iLeads Auxiliary Services Pvt Ltd Privacy Policy

Last Updated on - 16 January 2026, Version - 1.7.

iLeads Auxiliary Services Private Limited ("iLeads", "Company", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us. This Privacy Policy explains how personal data is collected, used, stored, processed, protected, and deleted in accordance with applicable laws.

Legal Framework & Compliance

  • Digital Personal Data Protection (DPDP) Act, 2023 (Primary)
  • Information Technology Act, 2000
  • IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules,2011
  • ISO 27001:2022 and ISO 27701:2019 frameworks

iLeads acts as a Data Fiduciary under the DPDP Act and processes personal data lawfully, fairly, and only for legitimate, specified purposes.

Definitions

TermDefinition
Data PrincipalThe individual to whom personal data relates
Data FiduciaryEntity that determines the purpose and means of processing (iLeads)
Data ProcessorEntity processing data on behalf of Data Fiduciary
Personal DataAny data about an individual who is identifiable
ConsentFree, specific, informed, unconditional, and unambiguous agreement

Role of iLeads

iLeads acts as:

  • Data Fiduciary: For personal data collected through website, recruitment, and internal operations
  • Data Processor: When processing personal data on behalf of clients under contractual instructions

All processing activities are performed strictly within India.

Categories of Personal Data Collected

Business and Contact Information

  • Name, email address, phone number
  • Company name and job title
  • Business correspondence

Client Data

  • Customer names and contact details
  • Inquiry and transaction information
  • Identity or verification data (as instructed by clients)

Website and Technical Data

  • IP address, browser and device information
  • Log files, cookie and usage data

Recruitment and Employment Data

  • Resume, qualification, and employment history
  • Contact and identity information

Lawful Basis for Processing

Personal data is processed only when one of the following bases applies:

Lawful BasisDescription
ConsentFree, specific, informed consent obtained before processing
Contractual necessityProcessing necessary for contract performance
Legal obligationProcessing required by Indian law
Legitimate useSpecified legitimate purposes under DPDP Act (employment, emergency, etc.)

Consent Management

Consent Requirements

Where consent is the lawful basis, iLeads ensures consent is:

  • Free: Not conditional on unrelated services
  • Specific: Clearly defined and limited in scope
  • Informed: Provided with clear information about the processing
  • Unconditional: Not tied to other terms or conditions
  • Unambiguous: Clearly expressed and understood

Consent Notice Contents

Before obtaining consent, Data Principals are informed of:

  • Personal data to be collected
  • Purpose of processing
  • How to withdraw consent
  • How to file grievances

Consent Withdrawal

Data Principals may withdraw consent at any time via:

Withdrawal is effective within 7 days. Withdrawal does not affect lawfulness of prior processing.

Purpose of Processing

Personal data is processed for the following purposes:

  • Providing BPO, KPO, IT-enabled, and lead management services
  • Client onboarding, communication, and support
  • Fulfilling contractual obligations
  • Recruitment and workforce management
  • Compliance with legal and regulatory requirements
  • Security monitoring and fraud prevention
  • Website operations and improvements

We do not process personal data for purposes incompatible with the original purpose without fresh consent.

Data Sharing and Disclosure

Categories of Recipients

Personal data may be shared only with:

  • Authorized iLeads employees and contractors (need-to-know basis)
  • Domestic IT and infrastructure service providers
  • Clients, strictly as part of contracted service delivery
  • Government authorities, courts, or regulators when legally required

Third-Party Controls

All third parties must:

  • Sign data processing agreements with equivalent security obligations
  • Process data only on documented instructions
  • Implement appropriate technical and organizational measures
  • Return or delete data upon engagement completion
  • Submit to audits upon request
  • Report breaches within 24 hours

Data Localization

iLeads processes and stores ALL personal data within India only. No personal data is transferred or accessed from outside India.

Data Sharing and Disclosure

Retention Principles

Personal data is retained only as long as necessary for:

  • Fulfilling the specified purpose
  • Contractual obligations
  • Legal and regulatory compliance

Retention Schedule

Data CategoryRetention Period
Client service dataContract duration + 90 days
Marketing/consent dataUntil consent withdrawn + 30 days
Employment recordsEmployment + 7 years
Financial/tax records7 years (statutory)
Security logs180 days
Failed recruitment applications12 months

After the retention period, data is securely deleted or anonymized per the Data Deletion Policy.

Rights of Data Principals

RightDescription
Right to AccessObtain summary of personal data being processed and processing activities
Right to CorrectionRequest correction of inaccurate or incomplete personal data Right to
Right to ErasureRequest deletion of personal data when it is no longer necessary for processing
Right to Withdraw ConsentWithdraw consent for processing of personal data
Right to Grievance RedressalFile complaint with iLeads and escalate to Data Protection Board if unresolved
Right to NominateNominate an individual to exercise rights in case of death/incapacity

Grievance Handling

Internal Grievance Mechanism

Data Principals may file grievances regarding processing of their personal data:

Response Timeline

All third parties must:

  • Acknowledgment: Within 48 hours
  • Resolution: Within 30 days
  • If extension needed: Notification with reasons within 30 days

Escalation

If the grievance is not resolved satisfactorily, Data Principals may escalate to the Data Protection Board of India as established under the DPDP Act.

Data Breach Notification

In the event of a personal data breach:

  • iLeads will notify the Data Protection Board as required by law
  • Affected Data Principals will be notified where required
  • Notification will include nature of breach, data affected, and remediation steps
  • All breaches are logged in the Breach Register

Contact Information

For privacy-related queries, requests, or grievances:

Policy Updates

This policy may be updated periodically. Material changes will be communicated via website and, where required, direct notification to affected Data Principals.

iLeads

iLeads stands out as a rapidly expanding provider of Business Process Management (BPM) Services within the country.

Transform Your Business with Our Customer-Centric Services
Fill out the form below to get started.
ileads head office

iLeads head office started in Dehradun, Uttarakhand in March 2010 as proprietary ownership and became private limited in March 2018, it eventually spread across India at various locations. It quickly emerged as a dynamic hub of operations and excellence. Over a period of time, the center has expanded to handle 15+ processes across diverse functions, supported by a strong and growing workforce of 1250+ employees. With a focus on performance, innovation, and client satisfaction, Ileads Dehradun continues to strengthen its presence as a key contributor to the organization’s overall growth story.