1. INTRODUCTION
It is the Website Privacy Policy for all the data collected/processed/stored through the website of 4X4 Advisory.

2. PURPOSE
Confidentiality and privacy of user data are of utmost priority to 4X4 Advisory, also referred to as “We” or “Us.” This Privacy Policy, also referred to as the “Privacy Statement,” has been created to demonstrate our privacy commitment to users. This privacy statement applies to the 4X4 Advisory website: https://4x4advisory.com. 4X4 Advisory’s websites are not intended for children under 18 years of age. 4X4 Advisory does not knowingly solicit data online from, or market online to, children under 18 years of age. Also, kindly confirm the action statement if any children’s data is collected.

3. NATURE AND CATEGORIES OF PERSONAL DATA BEING COLLECTED

• Website usage and similar data collected via automated means, such as cookies, IP addresses, etc.
• Job applications, CVs, and related data when you visit the Careers section.
• Contact & location information when you raise a query/request/complaint or schedule a callback.
• Business contact data when you are one of our business partners, affiliates, or third parties.

 

4. MODES OF COLLECTION OF DATA
4X4 Advisory collects personal data for the products and services availed by you. 4X4 Advisory obtains your data:

• When you contact us via one of our channels, i.e., SMS, email, call, social media, etc.
• Via cookies (please refer to the below cookie policy for more details):
  https://4X4Advisory.sharepoint.com/:b:/s/ISMSCertification/ESZcGg0forxFqz3qlJROl0cBpvZDgw2DqxA-meYWApKnnw?e=Fi6b6E
• Via service providers or third-party ad-servers appointed by us.
• Via the device you use to browse our websites.
• Via ads or online content from us and our partners.
• Via data publicly available through public and third-party platforms (such as social media), through online repositories, databases, and/or directories, or that is otherwise legitimately obtained.
  4X4 Advisory requests the data subject to provide their personal data.
  4X4 Advisory first collects the personal data of the data subject in the case where 4X4 Advisory:
  • (i) Uses the personal data of the data subject for a purpose other than the purpose for which the personal data was collected.
  • (ii) Discloses the personal data to a third party.

 

5. PURPOSES FOR WHICH THE PERSONAL DATA IS PROCESSED
4X4 Advisory uses your personal data to provide the services availed by you and to conduct business. Most commonly, 4X4 Advisory will use your personal data for the following:

• Provide and communicate with you about services offered by 4X4 Advisory, partners, affiliates, and third parties.
• Develop new products and services.
• Protect against and prevent fraud and other legal or information security risks.
• Provide connectivity and dispute resolution services as part of our services.
• Provide you with personalized services and recommendations.
• Operate, evaluate, and improve our business, including anonymization and analytics.
• Process your job application.
• Serve a legal obligation.
• Serve other purposes for which we provide specific notice at the time of collection and as otherwise authorized or required by law.
• Respond to queries and complaints received from you regarding our services and products.
• Where you have given explicit consent to do so, e.g., marketing communications, promotions, etc.

 

5.1 Change of Purpose
4X4 Advisory will only use your data for the purposes for which it was collected unless it is required to be used for another reason that is compatible with the original purpose. Please note that 4X4 Advisory may process your personal data without knowledge or consent, in compliance with the above rules, where it is required or permitted by law.

6. RIGHTS OF DATA SUBJECTS
The rights that are available to you are as follows:

• Right to confirmation
• Right to access
• Right to data portability
• Right to correct/rectify
• Right to deletion
• Right to be forgotten (Right to erasure)
• Right to lodge a complaint with the Supervisory Authority
• Right to not be subject to automated individual decision-making, including profiling
• Right to object

In addition to the above-mentioned rights, for personal data processed on the basis of consent, you also have the right to withdraw your consent and the right to be informed before personal data is disclosed for the first time to third parties or used on their behalf for the purposes of direct marketing. You can exercise your rights by submitting a request to 4X4 Advisory at info@4by4advisory.com. Upon receiving the request from you, 4X4 Advisory will conduct a verification check to validate your identity and accordingly process the request. Where any request made is refused by 4X4 Advisory, you will be provided the reasons in writing for such refusal and have the right to file a complaint with the Authority against the refusal.

7. TELEMARKETING
4X4 Advisory will adhere to the “Do Not Call” registry as maintained by the nation and opted for by the data subjects.

8. PERSONAL DATA SHARING AND DISCLOSURE
4X4 Advisory does not share personal data with anyone except as described below. 4X4 Advisory may share personal data as required or permitted by law, such as:

• With regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests.
• With our partners, regulatory authorities, and governmental agencies to detect and prevent fraud or criminal activity and to protect the rights of 4X4 Advisory or others.
• With our partners, affiliates, and third parties who perform services for us, collaborate with us, and/or help us operate our business.

 

9. DATA RETENTION
4X4 Advisory will only retain your data for as long as necessary, as per mandatory retention periods provided by applicable laws, to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.

We will destroy the personal data in a secure manner post retention period as per the organization’s retention policy and schedule.

10. REASONABLE SECURITY PRACTICES AND PROCEDURES
4X4 Advisory maintains appropriate security safeguards to protect your personal data and only retains it for a limited period of time. 4X4 Advisory is committed to protecting the data we collect. 4X4 Advisory maintains reasonable administrative, technical, and physical safeguards designed to protect the personal data you provide, or we collect, against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use.

11. KEY CONTACTS
Data Protection Officer (DPO)
For any additional queries related to the processing of personal data or reporting of an incident/breach, etc., please write to us at info@4by4advisory.com.

12. KEY DEFINITIONS

• “Data” includes a representation of information, facts, concepts, opinions, or instructions in a manner suitable for communication, interpretation, or processing by humans or by automated means.
• “Personal data” means data about or relating to a natural person who is directly or indirectly identifiable, having regard to any characteristic, trait, attribute, or any other feature of the identity of such natural person, whether online or offline, or any combination of such features with any other information, and shall include any inference drawn from such data for the purpose of profiling.
• “Data controller/fiduciary” means any person, including the State, a company, any juristic entity, or any individual, who alone or in conjunction with others determines the purpose and means of processing personal data.
• “Data subject/principal” means the natural person to whom the personal data relates.
• “Data processor” means any person, including the State, a company, any juristic entity, or any individual, who processes personal data on behalf of a data controller.
• “Processing,” in relation to personal data, means an operation or set of operations performed on personal data, and may include operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, use, alignment or combination, indexing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure, or destruction.
• “Sensitive personal data” means such personal data, which may reveal, be related to, or constitute—
  • Financial data
  • Health data
  • Official identifier
  • Sex life
  • Sexual orientation
  • Biometric data
  • Genetic data
  • Transgender status
  • Intersex status
  • Caste or tribe
  • Religious or political belief or affiliation
  • Any other data categorized as sensitive personal data under section 15 of PDPB.
• “Child” means a person who has not completed eighteen years of age.
• “Personal data breach” means any unauthorized or accidental disclosure, acquisition, sharing, use, alteration, destruction of, or loss of access to personal data that compromises the confidentiality, integrity, or availability of personal data to a data principal.

 

13. CHANGES TO THIS POLICY
The policy is subject to modification from time to time. If we make any changes to this policy, we will post those changes at the top of this page or notify you by other means such as email.

14. CONTACT US

 If you have questions, requests, or concerns regarding your privacy and rights, please let us know how we can help.