Introduction

Your privacy is important to us. Saksoft Limited and its group companies (“Saksoft”) are committed to respecting your privacy while using our website (www.Saksoft.com). This Saksoft Data Privacy Statement (“Saksoft Privacy Statement”) defines the requirements to ensure compliance with the applicable data privacy laws and regulations applicable to Saksoft’s collection, use, and transmission of Personal Data (the meaning of which is set out below) for information collected by us about you.

Protecting the privacy rights of data subjects and safeguarding their Personal Data is now being treated as a basic right of an individual and a legal requirement in many parts of the world. Saksoft, being a global organization, respects the privacy of data subjects and is committed to complying with the applicable data privacy laws and legislations (including but not limited to EU General Data Protection Regulation 2016/679 (the “GDPR”), the GDPR as saved into UK law (the “UK GDPR”) (references in this Saksoft Data Privacy Statement to GDPR also include UK GDPR) California Consumer Privacy Act, California Privacy Rights Act, (together, the CCPA Regulations), Data Protection Act 2018 (UK), Information Technology Act 2000 read along with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection (DPDP) Rules, 2025 (India) and Personal Data Protection Act 2012 (Singapore), the Swiss Federal Act on Data Protection 1992 and as of September 1, 2023, the Swiss Federal Act on Data Protection (FADP), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and any substantially similar provincial law, and other applicable privacy laws to the extent that they apply to Saksoft’s data processing and business operations) (the “Data Privacy Laws”).

Policy Statement

This Saksoft Data Privacy Statement is generally designed to explain and set out Saksoft’s procedures and Statements when processing Personal Data and Personal Information (the meaning of which are set out below) by the organization.

The Saksoft Data Privacy Statement comprises details about:

  • Which personal data do we collect?
  • How we collect and Use Personal Data?
  • Purpose and lawful basis of Processing?
  • Cookies and similar technologies
  • How do we Share and Disclose Data?
  • What Rights do you have?
  • How do we keep Personal Data secure?
  • How to get in touch with us regarding Data Privacy?

For each category of data subject according to the relationship shared with Saksoft. Please refer to the relevant jurisdiction for specific Data Privacy Laws for all other terms.

Scope

  • Applicability: The scope of this Saksoft Data Privacy Statement applies to Saksoft, its affiliates, business partners, employees, and Third Parties providing services to Saksoft (together “Saksoft”, “We” or “Us”). It covers Processing (including but not limited to collection, storage, usage, transmission and destruction) of Personal Data of Saksoft’s current and previous employees, prospective candidates, current, prospective and previous customers, current and previous partners/vendors, website visitors, sub-contractors and visitors, (together “you”/ “your”) by Saksoft during the course of its business activities.
  • Role: Saksoft acts as a Data Controller with respect to any Personal Data it holds about you. Saksoft is responsible for ensuring that it uses your Personal Data in compliance with the Data Privacy Laws.

Which Personal Data Do We Collect?

During our business activities, we collect specific categories of Personal Data depending on whether you are an employee, candidate, customer, partner, vendor, or website visitor. We collect the following categories of information:

  • Contact & Identity Information: Real names, aliases, postal addresses, online identifiers, IP addresses, email addresses, and account names.
  • Professional & Employment Data: Current and past job history, professional credentials, and performance evaluations.
  • Technical & Website Usage Data: Browsing history, search history, and information regarding your interaction with our website.
  • Audio & Visual Information: Video surveillance from when you visit our premises, and audio/video recordings from interviews or corporate meetings.
  • Demographic Information: Information relating to demographic or protected classifications, only where collected in accordance with applicable local laws.
  • Sensitive Personal Data: Processed only when strictly necessary and legally permitted, such as background checks or specific HR requirements.

How We Collect and Use Personal Data?

We collect your Personal Information from direct interactions (such as forms you submit), and third-party sources (such as recruitment agencies). We process this data for the following purposes:

  • Business Operations & Service Delivery: To provide our IT services, manage client/vendor relationships, and execute contractual obligations.
  • Human Resources & Recruitment: To manage employment lifecycles, process salaries, administer benefits, and conduct candidate screening.
  • Artificial Intelligence Integration: To enhance operational efficiency, we utilize AI technologies (including interview bots and internal AI-powered assistants) for pre-screening candidates, scheduling, conducting initial assessments, and internal document summarization.
  • Security & Safety: To maintain the physical security of our facilities and the cybersecurity of our IT infrastructure.
  • Digital Marketing: To send commercial communications and advertising. On our website, we use Google Analytics to understand how the website is used, and Salesforce Marketing Cloud Account Engagement (Pardot), the LinkedIn Insight Tag and ZoomInfo to measure and improve our marketing. These tools set cookies only if you allow the relevant category in our cookie banner.

Cookies and Similar Technologies

Our website uses cookies and similar technologies. Strictly necessary cookies keep the website working and secure and are always active. Performance and analytics, functional and personalization, and targeting and marketing cookies are used only with your consent, which you give or refuse through the cookie banner when you first visit our website.

You can change or withdraw your choice at any time through the “Cookie preferences” link at the bottom of every page.

When you make a choice in our cookie banner, we keep a record of it as evidence of your consent: the categories you allowed, the date and time, the page, your browser type and a pseudonymized network address. The record does not include your name. We keep it for three years.

For the full list of cookies we use, who sets them, what they are for and how long they last, please see our Cookie Policy at Cookie Policy.

How Do We Share and Disclose Data?

Saksoft does not knowingly share or sell the Personal Information of individuals younger than 16. We disclose your data for business purposes to the following categories of recipients:

  • Saksoft Group Companies: Between Saksoft Limited and its subsidiaries to centralize administration and execute global service delivery.
  • Third-Party Service Providers & AI Partners: We engage trusted third-party vendors to support our business operations, including third-party AI technologies and personnel. These third parties are carefully evaluated to ensure they adhere to our data protection standards, applicable laws, and ethical guidelines.
  • Advertising and Social Media Platforms: In the preceding twelve months or more, we have shared identifiers, internet and other electronic network activity information, and inference information with advertising partners and social media platforms for advertising and other commercial purposes.
  • Legal & Regulatory Authorities: We may disclose data where it is necessary to comply with applicable legal and/or regulatory obligations, establish, exercise or defend our legal rights, or where Processing is necessary by Us for the performance of a task mandated by governmental authorities, regulatory authorities or any other law enforcing authorities in the public interest.

Legal basis of Processing

We Process your Personal Data, Personal Information based on the following legal bases pursuant to applicable Data Protection Laws:

  • Performance of Contract: We process your Personal Data and Personal Information, where necessary in order to take steps at your request prior to entering into a contract or for the performance of a contract with you. For instance, we may process your Personal Data for employment purposes (such as processing your salary, administering benefits) or providing services to our customers which are necessary to execute the contract. If you do not provide Personal Data for processing under this legal basis, we may not be able to perform as per the respective applicable contract.
  • HR Necessity: We may process your Personal Data where necessary for human resources management implemented in accordance with the labor rules and Saksoft’s internal regulations for employees formulated according to the law or collective contracts signed according to the law.
  • Consent: Where required by law, we process your Personal Data based on your consent, for example for non-essential cookies on our website and for marketing communications. You can withdraw your consent at any time, as described in this Statement. In certain limited circumstances, even after withdrawal of your consent, we may be entitled to continue processing your Personal Data on the grounds of other legal bases and notified to you.
  • Legitimate Interests: We may process your Personal Data and Personal Information where it is necessary for the purposes of our Legitimate Business Interests as a company, including for management purposes, which are outlined above, to prevent and respond to actual or potential fraud or illegal activities, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of Personal Data, in particular where the Data Subject is under 18 years old. When “legitimate interests” are not a legal basis for processing under the applicable local law, we will rely on your consent.
  • Legal Obligations: We may process your Personal Data and Personal Information where it is necessary to comply with applicable legal and/or regulatory obligations, establish, exercise or defend our legal rights or for the purpose of legal proceedings.
  • Other “Public Interest” Grounds: We may process your Personal Data, Personal Information (or where relevant, your Sensitive Personal Data) on other public interest grounds where it is subject to regulatory requirements where Processing is necessary by Us for the performance of a task mandated by governmental authorities, regulatory authorities or any other law enforcing authorities in the public interest.

Personal Data of Individuals below 18 years

We process Personal Data or Sensitive Personal Data of any individuals below the age of 18 years only for travel, immigration purposes or when you are visiting our premises. If we are required to process Personal Data or Sensitive Personal Data of such individuals, then We shall do so by taking explicit consent from their legal guardians and from the minor if they have capacity to give consent, based on their age and maturity. If it comes to your knowledge that We have unintentionally collected or received Personal Data or Sensitive Personal Data about an individual below the age of 18 years directly from them, then please immediately notify Us in the contact details provided in this Saksoft Data Privacy Statement (“Contact Details for Complaints and Grievances” section below) and We will accordingly delete such information.

Note: We do not collect, use nor process Personal data of Individuals below 18 years on our website. If you are below the age of 18 years, then We do not want you to provide any of your Personal Data in our website.

Security of Personal Data / Personal Information / Sensitive Personal Data

In order to comply with our data security obligations under applicable Data Privacy Laws, We have adopted physical, technical, and organizational security measures to ensure the security of your data.

All employees and contractors receive mandatory privacy training and sign confidentiality agreements and Non-Disclosure Agreements on or before their joining date with Saksoft. The Office of Data Privacy and Chief Information Security Officer assess the security measures implemented to safeguard Personal Data on a regular basis.

  • Physical Security Controls: Facility Perimeter, HD access reader, Data Centre, Video surveillance.
  • IT Infrastructure Controls: Encryption, DLP, Data masking, controlled Portable ports, Access Control, Unauthorized software check, Data destruction, System Hygiene measures, Monitoring, User Access Management, Patch Management, Vulnerability Management.

We have implemented an incident and breach management procedure to ensure that exceptions in data privacy compliance are promptly reported to the Office of the Data Privacy and to the appointed Data Protection Officer.

Rights of Data Subjects

Pursuant to the GDPR, you have the following rights regarding your Personal Data:

  • The right to obtain access to your Personal Data: According to Article 15 of the GDPR, you can request a copy of your Personal Data and associated processing details.
  • Right to Rectification of Incorrect Data: The right to obtain rectification of your Personal Data if they are inaccurate or incomplete (Art. 16 GDPR).
  • Right to Erasure: The right to obtain erasure (‘right to be forgotten”) pursuant to Art. 17 GDPR where applicable.
  • Right to Restriction of Processing: The right to obtain restriction of the Processing of your Personal Data according to the conditions set out by the GDPR (Art. 18 GDPR).
  • Right to Data Portability: The right to receive your Personal Data provided to Us as a Data Controller in a structured, commonly used and machine-readable format.
  • Right to Object: The right to object to the Processing of your Personal Data on grounds relating to your particular situation, at any time, including profiling for direct marketing (Art. 21 GDPR).
  • Right to Withdraw Consent: If the Processing of your Personal Data is based on consent, you can withdraw your consent at any time (Art. 7(3) GDPR). For cookies, you can withdraw or change your consent at any time through the “Cookie preferences” link at the bottom of every page of our website. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

Rights of Individuals in India (DPDP Act, 2023)

If you are located in India, you have specific rights under the Digital Personal Data Protection Act, 2023, including the right to access information about processing, the right to correction and erasure of your personal data, the right to grievance redressal, and the right to nominate an individual to exercise your rights in the event of death or incapacity. You may exercise these rights by contacting our DPO.

Additional Provisions:

  • Under article 48 of the French Data Protection Act, data subjects also have the right to set down instructions for the management of their personal data post-mortem.
  • Data subject rights will be fulfilled based on the jurisdiction you belong to. If your jurisdiction is not covered in this Statement, you may reach out to us by contacting dataprotection@saksoft.com.
  • To exercise your rights, we require you to provide certain Personal Data for identity verification purposes. Authorized agents may also be designated where permitted by applicable laws.

California Privacy Rights

In the preceding 12 months or more, we have collected the categories of Personal Information detailed in our broader logs, including identifiers, demographic data, internet/network activity, and inferences.

California residents can opt out of the sale or sharing of their Personal Information at any time through the “Do Not Sell or Share My Personal Information” option in our cookie banner, or through “Cookie preferences”. We also treat the Global Privacy Control (GPC) signal sent by your browser as a valid request to opt out.

Subject to exceptions, CCPA Regulations grant rights to request deletion, correction of inaccurate data, data access/portability, and the right to limit the use of Sensitive Personal Information, free from discrimination.

Artificial Intelligence (AI) Usage

Saksoft leverages Artificial Intelligence (AI) technologies to enhance various operational processes, including recruitment (pre-screening, interview bots with human-in-the-loop final decision making) and internal document summarization/authentication via tools like Copilot. All AI systems operate under strict human oversight, data security, and ethical governance standards compliant with applicable laws.

Contact Details for Complaints and Grievances

If you have any questions, comments, suggestions, complaints or grievances, or if you want to exercise your privacy rights, you can contact our Data Protection Office (“DPO”):

  • Email: dataprotection@saksoft.com
  • Address: Data Privacy Office, Global Infocity Park, Block A, 2nd Floor, #40, Dr. MGR Salai, Kandanchavadi, Perungudi, Chennai 600096

We will use reasonable efforts to respond to your complaint within a reasonable time, usually within 30 days.

Statement Changes and Publication

This Statement was last updated on 1 October 2026.

This Statement may be revised and updated from time to time according to changes in your Personal Data processing. If We update this Statement, we will publish the most recent version on our website.