Supplemental Privacy Policy for India
If you are located in India, you have certain rights with respect to your personal information. The following is a summary of those rights and additional information applicable to our collection and use of your personal information. For clarity, this Supplemental Privacy Policy for India is in addition to, and not in lieu of, the information provided in our Privacy Policy.
India’s Information Technology Rules
We have adopted India’s Information Technology (Reasonable Security Practices and procedures and sensitive personal data or information) Rules, 2011 contained in the Information Technology Act, 2000 as amended by Information Technology (Amendment) Act of 2008 (the "IT Act"). These Information Technology Rules govern the way in which we collect, use, disclose, secure and dispose of personal information subject to the IT Act.
Sensitive Personal Information
Under the IT Act, sensitive information includes information about such things as an individual’s sexual orientation, health condition, medical records and medical history, password information, biometric information, and financial information associated with bank accounts or other payment methods. We only use sensitive information:
- For the primary purpose for which it was obtained;
- For a secondary purpose that is directly related to the primary purpose;
- With your consent; or
- Where required or authorized by law.
Summary of Uses and Disclosures of Personal Information
The following is a summary of the categories of personal information we collect, whether we collect the information about Visitors, Employees and Contractors, and/or Client, the purposes for which we collect the information, and the categories of third parties with whom we share personal information.
This is a summary of the categories of personal information we have collected and shared in the preceding 12 months.
Category of Information | About Whom We Collect This Information | Sources From Whom Information Was Collected | Purposes for Which Personal Information Is Collected | Categories of Third Parties With Whom We Share Personal Information |
---|---|---|---|---|
A. Identifying Information |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
B. Categories of Personal Information described in India’s IT Act, Information Technology Rule 3 Protected by Law Note: Some information may overlap other categories |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
C. Characteristics and similar Information Protected by Law |
|
|
|
|
D. Commercial Information |
|
|
|
|
E. Biometric Information |
|
|
|
|
F. Activity on our Websites |
|
|
|
|
G. Geolocation Data |
|
|
|
|
H. Sensory Data including audio, electronic, visual, thermal, olfactory or similar information |
|
|
|
|
|
|
|
|
|
I. Professional or Employment Related Information |
|
|
|
|
|
|
|
|
|
J. Education Information |
|
|
|
|
Reasonable Security Practices and Procedures
Pursuant to India’s IT Act, Information Technology Rule 8, India has determined that the International Organization for Standardization (ISO) demonstrates compliance with India’s reasonable security practices and procedures.
MBO Partners received the ISO 9001:2015 certification after demonstrated ability to meet customer, statutory, and regulatory standards. Therefore, our security practices and procedures are in full compliance with India’s laws.
Contact Details and Complaints
For any questions, concerns or complaints regarding a possible breach of your privacy by us, please contact our Data Protection Officer as follows:
- By completing the Individual Data Request Form
- By phone at 0011+1+703 793 6000
- By mail to MBO Partners, Inc, Attention Data Protection Officer, 20405 Exchange Street, Suite 301, Ashburn VA 20147
We will treat each complaint confidentially. We will investigate each complaint and will contact the individual that submitted the complaint within a reasonable time period once the complaint is resolved (and in any event within any applicable time periods required by law).
Transfers of Personal Information
We may disclose your personal information to our affiliates, third party suppliers and service providers, and other third parties as described in our Privacy Policy and as authorized by India’s IT Act. Some of these entities may be located outside India, including in the United States, New Zealand, Singapore, Germany, Ireland, Australia, and the United Kingdom. We take reasonable steps to ensure that any entities located inside or outside India that receive your personal information from us ensure the same level of data protection that is adhered to by us and that such entities do not breach applicable privacy obligations.
Changes to This Supplemental Privacy Policy for India
We may update this Supplemental Privacy Policy for India from time to time. When we do update them, we will post a notice on our Websites, make the updated version of this Supplemental Privacy Policy for India available on this page, and indicate the date it was last updated above. For clarity, any updates will apply from the date they are posted. Please check back periodically to see if this Supplemental Privacy Policy for India has been updated.