1. Introduction
Welcome to Cosette Network Pvt. Ltd. ("Cosette Network," "we," "us," or "our"). We are a global technology company specializing in custom software development, staff augmentation, IT consulting, digital transformation, and enterprise solutions with offices in India (Mumbai), USA (New York), and Ireland (Dublin).
This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you:
- Visit our website at cosettenetwork.com
- Use our products (OnBenchMark, TravelOWork, HIREfeed)
- Engage our professional services
- Communicate with us via contact forms, email, phone, or WhatsApp
- Subscribe to our newsletters or marketing communications
By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our services.
2. Information We Collect
2.1 Personal Information You Provide
When you interact with us, you may voluntarily provide the following information:
Contact Information
- Full name
- Email address
- Phone number
- Company/Organization name
- Job title
Project Information
- Service interests
- Project requirements
- Technical specifications
- Budget and timeline preferences
- Communication history
Business Information
- Industry sector
- Company size
- Business objectives
- Existing technology stack
Payment Information
- Billing address
- Payment method details
- Tax identification numbers
- Banking information (for invoicing)
2.2 Information Collected Automatically
When you visit our website, we automatically collect certain technical information:
- Device Information: Browser type, operating system, device type, screen resolution
- Log Data: IP address, access times, pages viewed, referring URL, exit pages
- Location Data: Approximate geographic location based on IP address
- Usage Data: How you interact with our website, features used, time spent on pages
3. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Process and respond to inquiries
- Deliver requested services and solutions
- Manage client projects and communications
- Provide technical support
- Process payments and invoicing
Business Operations
- Improve our services and website
- Develop new products and features
- Conduct analytics and research
- Personalize user experience
- Maintain security and prevent fraud
Communication
- Send project updates and status reports
- Respond to support requests
- Share relevant industry insights
- Send marketing communications (with consent)
- Notify about policy changes
Legal Compliance
- Comply with legal obligations
- Enforce our terms and conditions
- Protect our rights and property
- Respond to legal requests
- Meet regulatory requirements
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and UK, we process personal data under the following legal bases:
Contractual Necessity
Processing necessary to perform our contract with you or take pre-contractual steps at your request.
Consent
Where you have given explicit consent for marketing communications or optional data processing.
Legitimate Interests
Processing necessary for our legitimate business interests, such as improving services and fraud prevention.
Legal Obligation
Processing necessary to comply with applicable laws, regulations, or legal proceedings.
5. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:
Service Providers
Trusted third parties who assist us in operating our website, conducting business, or servicing you (e.g., cloud hosting providers, payment processors, analytics services).
Affiliated Companies
Our subsidiaries and affiliates for business purposes consistent with this Privacy Policy.
Legal Requirements
When required by law, court order, or governmental authority, or to protect our rights, property, or safety.
Business Transfers
In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
With Your Consent
When you explicitly authorize us to share your information for specific purposes.
7. Data Security
We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
SSL/TLS Encryption
All data transmitted to and from our website is encrypted using secure protocols.
Access Controls
Strict access controls ensure only authorized personnel can access personal data.
Regular Audits
We conduct regular security assessments and vulnerability testing.
Secure Infrastructure
Our servers are hosted in certified data centers with physical security.
Employee Training
All team members receive data protection and security awareness training.
Incident Response
We maintain incident response procedures to address potential breaches promptly.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Data Category: Client Project Data
- Retention Period: 7 years after project completion
- Reason: Legal compliance, warranties, and potential disputes
- Data Category: Contact Form Submissions
- Retention Period: 3 years from last interaction
- Reason: Business relationship management
- Data Category: Marketing Preferences
- Retention Period: Until consent withdrawn
- Reason: Respect user preferences
- Data Category: Website Analytics
- Retention Period: 26 months
- Reason: Performance monitoring and improvement
- Data Category: Financial Records
- Retention Period: 7 years
- Reason: Tax and accounting requirements
9. International Data Transfers
As a global company with offices in India, USA, and Ireland, your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
Transfer Safeguards
- Standard Contractual Clauses: EU-approved contractual terms for international transfers
- Adequacy Decisions: Transfers to countries recognized as providing adequate protection
- Data Processing Agreements: Binding agreements with all third-party processors
10. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Request limitation on how we process your data.
Right to Data Portability
Request your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is consent-based.
Right to Lodge a Complaint
File a complaint with a supervisory authority.
California Residents (CCPA Rights)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.
11. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us immediately at [email protected].
12. Third-Party Services
We use the following third-party services that may collect information about you:
Web3Forms
Form processing service for contact form submissions.
Vercel
Website hosting and deployment platform.
Google Analytics
Website traffic and usage analytics.
LinkedIn/Twitter/Facebook
Social media integrations and sharing features.
Each third-party service has its own privacy policy governing the use of your information. We encourage you to review these policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Post the updated policy on our website with a new "Last Updated" date
- Notify you by email if you are a registered user or client
- Display a prominent notice on our website
Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:
General Inquiries
Registered Office
Cosette Network Pvt. Ltd.
Mumbai, India