Who this policy applies to
This Privacy Policy applies to personal information handled through the Xlantic Solutions website, contact forms, communications, public tools, assessments, research resources, and related digital experiences that link to this policy.
In this policy, “personal information” or “personal data” means information that identifies, relates to, describes, or can reasonably be linked with an individual, depending on the law that applies.
Xlantic Solutions acts as the organization responsible for deciding why and how personal information is processed through this website unless a separate agreement states otherwise.
Information you provide and information generated through use
Information you provide directly
- Name, organization, job-related details, and contact information.
- Information submitted through contact forms, emails, WhatsApp, or meeting requests.
- Details about a business, technology, marketing, data, automation, or digital-platform challenge.
- Responses submitted through assessments, diagnostic tools, surveys, or research activities.
- Files, comments, or other information you choose to share.
Information collected automatically
- IP address, browser type, device type, operating system, language, and approximate location derived from technical data.
- Pages visited, referral source, date and time, interactions, and diagnostic logs.
- Cookie identifiers and similar information where cookies or analytics tools are enabled.
Information Xlantic Solutions asks you not to send initially
Please do not submit passwords, payment-card details, government identification numbers, health information, confidential client data, proprietary datasets, or other sensitive information through a general enquiry form unless Xlantic Solutions has specifically requested it through an appropriate secure channel.
Sources of personal information
Personal information may be collected:
- directly from you;
- through your use of the website, tools, or assessments;
- from an organization you represent;
- from service providers that support website hosting, communications, analytics, scheduling, or security;
- from publicly available professional or business sources where permitted by law.
Purposes of processing
Xlantic Solutions may use personal information to:
- respond to enquiries and understand the challenge you are trying to solve;
- communicate about services, tools, assessments, research, meetings, or potential engagements;
- operate, maintain, secure, test, and improve the website and digital tools;
- generate assessment results, summaries, recommendations, or reports requested by the user;
- understand website performance and how content is used;
- manage professional relationships, proposals, contracts, invoices, and service delivery;
- protect against misuse, spam, fraud, security threats, and unlawful activity;
- comply with legal, regulatory, tax, accounting, or dispute-resolution obligations;
- send updates or insights where you have requested them or where permitted by law, with the ability to opt out.
Xlantic Solutions does not use personal information to make solely automated decisions that produce legal or similarly significant effects unless this is clearly explained before processing and permitted by applicable law.
Why processing is lawful
Where the GDPR, UK GDPR, or a similar law requires a legal basis, Xlantic Solutions may rely on:
- Consent: where you choose to submit information, accept optional cookies, subscribe, or agree to a specific use.
- Contract: where processing is needed to respond to a requested service, take steps before entering an agreement, or perform an agreement.
- Legitimate interests: to operate and improve the website, secure systems, understand enquiries, maintain professional relationships, and develop relevant services, provided those interests are not overridden by your rights.
- Legal obligation: where information must be retained or disclosed to comply with law.
- Vital interests or public-interest grounds: only in the limited situations where such grounds lawfully apply.
Where consent is the basis, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Processing across borders
Xlantic Solutions may use service providers or systems located in India, Canada, the United States, the European Economic Area, or other jurisdictions. As a result, personal information may be processed outside the country where it was collected.
Where required, Xlantic Solutions will use lawful transfer mechanisms and appropriate safeguards, which may include contractual protections, adequacy decisions, standard contractual clauses, or equivalent measures recognized by applicable law.
Information processed in another country may be subject to that country’s lawful access requirements.
How long information is kept
Xlantic Solutions retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to an enquiry, provide a service, maintain business and tax records, resolve disputes, enforce agreements, and meet legal obligations.
Retention periods may be extended where information is required for an active dispute, legal hold, security investigation, or statutory obligation.
Safeguarding information
Xlantic Solutions uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information and the risks involved. These may include access controls, secure hosting, encryption in transit, backups, software updates, restricted permissions, confidentiality obligations, and incident-response procedures.
No website, transmission method, or storage system can be guaranteed to be completely secure. Individuals should use appropriate care when deciding what information to submit online.
Where required by applicable law, Xlantic Solutions will assess personal-data incidents and notify affected individuals or regulators when the legal notification threshold is met.
Your choices and requests
Depending on your location and the law that applies, you may have the right to:
- request access to personal information;
- request correction of inaccurate or incomplete information;
- request deletion or erasure;
- request restriction of processing;
- object to certain processing, including direct marketing;
- withdraw consent;
- receive certain information in a portable format;
- request information about categories, sources, purposes, recipients, or disclosures;
- opt out of the sale or sharing of personal information where that right applies;
- limit certain uses of sensitive personal information where applicable;
- receive equal service and not be discriminated against for exercising privacy rights;
- complain to an appropriate privacy or data-protection authority.
To make a request, email catchme@xlanticsolutions.com with the subject line Privacy Request. Xlantic Solutions may need to verify your identity and authority before completing the request. Only information reasonably necessary for verification will be requested.
Authorized agents may submit requests where permitted by law, subject to appropriate proof of authorization and identity verification.
Additional information for certain jurisdictions
Canada: PIPEDA
Where the Personal Information Protection and Electronic Documents Act applies, Xlantic Solutions follows principles of accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance.
Individuals may request access to and correction of personal information and may raise a concern with Xlantic Solutions. If a concern is not resolved, eligible individuals may contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy authority.
European Economic Area and United Kingdom: GDPR rights
Individuals in the European Economic Area or United Kingdom may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a supervisory authority. Where legitimate interests are relied upon, further information about the balancing of those interests may be requested.
If Xlantic Solutions is required to appoint an EU or UK representative or data-protection officer due to the nature or scale of future processing, the relevant details will be published here.
California: CCPA/CPRA notice
This section applies only if and to the extent Xlantic Solutions is a “business” subject to the California Consumer Privacy Act, as amended.
During the preceding 12 months, Xlantic Solutions may have collected the following categories through the website: identifiers; customer-record information; internet or electronic-network activity; professional or employment-related information; commercial information connected with an enquiry or engagement; approximate geolocation derived from technical data; and inferences drawn from submitted assessment information.
These categories are used for the business purposes described in this policy and may be disclosed to service providers or contractors supporting those purposes. Xlantic Solutions does not knowingly sell personal information for monetary consideration. Xlantic Solutions also does not knowingly sell or share the personal information of individuals under 16.
If Xlantic Solutions later engages in activity treated as a “sale” or “sharing” under California law, an appropriate opt-out mechanism and notice will be provided.
India: Digital Personal Data Protection framework
Where India’s Digital Personal Data Protection Act, 2023 and applicable rules are in force and apply to the processing, Xlantic Solutions will process digital personal data for lawful purposes, provide required notices, use consent or another permitted ground, apply reasonable safeguards, support applicable data-principal rights, and maintain a grievance channel.
Services are intended for professional and business audiences
The general website and enquiry services are not directed to children. Xlantic Solutions does not knowingly collect personal information from children through the general contact experience.
If a specific educational, research, or assessment experience is designed for minors, a separate notice and appropriate consent or authorization process should be provided before collection.
External services
The website may link to social-media platforms, WhatsApp, scheduling services, partner sites, or other third-party services. Their privacy practices are governed by their own policies. Xlantic Solutions is not responsible for how independent third parties handle information after you leave this website.
Policy updates
Xlantic Solutions may update this Privacy Policy to reflect changes in the website, tools, service providers, legal requirements, or business practices. The updated version will be posted on this page with a revised “Last updated” date.
Where a change materially affects how personal information is used, additional notice or consent will be provided where required.
Privacy questions, requests, and concerns
Email: catchme@xlanticsolutions.com
Please use the subject line Privacy Request or Privacy Concern and include enough information for Xlantic Solutions to understand and respond to the request.
2850, Block C, Aerocity
SAS Nagar, Punjab
India – 140306