice also applies. We assist the client with requests and remain responsible for our own legal obligations. Separate employee, programme or platform notices provide additional detail where relevant.

BroadArks Foundation is a separate organisation. A shared brand, team member or technology system does not by itself permit the exchange of your information. Y&Now has a separate service-specific privacy policy.

• Enquiries and business contacts: name, email, telephone number, organisation, role, message, correspondence and any documents you choose to provide, to answer questions and manage a prospective or existing business relationship.
• Training and placement services, when requested: contact and enrolment details, relevant age or eligibility information, qualifications, CV, work experience, attendance, assessments, certification and placement preferences, to deliver the particular service.
• Recruitment and contracting: application details, qualifications, experience, references and information necessary to assess or engage an employee, trainer, consultant or supplier. Any background checks require an appropriate notice and lawful basis.
• Transactions, where relevant: billing contact, invoicing details, tax identifiers where required, payment status and transaction reference. Use the designated secure payment channel; do not submit card details or banking credentials in a contact form.
• Technical information: IP address, browser and device details, pages requested, timestamps, referral information and error or security logs, to operate, diagnose and protect the website.

Please do not put medical records, biometrics, Aadhaar numbers or unrelated sensitive information in a general enquiry. If a service genuinely needs restricted information, we explain the specific fields, purpose, recipients and safeguards before collecting it.

Information comes directly from you, from your website use and, for a disclosed service, from an authorised employer, institution, referrer or service partner. We require a lawful basis for partner disclosures and explain the relevant source and purpose where applicable.

We use information to respond to enquiries, prepare proposals, administer contracts and invoices, arrange requested services, provide learning and assessment support, communicate service updates, address complaints, prevent misuse and fulfil applicable legal duties. We use recruitment information to assess the relevant opportunity; keeping a CV for future opportunities requires a separate choice or other lawful basis.

If you request placement support, we explain which employers or categories of employers will receive your CV, qualifications and relevant assessment information. We do not publish your profile or circulate it for unrelated purposes. Optional newsletters and promotional messages require a separate choice where consent is required and include a way to opt out.

We explain the relevant purpose when we ask for personal information. Where consent is required, we obtain it through an appropriate affirmative action and keep a record. For sensitive personal information, we obtain written or electronic consent in the form required by applicable law. Simply browsing this website or reading this policy does not constitute consent to marketing, sensitive data collection or unrelated processing.

You can decline optional information, refuse promotional communications or withdraw consent by contacting us. Withdrawal does not affect earlier lawful processing. If information is essential for a particular service, we explain why and the effect of not providing it; an unrelated service or benefit will not be withheld because you decline optional publicity or marketing.

We process information without consent only where an applicable law permits or requires the particular use. We do not treat a contract, a commercial interest or a donor requirement as a general exemption from consent obligations.

Access is limited to authorised staff and service providers who need information for the stated task. Providers may include website hosting, IT support, cloud storage, customer relationship management, communications, learning or assessment delivery, and payment processing. We require appropriate confidentiality, security, purpose limits and deletion arrangements.

Training institutions, assessors, awarding bodies or prospective employers receive only information relevant to a service you requested and on a lawful basis. Professional advisers, auditors, courts and public authorities receive information where necessary and legally permitted or required. We scrutinise official requests and limit disclosure to the relevant information.

We do not sell personal information or provide contact lists to third parties for their own marketing. Transfers to a related organisation require a defined purpose and lawful basis, just as other disclosures do. If our business is reorganised or transferred, relevant records may be disclosed under confidentiality and appropriate safeguards, with notice and consent where required.

Cookies and similar technologies can support security, sessions and user preferences. Optional analytics can measure website use; embedded maps, videos, social media features or advertising tools can send device and usage information to their providers. The categories actually used, providers, purposes and expiry periods are described in the cookie information presented on the website.

Non-essential analytics and advertising technologies are enabled only after the relevant opt-in where required. You may reject optional categories or change an earlier choice through the website cookie controls, where offered. Browser settings also allow you to block or delete cookies, although necessary functions may then be affected. A browser setting alone may not withdraw consent already recorded by a third party.

Links to external websites and services are governed by those operators’ privacy notices. We provide relevant information before an optional embedded feature is activated or before personal information is sent to an independent service. This policy does not authorise third party tracking.

Information is handled in India and may be processed in other countries where an engaged provider operates. Before an overseas transfer we assess applicable restrictions and required safeguards. Where the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 (SPDI Rules) apply, the recipient must provide the same level of protection required by those Rules, and the transfer must be necessary for the lawful contract with you or based on your consent. We also follow any applicable government restrictions and other legally required transfer mechanisms.

We retain identifiable information only for the stated purpose and the period required by applicable law. Enquiries are retained for handling and reasonable follow-up; applications for the relevant selection process; and service records for delivery, support and applicable certification or audit requirements. Invoices and accounting records are retained for the statutory period applicable to the record. CVs are not kept indefinitely for unspecified future vacancies.

Consent records, complaints, security logs and evidence of transactions may need to be retained separately for applicable legal periods. A pending dispute, investigation or lawful preservation requirement may suspend normal deletion. Donor or client agreements do not authorise unlawful or indefinite retention.

When retention is no longer justified, we delete, securely destroy or irreversibly anonymise the information and require processors to do the same. Restricted backups are removed through their scheduled overwrite cycle and are not restored for routine use. Contact us for the retention period applicable to your particular record.

We use reasonable technical, organisational and physical safeguards proportionate to the information and the risks. These include access restricted to authorised roles, confidentiality obligations, appropriate protection during transmission and storage, secure handling of paper records, and oversight of service providers. We do not claim that any system is completely secure.

If a personal data incident occurs, we assess it, take containment and corrective measures, and notify affected individuals and authorities when required by applicable law and within the applicable time limits. Please report suspected misuse to the contact in this policy. Do not send passwords, OTPs or full payment credentials by email.

General business enquiries are intended for adults. If a school or youth programme involves a person under 18, we provide an age-appropriate programme notice and obtain verifiable parental or lawful guardian consent where required. A school referral alone is not a substitute for required parental consent. Where law requires consent from a lawful guardian for a person with disability, we verify the authority of that guardian.

We do not target advertising to children. We do not undertake tracking or behavioural monitoring of children unless a specific applicable legal exemption permits the activity and its conditions are met. Optional photographs, testimonials and recordings require separate permission; declining them does not affect access to the underlying service.

You may contact us to review information you supplied, request correction or updating, withdraw consent, stop optional communications, and request deletion where continued retention is not required. We will explain any lawful reason for retaining a record or refusing part of a request. We may retain minimal suppression information to respect an opt-out.

When the relevant provisions of the Digital Personal Data Protection Act, 2023 apply and are in force, you may also exercise the applicable statutory rights to a summary of personal data and processing, information about sharing, correction, completion, updating, erasure, grievance redressal and nomination of another individual to exercise rights in the event of death or incapacity. These rights are subject to the conditions and exceptions in law.

Email info@broadarks.com with the subject “Privacy request - broadarks.com”. Include your name, the service or programme concerned, a relevant reference if available, and the action requested. We verify identity proportionately and may verify authority for a parent, guardian or representative. Please do not send an Aadhaar copy or other identity document unless we first explain why it is necessary and provide a secure route.

We aim to acknowledge requests within seven working days and resolve privacy grievances within one month of receipt, or sooner where law requires. We will explain the outcome and any permitted extension. If you remain dissatisfied, ask for escalation to the Grievance Officer. This process does not limit remedies before a competent authority or court. Where the DPDP complaint provisions are in force and applicable, you may approach the Data Protection Board of India after using our grievance process as required by law.

Organisation

BroadArks Technology Private Limited

Attention

Anitha Menon, Chief Grievance Officer & Chief Compliance Officer

Email

cco@broadarks.com

Telephone

+91 755 3553372

Postal address

Sagar Premium Tower, Phase I, Block C, CP-02, JK Hospital Road, Kolar, Bhopal 462042, Madhya Pradesh, India.

We update this policy when our services, practices or applicable requirements change. The current version and effective date will appear on this page. For a material change, we provide appropriate notice and obtain fresh consent where required before using information for a new purpose. Continued website use does not replace consent where consent is legally required.