Krima Solutions – Privacy Policy

Version: 3.2 | Updated as on 24 August 2025

Introduction

Krima Solutions, its associates and branch operations (hereinafter referred to as “Krima Solutions”, “we”, “us” or “our”) is committed to respect your privacy and choices. This privacy statement (hereinafter “Privacy Statement” or “Statement”) highlights our privacy practices regarding Personal Information that we collect and process in compliance with applicable data privacy regulations.

Objective

Through this Privacy Statement, we intend to provide a synopsis of our privacy practices regarding Personal Information that we may collect and process about you through various sources. Although the primary focus of this Statement is on the data collected and processed through our websites that link to this Privacy Statement, which include www.krimasolutions.com, our adherence to the principles mentioned below remains consistent across the organisation towards personal data processing. Depending on the purposes of processing and your relationship with us as a data subject, we may provide additional customised privacy statements, more information on which can be found below.

Scope of the Privacy Statement

The scope of this Statement covers the categories of Personal Information collected, how we use or process such data, who the recipients of such data are, and your associated rights under applicable laws, including how to exercise the same. The applicability of the Privacy Statement is global; however, certain additional information may be relevant to you depending on the country where you reside. Such additional terms, based on specific countries or regions, are specified in region-specific statements below.

Region-Specific Terms

Wherever we have provided translations of our Statement in local languages, as per applicability, in case of a conflict between the local language and the English version, the English version shall prevail.

Translations and Conflicts

If there is any inconsistency or conflict between translations of this Statement and the English version, the English version shall take precedence.

1. Personal Information that We Process and Use

1.1 Categories of Personal Information Collected

We may collect the following categories of Personal Information:

Information collected as part of your visit and usage of our websites, such as Internet Protocol (IP) address, demographics, your computer’s operating system, device information, telemetry data, browser type and information collected via cookies or similar tracking technologies. As a website visitor who merely browses our websites (including the hosted content) without submitting any additional data, this is the most relevant category for applicable data processing.
Personal and contact details, such as name, title, e-mail address, phone numbers, address, designation, company/organisation, industry, location (city / country), LinkedIn profiles/URLs (or similar professional data sets).
Login credentials, such as usernames and passwords, when you register for any of our applicable services.
Audio-visual information such as photographs or images captured, video recordings (if enabled), when attending any of our events, webinars, etc.
Queries, comments, or feedback as submitted by you, including any correspondence you have made with us.
Preferences relating to marketing communications, interest areas, subscription details, and dietary preferences/allergies (in relation to events we may organise).

Additionally, we may collect certain data points based on the categories of data subjects and their relationship with us, as detailed out in additional Privacy Statements for relevant categories of data subjects at the end of this Statement.

1.2 Sources of Personal Information

We may collect the aforementioned Personal Information through various sources, such as:

Information submitted by yourself, through our website forms, applications on our portals, or by contacting/emailing our official contacts.
Information shared with Krima Solutions employees, such as our sales or marketing representatives.
Information shared with or by Krima Solutions’ affiliates.
Information shared by the employers of visitors and contractors, where applicable.
Information sourced from public websites and social media, including your publicly accessible profiles.
Information shared by our suppliers, vendors, and service providers.
Information sourced via cookies and similar tracking technologies as deployed on our website.

1.3 Use of Your Personal Information

We may use your Personal Information for the following purposes:

To provide better usability, troubleshooting and site maintenance.
To understand which parts of the website are visited and how frequently.
To create your login credentials, where applicable.
To identify you once you register on our website.
To facilitate communication with you, including contacting you and responding to your queries or requests.
To offer curated content tailored to your preferences.
To enable marketing and sales-related communications and related purposes.
To provide access to podcasts available on our website(s).
To know your interest in participation in ideathons or other competitions.
As a participant of any competitions and/or award ceremonies organised by us, to publish your name and corresponding details to make them available to a larger audience on the Internet; for the jury members and other associated delegates and speakers, to publish their name, title, photograph and bio in a similar manner.
To invite you for events, seminars and equivalent ceremonies organised by us and related purposes such as running marketing or promotional campaigns, including such promotions or publications on social media.
To publish testimonials and case studies.
To generate and maintain leads as part of our Customer Relationship Management database.
To perform data analytics for providing a better user experience, enhancing website performance and achieving business objectives.
To enhance and optimise our business operations, applications, systems and processes, including operation and management of our communication assets and systems, ensuring and strengthening information security, maintenance of audit trails and associated records.
To protect your data and Krima Solutions assets from information security threats and to secure against any unauthorised access, disclosure, alteration or destruction.
To comply with applicable laws and other legal requirements, such as regulatory filings, record-keeping and reporting obligations, cooperating with government-authorised inspections or requests, protecting our legal rights, and seeking remedies, including defending against any claims or engaging in legal proceedings, responding to subpoenas or court orders and managing documentation for related purposes.
To enhance your website experience and for other associated purposes by deploying cookies or similar technologies. These may serve different purposes, such as being necessary for the operation of the website, enhancing functionality, helping us understand usage of our online services and determining the interests of our website visitors. Additionally, our advertising partners may collaborate with us to provide and assist in the use of such technologies on Krima Solutions websites and other sites.
For some of the personal data processing we undertake, we might use AI, machine learning and related technologies to enhance customer experience and data analytic capabilities. Whenever we do so, we use responsible AI practices.

1.4 Legal Basis of the Processing

The applicable privacy and data protection laws provide certain justifiable grounds for collection and processing of personal data (commonly referred to as legal bases). We primarily rely on the following legal bases:

1.4.1 Performance of a contract: We process your Personal Information when it is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, e.g., when you engage with us for receiving our services and offerings, or when managing the data of our employees for ensuring the performance of their employment contracts.
1.4.2 Legitimate interests: We process your Personal Information when it is necessary for the purposes of a legitimate interest pursued by us or a third party (when these interests are not overridden by your data protection rights), e.g., when we need to understand your usage of our website, generate secure login credentials, or optimise our processes.
1.4.3 Consent: We process your Personal Information with your consent where required. Where we process Personal Data based on consent, your consent is revocable at any time, e.g., when registering and inviting you for events organised by us, or for sharing our marketing-related communications with you.
1.4.4 Legal obligations: We may process your Personal Information to comply with any legal obligations applicable to us, including obligations under laws and regulations, and to protect our legal rights, seek remedies and defend against claims.

2. Consequences of Not Providing Personal Information

If you choose not to provide Personal Information that is mandatory to process your request, we may not be able to fulfil the relevant purpose of processing, including provision of any services to you, where applicable.

3. Data Recipients, Transfer, and Disclosure of Personal Information

3.1 Data Recipients

Krima Solutions does not share your Personal Information with third parties for their direct marketing purposes.

We may share your Personal Information with:

Krima Solutions or any of its subsidiaries;
Business partners;
Service providers;
Authorised third-party agents; or
Auditors and/or government authorities, where applicable.

3.2 Facilitating International Data Transfers

We may transfer Personal Information to countries outside of your country of residence, either to Krima Solutions group companies or third parties, including to countries which may have different data protection standards from those which apply in your country or region of residence. It may be noted that at this point, we do not have an operational facility in any country other than India.

In future, where we may transfer data outside your country or region of residence, we shall take reasonable and appropriate steps in line with applicable laws while executing such transfers. For additional details on international transfers of data outside of your country or region, based on your residence, please refer to our region-specific Privacy Statements.

Please contact us as set out below if you would like to obtain a copy of the methods used when executing such international transfers as per applicable laws. When required, Krima Solutions may disclose Personal Information to external law enforcement bodies or regulatory authorities in order to comply with legal obligations.

4. Your Rights

4.1 Data Subject Rights

Subject to the laws of your country, you may have certain rights as a data subject (including but not limited to the right to information, access, rectification, erasure, objection, restriction of processing and right to complain) relating to your Personal Information that we process. Where the data processing is based on your consent, you may withdraw your consent to the processing of any Personal Data at any time. This will not affect the lawfulness of any processing operation carried out before your withdrawal.

Your rights as a data subject may differ based on your applicable jurisdiction. Please refer to our region-specific data privacy statements for more information.

4.2 Exercising Your Rights

For exercising your rights, we may need to request certain information from you for ascertaining your identity and confirming that you are entitled to exercise the same. You can exercise your rights by contacting us at info@krimasolutions.com.

4.3 Preference Centre

You can choose to update your Krima Solutions marketing communication preferences by writing to info@krimasolutions.com.

5. Data Security

At Krima Solutions, there exists a balance between governance, process and technology, the combination of which underpins Krima Solutions’ commitment to its customers and stakeholders. Krima Solutions adopts reasonable and appropriate security controls, practices and procedures, including administrative, physical and technical controls, in order to safeguard your Personal Information.

6. Data Retention

Personal Information will not be retained for a period longer than necessary to fulfil the purposes outlined in this Privacy Statement unless a longer retention period is required by law or for directly related legitimate business purposes. Personal Data that is no longer required to be retained as per legal and business requirements will be disposed of in a secure manner.

7. Contact Your Local Data Protection Authority

If you are unhappy with how we safeguard your Personal Data, depending on the laws of the country where you reside, you may have the right to bring a complaint to your local data protection authority.

8. Linked Websites

Our privacy practices regarding Personal Information that we may collect and store about you through our portals such as recruitment and global alumni will be as per the privacy policy of those portals. It may be noted that at this point, we have not provided any links to any third-party websites.

Where such links are provided in future, Krima Solutions will not be responsible for the privacy statements, practices, or the contents of such third-party websites.

9. Children’s Privacy

Krima Solutions websites, associated products or services and hosted content are not intended for use by children.

We do not knowingly solicit or collect personally identifiable information online from children without prior verifiable parental consent. If Krima Solutions learns that a child has submitted personally identifiable information online without parental consent, it will take all reasonable measures to delete such information from its databases and to not use such information for any purpose (except where necessary to protect the safety of the child or others as required or allowed by law). If you become aware of any personally identifiable information we have collected from children, please email us at info@krimasolutions.com.

10. How to Contact Us

If you have any questions regarding our privacy practices or this Privacy Statement, or to request this Privacy Statement in another format, please contact us at:

Contact person: Kasturirangan Parameswaran

Contact address: One, Shree Saumya, Plot no 54, Pestom Sagar, Chembur, Mumbai 400089, India

Phone: +91 98 211 43754

Email: info@krimasolutions.com

11. Updates to This Privacy Statement

Krima Solutions may change its data privacy practices and update this Privacy Statement as and when the need arises, and the same will be made available on the website. However, our commitment to protect the privacy of website users will continue to remain.

Privacy Statements for Other Categories of Data Subjects

A detailed privacy notice will be provided when one applies for a job or internship at Krima Solutions through our website or by writing to us.

Categories of Personal Information (Including Sensitive Personal Information) That We Process

Candidate name and contact details;
Resume and CV-related information;
Date of birth;
Educational qualifications including skill details;
Employment-related information;
Details pertaining to background checks;
Passport details (only if shortlisted);
Other optional details such as web address, willingness to travel, etc.;
Financial details and national identification details (only in selected countries, where required by law).

Please note that the categories of personal (or sensitive personal) details processed may differ based on the business requirements of the entity and the legal requirements of the relevant country.

Use of Your Personal Information (Candidates)

We use your Personal Information for the following purposes:

To assess a candidate’s suitability for job requirements as part of the recruitment or internship selection process and other associated processes, including background verification by our authorised vendors.
To carry out various employer-related activities if you are selected to join the organisation and to enable us to ensure that we are compliant with any applicable labour and/or other relevant laws.

Legal Basis of Processing (Candidates)

We process your Personal Information when it is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, or based on your consent, as per applicable laws.

Data Recipients / Accessible To (Candidates)

Your data may be accessible to authorised recipients including:

Internal recipients within Krima Solutions and its affiliates;
Authorised service providers, including cloud service providers who provide services to Krima Solutions;
Business partners;
Government bodies including statutory and regulatory authorities and law-enforcement agencies (where applicable);
Auditors (internal and external);
Krima Solutions’ clients (where applicable) based on contractual obligations.