Who we are
1. Who we are
Exfinity Infosec, a subsidiary of Matrix3D Infocom Private Ltd., Mumbai, India
Website: https://exfinityinfosec.com/
This policy applies to visitors of our website and users who contact us through forms or email.
2. What data we collect
We collect the following information when you use our website:
- Name, email address, phone number and company name when you fill in forms
- Messages, enquiries or information you submit
- Technical data, such as IP address, browser and device details
- Website usage data, such as pages visited and time spent
- Cookies and tracking data
We collect personal data when you actively submit it, when it is necessary to operate the website, or when you provide consent where required.
3. Why we collect your data
We use your data for:
- Responding to your enquiries
- Providing requested information or services
- Improving website performance and user experience
- Sending updates or newsletters only when you opt in
- Ensuring security and preventing misuse
- Meeting applicable legal and regulatory obligations
4. Legal basis for processing
We process your data based on:
- Your consent for forms, cookies and subscriptions where consent is required
- Steps necessary to respond to your request before entering into a business relationship
- Our legitimate interests in operating, improving and securing our website
- Compliance with applicable legal obligations
5. How we share your data
We may share your data with:
- Trusted service providers, such as website hosting, analytics and CRM providers
- Legal or regulatory authorities where required by law
- Authorised internal teams for responding to your requests
Third parties are expected to protect personal data and use it only for the intended purpose, subject to applicable agreements and law.
6. Data retention
We keep your data only for as long as necessary:
- Enquiry data: up to 48 months
- Marketing data: until you unsubscribe or withdraw consent
- Website logs and analytics: typically 12 months
After the applicable retention period, data is deleted or anonymised unless a longer period is required by law or for legitimate legal purposes.
7. Your rights
Subject to applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Withdraw consent at any time where processing is based on consent
- Raise a complaint about how your data is handled
We aim to respond to valid privacy requests within 15 to 30 days, subject to applicable legal requirements and verification of the request.
If your concern is not resolved, you may escalate it to the Data Protection Board of India or another applicable data protection authority in your region, where available under applicable law.
8. Cookies and tracking
We may use cookies for:
- Essential website functionality
- Analytics and performance tracking
- Marketing and advertising, where applicable
You can accept or reject non-essential cookies through available cookie controls and change your browser settings to manage cookies.
9. Data security
We implement reasonable technical and organisational safeguards, including:
- Access controls
- Secure systems and monitoring
- Regular review of security practices
No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we take reasonable measures to protect personal data.
10. International data transfers
Your data may be processed outside your country. Where applicable, we take reasonable steps to ensure appropriate safeguards are in place to protect personal data in accordance with applicable law.
11. Data breach notification
If a personal data breach affects your personal data, we will take appropriate action and provide notifications as required under applicable law.
12. Children’s privacy
- Our website is not intended for individuals below 18 years of age
- We do not knowingly collect personal data from children
- If such data is identified, we will take reasonable steps to delete it
13. Contact and Grievance Officer
For privacy-related queries, requests or complaints:
- Website: https://exfinityinfosec.com/contact/
- General email: hello@exfinityinfosec.com
Grievance Officer / Compliance Contact (India):
- Name: Rajaram Ray
- Designation: IT Security and Compliance HOD
- Email: hello@exfinityinfosec.com
- Office address: Mittal Court, 156, C-Wing, 224 Jamnalal Bajaj Marg, Nariman Point, Mumbai, Maharashtra 400021, India
14. Updates to this policy
We may update this Privacy Policy from time to time. The latest version will be made available on this website.