Privacy Notice
Last updated: 21 October 2026
Draft for legal review before publication.
This notice explains how Falcon Digital Private Limited (“Falcon Digital”, “we”) processes personal data collected through falcondigital.io and in the course of providing our services. We act as a data fiduciary under India’s Digital Personal Data Protection Act 2023 (DPDP) and as a controller under the EU/UK GDPR for data collected through this website. When we process personal data on behalf of a client (for example, in a staffing, employer-of-record or engineering engagement), we act as a processor under written instructions, and the client’s privacy notice applies.
What we collect
- Enquiry data you submit through our contact form: name, work email, phone, company, country, area of interest and your message, together with the IP address and approximate location recorded at submission for security and fraud prevention.
- Candidate data if you apply for a role or are represented by us: CV, work history, qualifications, right-to-work status and references — processed under our recruitment privacy terms, which you receive before any submission to a client.
- Technical data: server logs and essential cookies needed to serve the site securely (see the Cookie Policy). We do not run advertising trackers.
Why we process it and on what basis
| Purpose | Legal basis (GDPR) | DPDP ground |
|---|---|---|
| Responding to your enquiry and following up | Legitimate interest; pre-contractual steps | Consent given when you submit the form |
| Delivering contracted services | Contract | Consent / legitimate use for contract performance |
| Security, fraud prevention, legal compliance | Legitimate interest; legal obligation | Legitimate use |
| Marketing communications | Consent (opt-in) | Consent |
Where data goes
Falcon Digital operates from India, with group offices in the United Arab Emirates and clients in Europe, the Americas, the Middle East and Asia-Pacific. Personal data from the EU or UK is transferred to India under the European Commission’s Standard Contractual Clauses (and the UK Addendum) with a transfer impact assessment. Our email service provider and hosting provider process data on our behalf under data-processing agreements.
Retention
Enquiry data is kept for 24 months from your last interaction, then deleted. Candidate data is retained for the period stated in our recruitment privacy terms. Contract data is retained for the duration of the engagement plus statutory record-keeping periods.
Your rights
Depending on where you are, you may have the right to access, correct, erase or port your data, to object to or restrict processing, to withdraw consent, to nominate a person to exercise your rights (DPDP), and to complain to a supervisory authority — the Data Protection Board of India, the ICO (UK) or your EU data-protection authority. Write to privacy@falcondigital.io [to confirm]. We respond within 30 days.
Contact
Grievance Officer / Data Protection contact: [name], Falcon Digital Private Limited, [registered address], privacy@falcondigital.io [to confirm]. EU/UK representative: [to appoint if required under Article 27].