Privacy Policy

01 Information We Collect

We collect information you voluntarily provide and data automatically gathered when you use our website:

Information You Provide:

• Full name, email address, phone number submitted through contact forms
• Company name and project description submitted in service inquiry forms
• Resume/CV and application details submitted through our careers page
• Communications via email, WhatsApp, or any direct channel you initiate

Information Automatically Collected:

• IP address, browser type, operating system, and referring URL
• Pages visited, time spent, and navigation patterns on our site
• Cookie identifiers and session data (see our Cookie Policy)
• Device type, screen resolution, and approximate geographic location (country/city)

02 How We Use Your Information

We use collected information to:

• Respond to service inquiries, project briefs, and contact form submissions
• Process job applications and coordinate candidate interviews
• Send project updates, scope confirmations, and delivery communications
• Send relevant engineering insights, product updates, or event invitations (where consented)
• Improve our website performance, UI/UX, and content based on usage analytics
• Comply with applicable legal obligations, tax filings, and regulatory requirements
• Protect against fraud, unauthorized access, and security incidents

We operate under the legitimate interests legal basis for processing B2B inquiry data, and rely on consent for marketing communications. You can withdraw consent at any time by emailing info@wraxel.com.

03 Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors (e.g., cloud hosting providers AWS/GCP, email service providers) who process data strictly on our behalf
• Legal Compliance: When required by law, court order, or regulatory authority in India or Canada
• Business Transfers: In the event of a merger, acquisition, or asset sale, with advance notice to affected individuals
• Protection of Rights: To investigate fraud, enforce our Terms & Conditions, or protect the safety of our team or users

All third-party service providers are contractually required to maintain confidentiality and comply with applicable data protection laws.

04 Data Security

We implement enterprise-grade technical and organizational measures to protect your data:

• AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Role-based access controls limiting employee access to only data needed for their role
• Regular security audits, penetration testing, and SAST/DAST scanning
• Comprehensive incident response procedures aligned with ISO 27001 controls

While we apply industry-leading security practices, no online service can guarantee absolute security. We encourage users to protect their accounts with strong, unique passwords.

05 Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy:

• Contact/Inquiry Data: 36 months from last meaningful interaction
• Client Project Data: 7 years (as required for financial and legal compliance in India and Canada)
• Job Application Data: 12 months if unsuccessful; extended if an active role is offered
• Analytics Data: Aggregated, anonymised data may be retained indefinitely
• Cookie Data: As specified in our Cookie Policy

Upon retention period expiry, data is securely deleted or anonymised.

06 Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of all personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Withdraw any previously granted consent at any time

To exercise any of these rights, email info@wraxel.com with the subject line "Data Rights Request". We will respond within 30 days. Residents of the EU/EEA may also lodge a complaint with their national supervisory authority.

07 Cookies & Tracking

We use cookies and similar tracking technologies to operate our website and understand usage patterns. Please read our dedicated Cookie Policy for full details on what cookies we use, their purpose, and how to control them.

08 International Data Transfers

Wraxel operates across India and Canada. Data collected from users in one country may be processed or stored in our other operating jurisdiction. We ensure appropriate safeguards are in place, including contractual clauses, to protect your data in all locations.

Residents of Canada benefit from protections under PIPEDA. Indian residents are covered under applicable IT Act provisions and evolving DPDP Act obligations.

09 Children's Privacy

Wraxel's services are intended for business professionals and are not directed at children under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child, we will promptly delete it. Please contact us at info@wraxel.com if you have concerns.

10 Policy Changes

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. Material changes will be communicated via a notice on our website or by email (where we hold your contact details). The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website after changes constitutes your acceptance of the updated policy.

11 Contact Us

For any privacy-related questions, data rights requests, or concerns about this policy, please contact our Data Controller: