1
Who We Are
Ebyte Infotech is an international technology consulting company
providing services including:
- IT Consulting
- Software Development
- Web & Mobile Application Development
- Cloud & Digital Transformation
- Recruitment & Staffing
-
Resource Outsourcing under Statements of Work (SOW)
- Managed Technology Services
Depending on the services provided, Ebyte Infotech may act either
as a Data Controller or a Data Processor under applicable data
protection laws.
2
Information We Collect
Depending upon your relationship with us, we may collect the following
categories of personal information.
Candidates
- Name
- Contact details
- CV / Resume
- Employment history
- Qualifications
- Skills
- References
- Right-to-work documentation
- Interview notes
- Salary expectations
-
Background verification information where legally
permitted
Employees & Contractors
- Personal details
- Contact information
- Payroll information
- Tax identifiers
- Bank account details
- Emergency contact information
- Employment records
- Performance and training records
Clients & Business Contacts
- Business contact details
- Company information
- Job title
- Email address
- Telephone number
- Contract information
- Billing details
- Communication records
Suppliers & Vendors
- Contact information
- Banking details
- Tax information
- Contract details
Website Users
When you visit our website we may collect:
- IP address
- Browser type
- Device information
- Website usage data
- Cookies
- Analytics information
-
Marketing preferences where consent has been provided
Special Category Data
Where required by law or necessary for recruitment or
employment purposes, we may process limited special category
personal data such as health information, disability
information, diversity data, or criminal background
information where legally permitted.
3
How We Collect Information
We may collect personal information:
- Directly from you
- Through our website
- During recruitment processes
- During contract negotiations
- Through client engagements
- From publicly available professional sources
- Recruitment platforms
- Professional networking websites
- References
- Cookies and analytics technologies
4
Why We Process Personal Data
We process personal information for legitimate business purposes
including:
- Delivering IT consulting services
- Software development
- Recruitment and staffing
- Resource outsourcing
- Project delivery
- Client relationship management
- Contract administration
- Payroll processing
- Supplier management
- Customer support
- Compliance with legal obligations
- Security monitoring
- Fraud prevention
- Business continuity
- Internal reporting
- Improving our services
- Marketing communications where permitted
5
Lawful Basis for Processing
Where required by GDPR, we process personal data under one or more
of the following lawful bases:
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
- Consent
- Protection of vital interests
- Public interest where applicable
Where consent is required, you may withdraw your consent at any time
without affecting the lawfulness of processing carried out before
withdrawal.
6
Sharing Personal Information
We may share your information with:
- Clients
- Business partners
- Recruitment partners
- Payroll providers
- Cloud service providers
- IT support providers
- Professional advisers
- Auditors
- Financial institutions
- Government authorities
-
Courts and law enforcement agencies where legally required
We require all third parties processing personal information on our
behalf to maintain appropriate confidentiality and security standards.
We do not sell your personal information.
7
International Transfers
As a global organization, Ebyte Infotech may transfer personal
information between countries where we operate or where our trusted
service providers are located.
Where personal information is transferred outside the United Kingdom
or European Economic Area, appropriate safeguards will be implemented
including, where applicable:
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreement (IDTA)
- UK Addendum to the EU SCCs
-
Transfers to countries recognized as providing adequate
protection
-
Other lawful transfer mechanisms permitted under applicable
legislation
8
Data Security
Ebyte Infotech maintains appropriate technical and organizational
measures designed to protect personal information from accidental
or unlawful destruction, loss, alteration, unauthorized disclosure,
or access.
Security measures may include:
- Encryption
- Secure cloud infrastructure
- Access controls
- Multi-factor authentication
- Network monitoring
- Security awareness training
- Regular vulnerability assessments
- Secure backup procedures
Although we use commercially reasonable safeguards, no method of
transmission over the Internet or electronic storage is completely
secure.
9
Data Retention
We retain personal information only for as long as necessary to:
- Provide our services
- Fulfil contractual obligations
- Comply with legal requirements
- Resolve disputes
- Protect our legitimate interests
When personal information is no longer required, it is securely
deleted, anonymized, or destroyed in accordance with our internal
retention procedures.
10
Cookies
Our website uses cookies and similar technologies to:
- Operate the website
- Improve functionality
- Remember user preferences
- Analyze website traffic
- Enhance user experience
Where required by law, we obtain your consent before placing
non-essential cookies on your device.
Please refer to our separate Cookies Policy for further information.
11
Marketing Communications
Where permitted by law or where you have provided consent, we may
send information regarding our services, events, newsletters, and
industry updates.
You may opt out of marketing communications at any time by using
the unsubscribe link contained in our emails or by contacting us
directly.
12
Your Privacy Rights
Subject to applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your data
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
- Object to direct marketing
-
Request review of automated decisions where applicable
-
Lodge a complaint with the relevant supervisory authority
We will respond to requests within the timeframes required by
applicable law.
13
Children's Privacy
Our services are intended for businesses and professionals.
We do not knowingly collect personal information from individuals
under the age of 16 without appropriate parental or legal guardian
consent where required by law.
14
Third-Party Websites
Our website may contain links to third-party websites. We are not
responsible for the privacy practices or content of those websites.
Users should review the privacy policies of third-party websites
before providing personal information.
15
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in legislation
- Regulatory guidance
- Business operations
- Technology
- Industry best practices
The latest version will always be published on our website together
with the effective date.
16
Contact Us
If you have any questions regarding this Privacy Policy or wish to
exercise your data protection rights, please contact:
Where applicable, individuals located in the United Kingdom may also
lodge complaints with the Information Commissioner's Office (ICO).
Individuals in the European Union may contact the competent
supervisory authority in their country of residence.
By using our website or engaging with our services, you acknowledge
that you have read and understood this Privacy Policy.