Privacy Policy

Identity Collaboration — Privacy Policy

Effective date: 6 November 2026

THIS PRIVACY POLICY (THE "POLICY") FOR IDENTITY COLLABORATION (THE "COMPANY"), LOCATED AT TECCI PARK, ELCOT SEZ, SHOLINGANALLUR, CHENNAI, TAMIL NADU 600119, INDIA, WITH AN OFFICE AT 30 E 40TH ST, NEW YORK, NY 10016, USA, DESCRIBES:

• What Personal Data the Company collects about you;
• How the Company uses your Personal Data;
• To whom the Company discloses your Personal Data;
• Any international transfers of your Personal Data;
• How the Company safeguards and retains your Personal Data;
• Whether the Company engages in automated decision making; and
• Your rights regarding your Personal Data.

This Policy applies to the Company's website, identitycollaboration.com, and to Personal Data the Company Processes in the course of its business relationships.

For purposes of this Policy:

• "Personal Data" means any information concerning an identified or identifiable individual; and
• "Processing" means any operation with respect to Personal Data, such as collection, retrieval, access, use, disclosure, storage or disposal of Personal Data.

1. COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL DATA

1.1 Collection. The Company collects Personal Data from you when you interact with our website, contact us by email, phone or WhatsApp, apply for a role, or engage with us in a commercial relationship. The Personal Data collected includes, but is not limited to:

• First and last names
• Business contact information (email address, phone number, company name)
• Job title
• The service you are interested in and the content of your message
• Professional details you provide when applying for a role, such as your CV
• Technical information, such as IP address, browser type, device and pages visited

Information you provide to the Company about other people will be Processed in accordance with this Policy. You are responsible for its accuracy and for making sure those people know what information you have provided and how the Company will Process it.

1.2 Use. The Company uses this information to respond to your enquiries and consultation requests; to provide, manage and invoice our services; to send you service and business information we think may interest you; to assess job applications; to prevent fraud and misuse; and to meet our legal obligations. The Company does not sell your Personal Data.

We may use navigational information to understand how visitors use our website, such as which pages are visited, how often, and any difficulties visitors have. We use this information to improve the website and for internal business purposes. We use cookies and similar technology for many of these same purposes. You can block or delete cookies through your browser settings, although parts of the website may then not work.

Our website includes features provided by third parties, such as Google Maps, WhatsApp, LinkedIn, Instagram, YouTube and X. These providers may collect information about your use of those features under their own privacy policies.

1.3 Client engagements. When the Company delivers identity, security, migration or managed services, it may access Personal Data held in a client's systems, such as Microsoft Entra ID, Active Directory, Microsoft 365 and Azure. In that case the client controls that Personal Data and the Company Processes it only on the client's instructions, for the agreed engagement, and under the terms of its contract with the client. Individuals whose data is held by one of our clients should direct privacy requests to that organization.

1.4 Disclosures. Due to business requirements or contractual or statutory obligations, the Company may need to disclose your Personal Data to Authorized Third Parties (defined below) for the purposes described above. The Company will not otherwise disclose your Personal Data to any third parties unless required by law, or in connection with a merger, acquisition or sale of all or part of its business.

"Authorized Third Parties" include third-party service providers (such as email, hosting, CRM and accounting providers), technology partners, subcontractors and professional advisers, each under a written contract or duty of confidentiality with the Company.

2. INTERNATIONAL TRANSFERS OF PERSONAL DATA

The Company operates in India and the United States, and its Authorized Third Parties may be located in these or other countries. The Company may therefore transfer your Personal Data across borders for the purposes described above. Where it does, the Company will do so as permitted by applicable data protection law and will use appropriate safeguards, such as contractual clauses, including the EU Standard Contractual Clauses where they apply.

3. SECURITY MEASURES FOR, AND RETENTION OF, PERSONAL DATA

The Company has implemented reasonable and appropriate administrative, physical and technical safeguards for your Personal Data. These include multi-factor authentication, role-based and least-privilege access, encryption in transit and at rest, endpoint protection, and logging and monitoring. Access to your Personal Data is restricted to Company personnel and Authorized Third Parties with a need to know, who are bound by confidentiality obligations. If a breach affects your Personal Data, the Company will notify you and the relevant authorities as required by law.

The Company will retain your Personal Data for as long as needed for the purposes described in this Policy, throughout the commercial relationship, and thereafter for as long as required or permitted by applicable law. For additional information about the Company's retention of your Personal Data, please contact info@iamcollab.com.

4. NO AUTOMATED DECISION MAKING

The Company does not make any decisions concerning you or our commercial relationship solely by automated means.

5. YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL DATA

You have the right to access your Personal Data and to request that the Company update, correct, complete or delete your Personal Data, as provided by applicable law, including India's Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR. You also have the right to restrict, and to object to, the Company's Processing of your Personal Data and to data portability as provided by applicable law. Where Indian law applies, you may also nominate another individual to exercise your rights in the event of your death or incapacity.

Right to object: You have the right to object to the Processing of your Personal Data based solely on the Company's legitimate interests, including for direct marketing. If you object, the Processing will stop unless there is a compelling reason to continue it or it is needed to establish, pursue or defend legal claims.

You can exercise these rights by emailing info@iamcollab.com. The Company will verify your identity and respond in accordance with applicable data protection law. If you believe your Personal Data has been Processed in violation of applicable law, you may raise a grievance with the Company (Section 6), and you have the right to lodge a complaint with the Data Protection Board of India or the data protection authority where you live, work, or where you believe the violation occurred.

If the Company asks for your consent to Process your Personal Data and you give it, you may withdraw your consent at any time using the contact details above. Withdrawal does not affect the lawfulness of Processing carried out before it.

The Company's services are intended for businesses, and the Company does not knowingly collect Personal Data from anyone under 18.

6. CONTACT AND GRIEVANCE OFFICER

For questions, requests or grievances about this Policy or your Personal Data, please contact:

The Company may update this Policy from time to time. The updated Policy will be posted on this page with a new effective date.