Who We Are
PplAct is the Data Fiduciary for personal data processed through this website, career pages, search experiences, email communications, and official social channels. For privacy questions or Data Principal requests, contact:
If PplAct is required to appoint a Data Protection Officer or is notified as a Significant Data Fiduciary, we will update this page with the required business contact details.
Personal Data We Collect
Website and inquiries
Name, email address, phone number, city, messages, search or form inputs, and communication preferences.
Career applications
Resume, portfolio links, role preference, education, work history, skills, interview notes, availability, location, and information you choose to share.
Technical data
IP address, browser, device type, pages visited, timestamps, security logs, and similar data generated when you access the site.
Social interactions
Public profile details, handle, comments, messages, and other information you share with PplAct through LinkedIn, Instagram, X, or Threads.
Why We Use Personal Data
- To operate the website and provide requested information or services.
- To respond to questions, partnership interest, and career applications.
- To evaluate candidates and manage recruitment or internship processes.
- To improve PplAct's website, content, hiring workflow, and user experience.
- To protect our systems, prevent misuse, investigate security events, and keep audit logs.
- To comply with legal duties, court orders, regulatory requests, or enforceable claims.
- To send updates only where you have consented or where law permits us to do so.
DPDPA Basis For Processing
We process personal data for lawful purposes using consent and permitted legitimate uses under the Digital Personal Data Protection Act, 2023. When consent is required, the request will be clear, specific, informed, unambiguous, and limited to the stated purpose. You may withdraw consent at any time using the contact details above.
Where you voluntarily provide personal data for a specific purpose, such as contacting us or applying for a role, we may use it for that requested purpose unless you indicate otherwise. We may also process data where required for employment-related purposes, security, legal compliance, or other uses permitted by applicable law.
Where a DPDPA notice or consent request is required, we will present it in clear and plain language, include an itemised description of the personal data and purpose, provide access to rights and grievance channels, and support English plus other legally required Indian language access. If PplAct later integrates a registered Consent Manager, you may use that channel to give, review, manage, or withdraw consent.
Your Rights
Subject to applicable law, you may request:
- Access to a summary of the personal data we process and the processing activities.
- Correction, completion, or updating of inaccurate or incomplete data.
- Erasure of personal data when the purpose is served or retention is no longer required by law.
- Withdrawal of consent where processing is based on consent.
- Grievance redressal through PplAct before approaching the Data Protection Board of India.
- Nomination of another individual to exercise your rights in case of death or incapacity.
To exercise these rights, email privacy@pplact.com with the subject "DPDPA Request". We may ask for details needed to identify your record, such as the email address, phone number, application reference, or account identifier used with PplAct. We aim to respond to grievances within a reasonable period not exceeding 90 days.
Retention And Deletion
We keep personal data only for as long as needed for the purpose described in the notice, for legal compliance, for security, or to resolve disputes. Career application data is generally retained for up to 12 months after the hiring process unless you ask us to delete it earlier, consent to a longer talent-pool retention period, or law requires a different period.
Security logs, processing logs, and related technical records may be retained for at least one year where required by the DPDP Rules, 2025 or for security and compliance needs. When retention is no longer required, we delete or anonymise the data.
Sharing And Processors
We may share personal data with service providers that help us host the website, manage email, review applications, store files, analyse site reliability, or secure our systems. These providers act as Data Processors where applicable and must process data under contract and with reasonable safeguards.
We may also share data with professional advisers, authorities, or other parties where required by law, to protect rights and safety, in a business reorganisation, or with your consent. We do not sell personal data.
Security And Breach Response
PplAct uses reasonable technical and organisational safeguards such as access controls, least-privilege permissions, secure storage, logging, review of processors, and security monitoring. No internet system is perfectly secure, but we work to prevent unauthorised access, loss, misuse, alteration, or disclosure.
If a personal data breach occurs, we will notify affected Data Principals and the Data Protection Board of India as required by law, including detailed Board updates within the statutory timeline where applicable.
Children
PplAct's website and career pages are not intended for children under 18. We do not knowingly process children's personal data without verifiable parental or lawful guardian consent. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
Cookies, Fonts, And Analytics
This website may use essential technical storage, logs, and third-party font delivery to load pages and keep the site reliable. If we add analytics, advertising pixels, or non-essential cookies, we will update this notice and, where required, ask for consent.
International Processing
Some processors or tools may process data outside India. PplAct will follow applicable DPDPA requirements and any transfer restrictions notified by the Central Government.
Data Principal Duties
Please provide authentic information, avoid impersonation, do not suppress material information, and do not file false or frivolous grievances or complaints.
Changes To This Policy
We may update this Privacy Policy when PplAct changes its services, hiring process, processors, contact details, or legal obligations. The latest version will always be posted on this page.