Privacy notice.
What we collect through this website, email, phone and WhatsApp, why, for how long, who handles it for us, and how to use your rights.
- Version
- 1.0
- Last updated
- Data fiduciary
- NetScale IT Services Private Limited
- Questions
- reachus@netscale.in
On this page
Who we are
NetScale IT Services Private Limited (CIN U62020KA2023PTC173298), The Estate, 8th Floor, 121 Dickenson Road, Sivan Chetty Gardens, Bengaluru 560042, Karnataka. For the personal data described here we are the data fiduciary: we decide why and how it is used.
This notice covers this website, its forms, and the email, phone and WhatsApp messages you send us. It does not cover personal data we handle for clients during an engagement. The engagement contract governs that, and there we usually act for the client as a data processor.
Who answers for us
Our Grievance Officer answers questions about how we process personal data, handles your requests and resolves grievances. NetScale has not been notified as a significant data fiduciary, so the law does not ask us for a Data Protection Officer.
- Role
- Privacy contact and Grievance Officer
- reachus@netscale.inPut Privacy, Withdraw or Grievance in the subject line so it reaches the right person.
- Phone
- +91 96320 28993
- Post
- The Grievance Officer, NetScale IT Services Private Limited, The Estate, 8th Floor, 121 Dickenson Road, Sivan Chetty Gardens, Bengaluru 560042, Karnataka
- Answers
- Acknowledged within 2 working days, answered within 30 days
What we collect, and why
What we collect depends on how you reach us.
| Where | What we collect | Why | How long |
|---|---|---|---|
| Contact, free assessment and Experiment with us forms | Required: your name, email and company, and on the contact and Experiment with us forms your message. If you give them: your role, organisation size, whether you are a GCC site, phone number, a time that suits you for a call, your message on the free assessment form, the assessment type and how you heard about us. Added automatically: the page you sent it from, the link or button that brought you there, any campaign tags in its address, the country your connection comes from, and the date and time. We also record the notice version and consent wording you agreed to. | To reply to you and to arrange and prepare what you asked for: a conversation, a free written assessment or an experiment. How you heard about us is used only to count which channels bring enquiries. | 12 months after your last message, then erased. If you become a client, the engagement contract sets the period. |
| Form checks | A keyed hash of your IP address and of your email address: a code made with our secret key, from which the address itself cannot be read. | To stop automated and repeated sending through the forms. | Up to 24 hours. |
| Email, phone and WhatsApp | Your name, email address or phone number, and what you write or say. | To reply and carry on the conversation you started. | 12 months after your last message, then erased. |
| Job applications | Your CV, contact details and covering note. | To consider you for roles at NetScale. Only the people hiring for the role read them. | 12 months after we tell you our decision, unless you ask us to keep them for future roles or to erase them sooner. |
| Visiting this website | Your IP address, browser and device type, the page requested, the page that linked to it, and the date and time, recorded by our hosting provider. | To deliver the site and keep it secure. | Up to one year from the visit, then erased. |
We do not sell personal data, use it for advertising, or add enquiries to mailing lists. If we want to use your details for anything new, we ask you first.
Please do not put passwords, keys, other people’s personal data, or anything about your health or finances in a form or message. If you do, we delete it.
Why we may use it
- Forms: your consent, which you give by ticking the box before you send.
- Email, phone, WhatsApp and job applications: you sent us your details yourself, for a purpose you chose. We use them for that purpose until you tell us to stop (section 7(a) of the Act).
- Form checks and website logs: to keep this site, and what you send through it, secure, as Indian law requires of us.
Where Indian law requires us to keep or disclose information, we do so on that basis.
Withdrawing consent
Withdrawing is as easy as giving. Write to reachus@netscale.in from the address you used, with Withdraw in the subject, or reply Withdraw to any email from us.
We then stop using your details, erase them as set out under How long we keep it, and ask everyone who handles them for us to do the same. We confirm by email within 2 working days.
What we did before you withdrew stays lawful. If an assessment is under way, we cannot finish it without your details.
Outside India
Some of the providers above may process data outside India. We follow any restriction the Central Government notifies under section 16 of the Act and Rule 15 of the DPDP Rules.
How long we keep it
- Enquiries by form, email, phone or WhatsApp: 12 months after your last message, then erased
- Job applications: 12 months after we tell you our decision
- The record of your consent (notice version, consent wording and time): as long as the enquiry, and one year after
- Form checks: up to 24 hours
- Website logs: up to one year from the visit
- Client engagements: the period set in the contract
From 13 May 2027, Rule 8(3) of the DPDP Rules also asks us to keep a record of each processing for at least one year. That record includes the personal data and logs involved.
When you ask us to erase your details, we remove them from the systems we work in straight away. We keep that record locked and unused until its year ends, then erase it.
How we protect it
Our information security and privacy management systems are certified to ISO/IEC 27001:2022 (certificate ISMS/4367/0926) and ISO/IEC 27701:2025 (certificate PIMS/54B0/0926). The certificates are on Certifications and technology.
This site is served over HTTPS only, so what you send through it is encrypted on the way. The form handler writes no field contents to its logs, and keeps IP and email addresses only as keyed hashes. Access to your details is limited to the people handling your request.
Your rights
You can ask us for:
- a summary of the personal data we hold about you, what we do with it, and who we have shared it with
- correction, completion or updating of it
- erasure of it, unless the law requires us to keep it
- a response to a grievance about how we handled it
- nomination of someone to use these rights for you if you die or cannot act for yourself: send us the nominee’s name and email address
To ask, write to reachus@netscale.in or call +91 96320 28993. Write from the email address you used with us, or call from the number you used: that is how we identify you. If you write from another address, we confirm with the original one first.
We acknowledge within 2 working days and respond within 30 days. Every reply names the person you can ask about it.
Grievances
Write to our Grievance Officer at reachus@netscale.in with Grievance in the subject, or by post to the address under Who answers for us. We acknowledge it within 2 working days. Within 30 days of receiving it, we give you our answer and what we did.
Complaining to the Data Protection Board of India
If we do not answer your grievance within 30 days, or you are not satisfied with our answer, you can complain to the Data Protection Board of India. The Act asks you to raise it with us first.
The Board works as a digital office. We will link its complaint page here once the Board publishes one. Until then, the Ministry of Electronics and Information Technology publishes the Board’s details at meity.gov.in.
Children
This site is for working professionals. We do not knowingly collect personal data from anyone under 18. If we learn that someone under 18 has sent us their details, we erase them.
If a breach affects you
If a personal data breach affects you, we tell you without delay, by email or the channel you used with us. We say what happened, what it means for you, what we are doing about it, what you can do, and whom to contact.
We also tell the Data Protection Board without delay. Within 72 hours of becoming aware of the breach, we send the Board a detailed report, as Rule 7 of the DPDP Rules sets out. Where the CERT-In Directions apply, we report to CERT-In within 6 hours.
Languages
This notice is in English. You can have it in Hindi (हिन्दी), Kannada (ಕನ್ನಡ) or any other language in the Eighth Schedule to the Constitution.
Write to reachus@netscale.in with the language in the subject, and we send this notice and our forms’ consent wording in that language.
The law
This notice is written to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Most of their duties on data fiduciaries apply from 13 May 2027.
Until then, section 43A of the Information Technology Act, 2000 and the 2011 rules on reasonable security practices made under it also apply. We follow this notice now.
Changes to this notice
This is version 1.0, last updated 9 October 2026. When we change it, we raise the version and the date here and keep every earlier version; ask us for one. If a change affects details you have already given us, we tell you by email before it applies.
| Version | Date | What changed |
|---|---|---|
| 1.0 | 9 October 2026 | First published version. |