DPDP Notice
A short notice of the personal data TEdgeOne Global Solutions Pvt. Ltd. collects through each form on this website and in the consultant network, why, for how long, and how to exercise your rights.
1. Data Fiduciary
TEdgeOne Global Solutions Pvt. Ltd., Registered Office: #10/A, 2nd Main Road, BEML 1st Stage Bangalore, INDIA - 560098. Privacy contact: privacy@tedgeone.com. Grievance Officer: Director, privacy@tedgeone.com.
This notice is given under Section 5 of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. It is shown, or linked, before you submit any form. It also applies to people whose details are given to us by someone else: referees named by a consultant, and contacts referred to us by a consultant.
2. What we collect, why, and for how long
| Where | Personal data | Purpose | Kept for |
|---|---|---|---|
| Contact form (including assessment, transformation, partnership and fractional enquiries) | Name, work email, company, role, engagement type, your message | Respond to your enquiry and scope services | 2 years from last contact |
| Careers form | Name, email, areas of expertise, LinkedIn, background | Assess your job application | 12 months if unsuccessful |
| Associate form (join the network) | Name, email, optional phone, location, LinkedIn, experience, practices, skills, industries, regions, availability, rate range, certifications, summary, motivation | Assess your application, sanctions and conflict screening, contact you | While open; 12 months if not approved; erased within 30 days if withdrawn or closed for no reply |
| Verification pack | Career history and employers, outcome claims, anonymised projects, certifications and evidence files, referee details, conflicts, NDA status, availability, work mode and rates, invoicing entity, optional tax registration number, signatory, LinkedIn follow, declaration, agreement acceptance, consent choices | Verify your experience, contact referees, decide on approval, prepare your anonymised profile, invoicing | As for the Associate form; while a member; evidence deleted with your record |
| Assessment records (created by TEdgeOne) | Scores, tier, sanctions and conflict check results, screening flags, review notes, delivery feedback | Decide on approval, match consultants to work, quality | With the consultant’s record |
| Referee form | Referee name, organisation, email, relationship, answers | Confirm the consultant’s experience | With the consultant’s record |
| Anonymised public profile and network map | Code name, headline and summary, tier, practices, skills, industries, regions, experience band, certifications, anonymised projects, availability band (no name or contact details) | Show verified expertise to clients — only with your consent for each | Until you withdraw consent or leave |
| Consultant portal | Sign-in codes, consents, rate card, negotiations, engagements, invitations, requests for expertise, client request answers, referrals | Run your membership, engagements and introductions | While a member; erased within 30 days of leaving (24 months if offboarded by TEdgeOne) |
| Consultant referral of a client opportunity | Company, need and (optionally) the contact’s name, role and work email | Qualify the opportunity and keep the referrer informed | 24 months after closing if it does not go ahead; otherwise with the referring consultant’s record |
| Client request for a consultant | Name, company, work email, requirement, location, start and duration | Confirm your email, send the requirement (without your identity) to the consultant, suggest alternatives, arrange the engagement | 24 months (7 years if an engagement is confirmed); unconfirmed requests closed after 3 days and erased 7 days later |
| Advisory brief (optional) | Name, email | Send advisory content by email | Until you withdraw consent |
| Data Rights form | Name, email, request type, details | Verify and fulfil your request and evidence how it was handled | As long as needed to resolve and evidence the request |
| Website security and audit log | IP address (also as a one-way hash), browser details, form timestamps; audit log of portal and console actions (record references and short notes, no contact details) | Prevent abuse and automated submissions; accountability | At least 1 year and no more than 3 years |
3. Consent
- Each purpose has its own unticked box; optional purposes (public profile, network map, discoverability by other members) are never bundled with the service you asked for.
- We keep a record of each consent with the notice version and time.
- You can withdraw consent at any time, as easily as you gave it: in the consultant portal (Consents), with the link in your application acknowledgement email, by replying to any of our emails, or on the Data Rights page. Withdrawal takes effect at once for the future.
4. Your rights
Access a summary, correction and completion, erasure, withdrawal of consent, nomination and grievance redressal. Use the Data Rights page or email privacy@tedgeone.com. We respond within the statutory period and in any case within 90 days.
5. Grievances and the Data Protection Board
Contact the Grievance Officer first (privacy@tedgeone.com). If your grievance is not resolved within 90 days, or you are not satisfied, you may complain to the Data Protection Board of India through its online complaint process (see the Ministry of Electronics and Information Technology website, meity.gov.in).
6. Recipients
- Hostinger (hosting and database), Google Workspace (email delivery), Google Fonts (typefaces; receives IP address and browser details).
- Within the network: consultants receive a client’s requirement, location and timeline without the client’s identity; contact details are exchanged only after an engagement is confirmed; team members of a confirmed engagement may see each other’s names and emails.
- We do not sell, rent or trade personal data.
7. Automated processing
Fixed rules run some steps automatically: sanctions screening of the stated location (a match is held for legal review), sending verification packs and reminders, closing applications with no verification pack after 30 days, suggesting fit scores and ranking consultants (including on rate and whether they follow our LinkedIn page), moving client requests to the next consultant after a decline or 5 days without an answer, and closing unconfirmed client requests after 3 days. Approval or rejection of a consultant on merit is always decided by a person. Details: Privacy Policy.
8. Children
You must be 18 or older to submit personal data. If we find a child’s data without verifiable parental consent we will erase it.
9. Transfers outside India
Some providers, including Google, may process data outside India, in line with Section 16 of the DPDP Act and any Government restriction.
10. Security and breaches
HTTPS, encryption at rest, access controls, two-factor sign-in for reviewers, bot protection, rate limiting and logging. Breaches are notified to affected people and the Data Protection Board without delay, with a detailed report within 72 hours or any longer period the Board allows.
11. Changes
Changes update the version and date of this notice; where required we ask for consent again. This version adds the consultant network, portal, client requests and referrals. Full details: Privacy Policy.