Privacy Policy
1. INTRODUCTION
EZ Ranking IT Services Private Limited (hereinafter referred to as "the Company," "EZ Rankings," "EZRITSPL," "EZR," "we," "our", or "us") is committed to protecting and respecting the privacy of individuals whose personal data it processes.
This Privacy Policy ("Policy") sets forth the principles, practices, and legal rights relating to the collection, use, storage, transfer, and disclosure of Personal Data when you:
- Access or use our website www.ezrankings.com ("Website"),
- Engage with us through any form of communication or interaction,
- Receive services from us pursuant to a contract or engagement.
This Policy is drafted in accordance with:
- The Digital Personal Data Protection Act, 2023 (India) ("DPDP Act"),
- The Information Technology Act, 2000
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011,
- Regulation (EU) 2016/679 (General Data Protection Regulation -- GDPR), where applicable,
- California Consumer Privacy Act (CCPA), where applicable, and
- Other applicable data protection legislations in jurisdictions where our clients and users are located.
2. DEFINITIONS
For the purposes of this Policy:
- "Personal Data" means any data about an individual who is identifiable by or in relation to such data, including as defined under Section 2(t) of the DPDP Act.
- "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.
- "Data Principal" refers to the individual to whom the Personal Data relates.
- "Data Fiduciary" refers to the Company, which determines the purpose and means of Processing Personal Data.
- "Sensitive Personal Data" includes financial information, login credentials, official identifiers, and other data prescribed under applicable law.
- "Cookies" means small files placed on your device for the purposes of tracking, analytics, or improving user experience, as further detailed in our Cookie Policy.
3. SCOPE AND APPLICABILITY
This Policy applies to all Processing of Personal Data:
- Collected directly from you via our website, electronic communications, service engagement forms, or during contractual performance;
- Received indirectly from publicly available sources, referrals, or third-party service providers acting on our instructions;
- Processed in connection with our marketing, analytics, recruitment, and customer support activities.
This Policy does not apply to:
- Anonymous, de-identified, or aggregated data which cannot reasonably identify an individual;
- Third-party websites or services linked from our website, which are governed by their own privacy policies.
4. LEGAL BASIS FOR PROCESSING
We process Personal Data on one or more of the following legal bases:
- Consent: Where you have expressly consented to Processing for a specified purpose;
- Contractual Necessity: Where Processing is required for the performance of a contract to which you are a party;
- Legal Obligation: Where Processing is necessary to comply with applicable law or regulatory requirements;
- Legitimate Interests: For purposes such as analytics, business improvement, fraud prevention, and security, provided such interests are not overridden by your fundamental rights and freedoms.
Consent obtained is recorded, maintained, and capable of being withdrawn in accordance with Section 7 of the DPDP Act.
5. CATEGORIES OF PERSONAL DATA PROCESSED
a) Data You Provide Voluntarily:
- Full name, designation, company details, and contact information (email address, telephone number);
- Billing, invoicing, and payment-related information;
- Project requirements, business preferences, and related correspondence;
- Files, documents, or materials voluntarily shared with us.
b) Data Collected Automatically:
- IP address, device identifiers, operating system, and browser details;
- Approximate geolocation inferred from IP address;
- Website navigation patterns, clickstream data, and session statistics;
- Cookies, pixels, and tracking data (as detailed in the Cookie Policy).
6. PURPOSE OF PROCESSING
We process your Personal Data for the following purposes:
- To respond to inquiries, provide quotations, and deliver services;
- To process orders, payments, and maintain financial records;
- To improve website performance, functionality, and user experience;
- To send marketing communications, promotional offers, and newsletters (where consented to);
- To detect, prevent, and investigate fraud, security breaches, or unlawful activities;
- To comply with applicable laws, court orders, and regulatory requirements.
7. DISCLOSURE AND TRANSFER OF PERSONAL DATA
We do not sell Personal Data to third parties.
We may disclose Personal Data:
- To service providers engaged for hosting, CRM, marketing automation, payment processing, and IT support;
- To legal or governmental authorities when required under applicable law;
- In connection with mergers, acquisitions, corporate restructuring, or sale of assets, subject to confidentiality obligations.
Cross-Border Transfers: Where Personal Data is transferred outside India, such transfers shall be made in compliance with Section 16 of the DPDP Act and safeguarded through Standard Contractual Clauses, Data Processing Agreements, or equivalent legal mechanisms.
8. DATA RETENTION
Personal Data shall be retained for no longer than is necessary to fulfil the purposes for which it was collected, subject to:
- A maximum retention of seven (7) years post last engagement, unless extended for legal compliance;
- Secure deletion or anonymisation upon expiry of the retention period.
9. SECURITY MEASURES
We implement Reasonable Security Practices and Procedures as prescribed under Rule 8 of the SPDI Rules, including:
- Encryption of data in transit (TLS/SSL) and at rest;
- Firewalls, intrusion detection systems, and access controls;
- Role-based access permissions;
- Periodic vulnerability assessments and security audits.
10. YOUR RIGHTS
In accordance with applicable law, you have the right to:
- Request access to your Personal Data;
- Request rectification of inaccurate or outdated information;
- Request erasure of Personal Data, subject to legal obligations;
- Withdraw consent at any time;
- Request a copy of your Personal Data in a portable format;
- Lodge a grievance with our appointed Grievance Officer.
11. GRIEVANCE REDRESSAL
Grievance Officer:
Mr. Rajiv Rana, Director (Operations)
Email: raj@ezrankings.com
Phone: +91-9810572967
Corporate Office: A-74, SF, Sector-2, NOIDA, G.B. Nagar -- 201301, U.P., India.
We shall respond to grievances within the timelines prescribed under the DPDP Act.
12. CHILDREN'S PRIVACY
Our services are not intended for individuals under the age of 18 years. We do not knowingly collect Personal Data from minors. If such data is inadvertently collected, we shall promptly delete it.
13. AMENDMENTS
We reserve the right to amend this Policy at our discretion. Substantive changes will be communicated through our website and, where feasible, via direct notice.
14. GOVERNING LAW & JURISDICTION
This Policy shall be governed by and construed in accordance with the laws of India. Any disputes shall be subject to the exclusive jurisdiction of the competent courts at New Delhi, India.
15. CONTACT INFORMATION
EZ Ranking IT Services Private Limited
Website: www.ezrankings.com
Email: contactus@ezrankings.com
Phone: +91-0120-4580130
Corporate Office: A-74, SF, Sector-2, NOIDA, G.B. Nagar -- 201301, U.P., India.