Privacy Policy

Thoratech Innovations Pvt Ltd ("Thoratech", "we", "our", "us") is a CX and BPO managed-operations company headquartered in Pune, India. Our website is published at thoratech.global.

For any privacy-related question or to exercise your rights described below, contact us at hello@thoratech.global.

This policy describes how we collect, use, store and share personal information when you visit our website or get in touch with us. It is written to be consistent with:

• India's Digital Personal Data Protection Act, 2023 (DPDP Act)
• The EU General Data Protection Regulation (GDPR) for visitors based in the EU/EEA and UK
• The Information Technology Act, 2000 and its rules, as applicable in India

We only collect the minimum personal data needed to respond to you:

• Contact details you provide voluntarily: name, company, email, phone and the message you write to us through the contact or careers form.
• Resume / CV only if you choose to attach one when applying for a role.
• Technical data from your browser (IP-derived city, device, browser, pages visited, referrer) collected by analytics tools used by this website.

We do not knowingly collect data from children under 18 and we do not run profile-based advertising on this site.

• To respond to your enquiry, based on the consent you give by submitting the contact form.
• To assess job applications, based on consent and the steps necessary to enter into a contract of employment.
• To run the website securely, based on our legitimate interest in operating, securing and improving the site.
• To meet legal obligations, for example, records we are required to keep under Indian law.

This site uses a small number of cookies and similar technologies to keep the site working and to understand how it is used. They fall into three buckets:

• Strictly necessary cookies, required for the site to function (e.g. remembering your cookie choice). These cannot be turned off.
• Analytics cookies, let us count visits and traffic sources so we can measure and improve performance. Anonymised wherever possible.
• Functional cookies, remember choices you make to give you a better experience.

When you first visit the site, our cookie banner lets you accept or reject non-essential cookies. You can change your choice at any time by clearing your browser storage for this site.

We do not sell your personal data. We only share it with a limited set of trusted parties:

• Cloud, email, analytics and infrastructure providers that help us operate the website and respond to you. They are bound by appropriate confidentiality and data-protection obligations.
• Professional advisers (legal, accounting) and government or regulatory authorities, where required by law.

Some of these providers may process data outside India. Where this happens, we rely on appropriate safeguards consistent with applicable law, including, where relevant, the standard contractual clauses required under the GDPR.

We keep personal data only for as long as needed for the purposes described above and to meet legal, tax and accounting requirements. Contact-form enquiries are typically retained for up to 24 months. Job-application data is typically retained for up to 12 months from the date of submission unless you ask us to delete it earlier.

Subject to the DPDP Act, the GDPR and other applicable laws, you have the right to:

• Access the personal data we hold about you
• Ask us to correct or update inaccurate data
• Ask us to erase your data ("right to be forgotten")
• Withdraw consent you previously gave
• Object to or restrict certain processing
• Request portability of data you provided to us
• Nominate another individual to exercise these rights on your behalf in case of death or incapacity (DPDP Act)
• Lodge a complaint with the Data Protection Board of India or, where applicable, your local EU supervisory authority

To exercise any of these rights, write to us at hello@thoratech.global. We respond within 30 days.

We apply reasonable technical and organisational measures to protect personal data, including access controls, encrypted transport and a clear internal data-handling policy. No system is perfectly secure, if you believe your data has been compromised, please contact us immediately.

We may update this policy from time to time as our operations or applicable laws evolve. The latest version will always be posted on this page with a revised effective date.