Snapshot 81215
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy
KNACKFORGE and its direct and indirect subsidiaries, as well as international branch offices (collectively, "KNACKFORGE"), are dedicated to complying with all applicable legal and regulatory data protection and privacy standards where it conducts business. This Privacy Policy ("Policy") establishes the basic standards for KNACKFORGE's collection, processing, and other uses of personal data, including sensitive personal data ("Personal Data"), about individuals such as KNACKFORGE associates, business contacts, customers, or vendors ("Individuals").
Other firm entities under KNACKFORGE's management will be required to follow the principles outlined in this Policy.
Privacy Principles
Personal Data will be handled by KNACKFORGE in compliance with the following principles. Through suitable contractual arrangements, KNACKFORGE will guarantee that its business partners and vendors adhere to the principles of this Policy as well as applicable legal and regulatory compliance standards.
Legality of Processing
KNACKFORGE will collect, store, process, use, transfer, analyze, or otherwise handle (“Process” or “Processing”) Personal Data in accordance with applicable legal requirements for legitimate business or compliance purpose or if individuals have provided consent to the Processing. KNACKFORGE will limit the Processing of Personal Data in terms of scope and duration, as is necessary for the intended purpose.
Transparency
Individuals will get information from KNACKFORGE that describes the scope and purpose of processing, as well as who to contact if they have questions about privacy or data protection, in compliance with any legal requirements.
Confidentiality and Security
KNACKFORGE intends to ensure the security and confidentiality of personal data by putting in place physical, technological, and organizational safeguards against accidental, unlawful, or unauthorized destruction, loss, modification, disclosure, or access. KNACKFORGE will take steps that are proportionate to the risks posed by the Processing it performs and the nature of the Personal Data it collects.
Designing for Privacy
KNACKFORGE applies the Privacy by Design principles to all of its personal data procedures, whether they are carried out through digital systems, technologies, or by hand. Privacy constraints are built into every standard, protocol, and procedure used by KNACKFORGE by default.
Disclosure
When necessary/asked, KNACKFORGE discloses personal data to third parties solely for the purposes specified in the privacy notice, with the individual’s consent, or as required for authorized purposes. Public authorities, law enforcement agencies, and other such authorities are referred to as third parties.
Subject Rights to Data
KNACKFORGE will offer individuals with the opportunity to exercise data subject rights that are available to them in the context of their engagement with KNACKFORGE, in accordance with applicable legal requirements. These rights may include the ability to request access to their Personal Data, the ability to correct inaccurate or incomplete Personal Data, and the ability to object to the Processing of their Personal Data. Each Data Subject Request is verified and tracked all the way to completion. Other rights, such as the right to be forgotten, the right to withdraw consent, the right to data portability, and so on, may be accessible depending on the applicable law and the data subject’s involvement with KNACKFORGE. KNACKFORGE shall ensure compliance and take all necessary steps to assist data subjects in exercising their rights.
Transfers of Data Internationally
KNACKFORGE operates on a global scale, and it may be necessary to transfer Personal Data between countries from time to time. KNACKFORGE understands the importance of treating personal data with care, especially when it is transferred to countries where data protection legislation may be lacking. If KNACKFORGE transfers Personal Data to such countries, the Personal Data will be protected as described in this Policy and in compliance with relevant legislation.
Retention of Data
KNACKFORGE shall follow retention rules and processes to ensure that Personal Data is deleted when a reasonable period of time has passed and the purposes have been fulfilled. If it is necessary to preserve the Personal Data forever for those reasons, or if a law requires the Personal Data to be maintained for a specific period of time, an exception applies. When KNACKFORGE no longer requires Personal Data for the reasons for which it was collected, it will delete it as soon as reasonably possible.
Requirements and Implementation for Jurisdiction-specific Needs
Additional obligations for the Processing of Personal Data may apply based on the jurisdiction in which the data is collected or processed. KNACKFORGE will comply with all applicable local, regional, and national privacy laws and regulations.
Contact and Privacy Organization
KNACKFORGE has established a global Privacy Function that is responsible for reviewing and implementing privacy and data protection regulations. Individual countries or geographies may have their own data protection or privacy functions incorporated. The privacy function is also in charge of implementing privacy training and awareness programs, as well as assisting with the integration of privacy concepts into KNACKFORGE company operations and processes. If you have questions about this Policy, please direct them via the contact us form available at www.KnackForge.com
Reporting Data Breaches
All occurrences affecting Personal Data, whether known or suspected, must be reported as soon as they are discovered. Any KNACKFORGE associate, client, third-party service provider, or other business partner may report an event to KNACKFORGE. KNACKFORGE will educate and raise awareness among its employees about how to report a suspected or verified event. Each incident is examined and followed through to completion.
Implementation
KNACKFORGE has internal procedures in place to guarantee that this Policy is followed, to allow persons to exercise their rights as outlined in this Policy and under applicable law, and to address any concerns that KNACKFORGE may not have followed the Policy and/or applicable law.
Policy Changes
KNACKFORGE reserves the right to alter this Policy at any time and without notification to people to reflect changes in the law or privacy practices. Please use the “CONTACT US” form on www.KnackForge.com if you have any issues with our Policy.
Extended Policy
1. Data We Collect
We collect the following categories of personal data when you visit or interact with our website and services:
Identity & Contact Data - your name and email address provided through contact or enquiry forms.
Technical Identifiers - IP address, browser type and version, operating system, and device identifiers collected automatically when you access our site.
Usage & Analytics Data - pages visited, time spent on each page, referral source, clicks, scroll depth, and similar behavioural signals gathered via analytics tools.
Form Submissions - any free-text or structured information you voluntarily submit through web forms (e.g., project enquiries, newsletter sign-ups).
Cookie & Tracking Data - browser cookies, local-storage identifiers, and similar technologies used to remember preferences and measure site performance (see our Cookie Policy for details).
We do not knowingly collect sensitive personal data (such as health, financial, or biometric information) through our website.
2. How We Use Your Data
We process your personal data for the following purposes:
Service Delivery - to respond to your enquiries, provide requested services, and manage our relationship with you.
Marketing Communications - to send you updates, newsletters, or promotional content about our services, only where you have given your explicit consent. You may withdraw consent at any time (see Section 6 - Your Rights).
Analytics & Improvement - to understand how visitors use our website, diagnose technical issues, and improve content, design, and performance.
Customer Support - to handle support requests, troubleshoot problems, and maintain records of your interactions with us.
Legal & Compliance Obligations - to meet applicable legal requirements, enforce our terms, or respond to lawful requests from public authorities.
We rely on the following legal bases under applicable law: performance of a contract or pre-contractual steps (service delivery); legitimate interests (analytics, security); consent (marketing); and compliance with a legal obligation.
3. Data Sharing and Third Parties
We do not sell your personal data. We share it only with the following categories of third-party processors, strictly to operate our services:
Google Analytics (Google LLC, USA) - website analytics. Data collected includes IP address (anonymised), browser/device identifiers, and behavioural usage data. Governed by Google's Data Processing Terms and the EU–US Data Privacy Framework where applicable.
Cloudflare, Inc. (USA) - content delivery network (CDN) and DDoS protection. Processes IP addresses and HTTP request metadata to route traffic and ensure site security.
WordPress / Website Hosting Provider - our site infrastructure and CMS. Stores page content and, where applicable, form submission data on servers located in [insert region].
Email Service Provider - transactional and marketing emails. Processes your email address and name to deliver communications you have requested or consented to. [Insert provider name, e.g., Mailchimp / Brevo / Postmark].
All third-party processors are contractually bound to process your data only on our instructions and to maintain appropriate security measures.
4. Cross-Border Transfers
Some of the third parties listed above are based in, or process data in, countries outside India and the European Economic Area (EEA) - primarily the United States. Specifically:
Analytics data (Google Analytics) is transferred to and processed by Google LLC servers in the United States.
CDN and security data (Cloudflare) may be processed on servers distributed globally, including in the United States.
Where personal data is transferred outside India, we ensure appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) issued by the European Commission, incorporated into our data-processing agreements with relevant processors.
Adequacy decisions or equivalent frameworks recognised under the Digital Personal Data Protection Act 2023 (India) and GDPR, where applicable.
You may request a copy of the relevant safeguards by contacting us at the address in Section 7
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
Form submissions (enquiries, contact requests) - retained for 12 months from the date of submission, after which records are deleted or anonymised.
Analytics data (Google Analytics) - retained for 26 months in accordance with Google's default retention settings, after which it is automatically deleted.
Account / client data - retained for the duration of the contractual relationship and deleted within 30 days of a verified deletion request, unless retention is required by applicable law (e.g., tax or accounting obligations).
Marketing consent records - retained for the lifetime of the consent plus 3 years to demonstrate compliance.
When data is no longer needed, it is securely deleted or anonymised so it can no longer be attributed to an individual.
6. Your Rights
Under the Digital Personal Data Protection Act 2023 (India) and, where applicable, the GDPR, you have the following rights in relation to your personal data:
Right of Access - obtain confirmation of whether we hold your data and receive a copy of it.
Right to Correction - request that inaccurate or incomplete data be corrected.
Right to Erasure - request deletion of your personal data where it is no longer necessary, or where you withdraw consent on which processing is based.
Right to Withdraw Consent - where processing is based on your consent (e.g., marketing emails), you may withdraw it at any time without affecting the lawfulness of prior processing. Use the unsubscribe link in any marketing email or contact us directly.
Right to Data Portability - receive your data in a structured, commonly used, machine-readable format and transmit it to another controller, where technically feasible.
Right to Nominate (DPDP Act) - nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
How to exercise your rights: Submit a written request to hr@knackforge.com. We will acknowledge your request within 72 hours and respond substantively within 30 days. We may ask you to verify your identity before processing the request.
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India or your local supervisory authority.
7. Grievance Officer
In accordance with the Digital Personal Data Protection Act 2023 (Section 13) and the Information Technology Act 2000 (Section 5(9) of the IT (Intermediary Guidelines) Rules), we have appointed a Grievance Officer to address privacy-related concerns:
Name: Subashini Maialagan
Designation: Grievance Officer
Email: hr@knackforge.com
Postal Address:
Kosmo One Park, Tower C, 1st floor,
3rd main road,
Ambattur Industrial Estate,
Chennai, Tamilnadu 600058
Grievances may be submitted by email or post. We will acknowledge your grievance within 48 hours of receipt and resolve it within 30 days, in accordance with applicable law. If the grievance requires additional time, we will notify you of the reason for the delay and the expected resolution date.