PRIVACY POLICY

1. Who we are

BROCUS IT SOLUTIONS PRIVATE LIMITED is a Business Process Outsourcing (BPO) company headquartered in Navi Mumbai, Maharashtra, India. We provide customer support, inbound/outbound sales, and operational outsourcing services to businesses primarily in the United States.

2. What information we collect

We collect only what is necessary:

3. How we use your information

We will never sell your personal data to third parties. We do not use your data for automated profiling or decision-making without human oversight.

4. Legal basis for processing

Under GDPR, we process your data based on: (a) your consent, (b) performance of a contract, (c) our legitimate business interests, or (d) legal obligation - whichever applies to the specific interaction.

Under India's DPDP Act 2023, when you voluntarily give us your details for a specific purpose (for example an enquiry or a job application), we use them only for that purpose, as the Act permits. We rely on your consent for marketing updates and analytics cookies, and you can withdraw it at any time. Under CCPA/CPRA, California residents have specific rights as described in Section 12.

5. How we share your information

We share your data only in limited circumstances:

Any third party we work with is contractually required to protect your data to the same standards we uphold.

6. Marketing Communications & Do-Not-Call

If you send us an enquiry, we will contact you about it. We send updates about our services only if you opted in. You can opt out of marketing communications at any time by:

We maintain a written Do-Not-Call (DNC) Policy in accordance with applicable Indian telecom regulations and US calling guidelines. A copy is available upon request. We comply with India's TRAI regulations and the US CAN-SPAM Act for all commercial communications.

7. Data security

Brocus is certified under ISO 27001 (Information Security Management). We implement industry-standard safeguards including encryption of data in transit (HTTPS), role-based access controls, password-protected access to stored records, and regular employee security training. To prevent unauthorised access and maintain data accuracy, we employ technical, administrative, and physical safeguards across all our systems and processes. Your contact and business data is managed through Salesforce, an enterprise-grade CRM platform with built-in encryption and security controls. While no system is completely immune to breaches, we take every reasonable step to protect your information.

8. Your rights

Depending on where you are located, you have the following rights:

To exercise any right, email privacy@brocussolutions.com. We may ask you to confirm your identity. We will respond within 30 days (or as legally required).

9. Cookies

We use a small number of cookies. Necessary cookies keep the website and forms working and secure, including Google reCAPTCHA on pages with a form. Analytics cookies (Google Analytics: _ga, _ga_*) help us understand how visitors use the site, and load only if you click Accept on our cookie banner. We do not use advertising cookies. You can change your choice at any time using "Cookie Settings" in the footer.

10. International data transfers

Since we are based in India and serve US clients, personal data may be transferred between these countries. Our website, including the enquiries, job applications and resumes you submit through it, is hosted by Hostinger on servers in the United States, with backups also stored in the United States. We ensure such transfers comply with applicable laws and include appropriate safeguards (such as standard contractual clauses under GDPR, and compliance with India's DPDP Act cross-border transfer rules).

11. Data retention

We retain your personal data only for as long as necessary to fulfill the purpose it was collected for, or as required by applicable Indian and US laws. Inquiry data is typically retained for up to 3 years; client contractual data is retained as required by law. Job applications, including resumes, are kept for up to 12 months from the date you apply and are then deleted. If you tick "keep my resume on file", we may also consider you for other openings during that time. If you join us, your application becomes part of your employee record. Records of access to our website and systems (logs) are kept for at least 1 year for security purposes. When data is no longer needed, we delete it.

12. California Residents - Additional Rights (CCPA/CPRA)

California residents may request disclosure of the personal information we have collected, used, disclosed, or sold about them in the previous 12 months, including the categories of data, sources, purposes, and any third parties it was shared with.

California residents have the right to: request disclosure of data collected, request deletion, opt out of any sale of personal information (we do not sell data), and be free from discrimination for exercising these rights. To submit a California privacy request, email privacy@brocussolutions.com.

13. Updates to this policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. If we make a material change, we will post a notice on this page and, where the change needs it, ask for your consent again.

14. Grievance Officer

If you have any question or complaint about how we handle your personal data, contact our Grievance Officer:

Arjinder Kaur, HR Head
BROCUS IT SOLUTIONS PRIVATE LIMITED, 601 to 606, Fairmount, Sector 17, Sanpada, Navi Mumbai 400705, Maharashtra, India
Email: privacy@brocussolutions.com
Phone: +91 99677 18747

15. Children

Our website and services are meant for businesses and adults. Job applicants must be 18 or older. We do not knowingly collect personal data of anyone under 18. If you believe we have, contact us and we will delete it.

16. Data we handle for our clients

As an outsourcing company, we handle personal data of our clients' customers (for example call details, call recordings and CRM records) only on our clients' written instructions and under a signed contract. For that data, our client decides how it is used, and the client's own privacy policy applies. If you are a customer of one of our clients, please contact that business to exercise your rights, and we will help them respond. We protect all client data with the security measures described in Section 7.

17. Job applicants

When you apply for a job, we use your details and resume only to assess your application and contact you about it. If you accept an offer, we collect joining documents (such as a masked Aadhaar copy, PAN, bank details and previous employment records) only to complete your employment. To withdraw your application or ask us to delete your data, email privacy@brocussolutions.com.

18. Data breaches

If a security incident affects your personal data, we will inform you without delay, explaining what happened, the likely impact and the steps we are taking, and we will report it to the Data Protection Board of India as required by law.