PRIVACY POLICY
Last Updated: 05 October 2026
Version: 1.1
Quick Privacy Summary
CyberXpertz respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains what personal data we may collect when you visit our website, submit an enquiry, use our services, or communicate with us, why we use that information, how long we retain it, and the rights available to you.
What information may we collect?
Depending on how you interact with our website and services, we may collect information such as:
- Name
- Email address
- Mobile/telephone number
- Organisation or company information
- Professional information provided by you
- Information submitted through enquiry or service forms
- Website usage and technical information
- IP address and device/browser information
- Cookie and similar technology information
- Information contained in communications you send to us
Why do we use your information?
We may use personal data to:
- Respond to enquiries and requests
- Provide requested services
- Communicate with customers and users
- Provide customer support
- Process service requests
- Maintain website and service security
- Detect and prevent fraudulent or unauthorised activity
- Improve our website and services
- Comply with applicable legal and regulatory requirements
- Handle privacy requests and grievances
- Carry out other purposes that are communicated to you when your personal data is collected
Your privacy choices
Where consent is required, you can make or withdraw your consent as applicable. You may also have rights relating to access/information, correction and updating, erasure, grievance redressal, withdrawal of consent and nomination, subject to applicable law.
For privacy requests or complaints, contact our designated Grievance Officer using the details provided below.
1. About This Privacy Policy
This Privacy Policy explains how CyberXpertz collects, uses, stores, protects and manages personal data in connection with our website and services.
This policy is intended to provide clear and understandable information about our processing of personal data.
2. Personal Data We May Collect
Depending on your interaction with CyberXpertz, we may collect the following categories of personal data:
2.1 Contact Information
- Full name
- Email address
- Mobile number
- Telephone number
- Contact details provided through forms or communications
2.2 Organisation Information
Where provided by you:
- Organisation/company name
- Business contact information
- Organisation-related information
2.3 Professional Information
Where relevant to the service or enquiry:
- Job title/designation
- Professional information
- Information voluntarily provided in relation to your organisation or service requirements
2.4 Enquiry and Service Information
Information that you provide when:
- Submitting an enquiry
- Requesting a service
- Contacting our team
- Requesting support
- Communicating with us regarding our services
2.5 Technical Information
We may collect technical information associated with your use of our website, which may include:
- IP address
- Browser type
- Device type
- Operating system
- Website access information
- Log and diagnostic information
2.6 Cookies and Similar Technologies
We may use cookies and similar technologies for website functionality, preferences, security, analytics or other purposes.
Where required, non-essential cookies or similar technologies will be subject to the applicable consent mechanism.
3. Purposes for Processing Personal Data
We process personal data only for specified purposes relevant to our website, services and business activities.
These purposes may include:
- Responding to enquiries submitted through our website or other communication channels.
- Providing requested services to customers and users.
- Processing service requests and communicating with users about those requests.
- Customer communication and support, including responding to questions, requests and support issues.
- Maintaining business relationships with customers, clients and organisations.
- Website operation and security, including monitoring and protecting our systems against unauthorised activity.
- Fraud and abuse prevention, where necessary to protect our website, users and services.
- Website and service improvement, including understanding how our website and services are used.
- Analytics, where applicable and where the required consent has been obtained.
- Marketing and promotional communication, where applicable and where the required consent has been obtained.
- Legal and regulatory compliance, where processing is required by applicable law.
- Handling privacy requests and grievances, including responding to requests relating to personal data and privacy rights.
- Maintaining business and compliance records, where necessary for legitimate business or legal purposes.
The specific purpose applicable to a particular collection of personal data will be communicated to you where required.
4. How We Collect Personal Data
We may collect personal data when you:
- Visit or use our website
- Submit a contact or enquiry form
- Request information about our services
- Request or use our services
- Communicate with our team
- Contact us for support
- Provide information voluntarily through other communication channels
We do not intend to collect personal data that is unnecessary for the stated purpose.
5. Cookies and Consent
Our website may use cookies and similar technologies.
Some cookies may be necessary for the operation and security of the website. Other cookies or technologies may be used for purposes such as analytics or other optional functionality.
Where required, you will be provided with appropriate choices through our consent mechanism.
You can manage your consent choices through the consent controls provided on our website.
5A. How to Exercise Data Protection Rights
CyberXpertz provides a mechanism through which Data Principals may submit requests concerning their applicable data protection rights.
Requests may include:
- Access to personal data and related information
- Correction, completion or updating of personal data
- Erasure of personal data, where applicable
- Withdrawal of consent, where processing is based on consent
- Grievance redressal
- Nomination of another individual to exercise applicable rights in accordance with applicable law
Requests may be submitted through the Data Rights Request mechanism available on this website or by contacting our Grievance Officer at grievance@bcbuzz.io.
We may request reasonable information to verify the identity of the requester and prevent unauthorised access, disclosure, correction or deletion of personal data.
6. Sharing of Personal Data
We do not sell personal data.
Personal data may be disclosed where necessary to:
- Provide requested services
- Operate and maintain our website
- Provide technical or operational support
- Comply with applicable legal obligations
- Protect the security and rights of our users, organisation or systems
- Respond to lawful requests from competent authorities
Any sharing or disclosure will be limited to what is necessary for the applicable purpose.
Note: The audit report recorded that no active third-party personal-data sharing requiring additional disclosure was detected during its scan. This was a scan-time finding and should not be treated as a permanent statement if your actual data flows change.
7. Cross-Border Transfer of Personal Data
At the time of the audit scan, no outbound cross-border personal-data flows were detected on the website.
Where personal data is transferred or processed outside India in the future, such processing will be handled in accordance with applicable requirements and restrictions.
8. Data Retention
We retain personal data only for as long as it is necessary for the purpose for which it was collected, unless a longer period is required or permitted by applicable law.
Retention periods
| Type of information | Retention period |
|---|---|
| Enquiry/contact information | Until the enquiry is resolved and for a reasonable period thereafter, where required for follow-up or record-keeping. |
| Customer/service records | For as long as necessary to provide the requested services and to meet applicable legal, accounting, or business requirements. |
| Communication/support records | For as long as necessary to resolve the request, maintain service records, and address disputes or complaints. |
| Technical/security logs | For a limited period necessary for security monitoring, troubleshooting, fraud prevention, and incident investigation. |
| Consent records | For as long as necessary to demonstrate and manage consent, including any period required to establish, exercise, or defend legal claims. |
| Other personal data | Until the applicable purpose is fulfilled or the data is no longer required, subject to applicable legal or regulatory retention requirements. |
When the applicable retention period expires, personal data will be deleted, anonymised or otherwise disposed of in accordance with applicable requirements.
The organisation should maintain an internal retention schedule identifying the retention trigger for each category of personal data. No generic period such as “36 months” should be stated unless it has been approved and reflects the organisation’s actual processing and legal requirements.
Where applicable DPDP Rules require retention of personal data and processing logs for a specified period, those requirements will be followed. Retention does not prevent deletion of data that is no longer required once the applicable legal or permitted retention requirement ends.
9. Your Data Protection Rights
Subject to applicable law, you may exercise the rights available to you under the Digital Personal Data Protection Act, 2023 and applicable rules.
9.1 Right to Access / Information
You may request confirmation about whether we process your personal data.
Where applicable, you may also request information about:
- The personal data we process about you;
- The purposes for which your personal data is processed;
- The processing activities relating to your personal data; and
- The Data Fiduciaries or Data Processors with whom your personal data has been shared, where applicable.
We will provide the information required under applicable law after completing reasonable verification of your identity.
9.2 Right to Correction, Completion and Updating
You may request that we:
- Correct inaccurate or misleading personal data;
- Complete incomplete personal data; or
- Update personal data that is no longer accurate or current.
We will review and action valid requests in accordance with applicable law.
9.3 Right to Erasure
You may request erasure of your personal data where applicable under the Digital Personal Data Protection Act, 2023 and applicable rules.
Upon receiving an erasure request, we will assess the request and erase the personal data where required, unless retention is necessary for the specified purpose or required or permitted under applicable law.
Where personal data must be retained for legal, security, accounting, dispute-resolution or other permitted purposes, we will retain only the information necessary for that purpose and will delete or anonymise it when the applicable retention requirement ends.
The grievance-response period does not mean that your personal data will automatically be retained for that period.
9.4 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent using the same or a comparable channel through which consent was provided, or by contacting us using the privacy/grievance contact details provided in this Policy.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and it does not require us to erase data that we are required or permitted to retain for another lawful purpose.
9.5 Right to Grievance Redressal
You have the right to raise a grievance regarding:
- The processing of your personal data
- The exercise of your data protection rights
- Any concern regarding our compliance with applicable data protection requirements
- Any other privacy-related matter concerning your personal data.
You may submit your grievance using the contact details provided in the Grievance Redressal section of this Privacy Policy.
We will acknowledge, review and respond to your grievance within the applicable period prescribed under the DPDP Act and Rules.
Under Rule 14 of the DPDP Rules, 2025, the grievance redressal mechanism must provide for a response period not exceeding 90 days.
If you are not satisfied with our response or your grievance remains unresolved, you may have the right to approach the Data Protection Board of India, subject to the applicable law and procedures.
9.6 Right to Nominate
You may nominate another individual to exercise your data protection rights on your behalf in the event of your death or incapacity, in accordance with applicable law and the procedures we provide.
The nominee may be required to provide appropriate information or documentation to establish their identity and authority to act on your behalf.
9.7 How to Exercise Your Data Protection Rights
You may exercise your applicable data protection rights by submitting a Data Rights Request to CyberXpertz.
You may request:
- Access to information about your personal data
- Correction of inaccurate personal data
- Completion of incomplete personal data
- Updating of personal data
- Erasure of personal data, where applicable
- Withdrawal of consent, where processing is based on consent
- Grievance redressal
- Exercise of nomination rights, where applicable
How to submit a request
You may submit your request through our designated privacy/data-rights request mechanism or by contacting our Grievance Officer:
Email: grievance@bcbuzz.io
Phone: 9600327111
Your request should include:
- Full name
- Email address or other contact information associated with your interaction with CyberXpertz
- Type of data-rights request
- Description of the request
- Relevant enquiry, service or reference number, if available
- Information reasonably necessary for identity verification
We may request reasonable information to verify your identity before providing, correcting, deleting or otherwise acting on personal data.
After receiving your request, we will review and process it in accordance with the Digital Personal Data Protection Act, 2023, the applicable DPDP Rules and other applicable laws.
10. Withdrawal of Consent
Where we process personal data based on your consent, you may withdraw your consent by contacting us using the details provided in this Privacy Policy or through the consent-management controls available on the website, where applicable.
Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
11. Grievance Redressal
If you have a question, concern or complaint regarding the processing of your personal data, you may contact our designated Grievance Officer.
Grievance Officer: MAHARAJ MANOHARAN
Designation: Data Protection Officer (DPO)
Email: grievance@bcbuzz.io
Phone: 9600327111
Address: 21/2, 1st Floor, Opp. to HITACHI Money Spot Chettipalayam Road Eachanari, Coimbatore – 641021
We will review and respond to grievances in accordance with applicable requirements.
The audit identified the absence of a named Grievance Officer and dedicated contact email as a specific finding.
12. Escalation of Unresolved Grievances
If you are not satisfied with the response to your privacy grievance, you may have the right to escalate the matter to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023 and applicable rules and procedures.
Information about the Board’s current complaint process and official submission mechanism should be obtained from the Board’s official channels. We will not provide an unofficial email address for the Board.
13. Data Security
We take reasonable security measures to protect personal data against unauthorised access, disclosure, alteration, loss or misuse.
Security measures may include appropriate technical and organisational safeguards.
However, no method of transmission or storage can be guaranteed to be completely secure.
14. Children’s Data
Our website is not specifically directed at children.
We do not knowingly seek to collect personal data from children where such collection is not permitted under applicable law.
If you believe that personal data relating to a child has been provided to us improperly, please contact our Grievance Officer.
15. Third-Party Websites
Our website may contain links to third-party websites or services.
When you visit a third-party website, its own privacy policy and terms may apply. We are not responsible for the privacy practices of third-party websites that we do not control.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, data-processing practices, technology, or applicable legal requirements.
When we update this policy, we will display the updated “Last Updated” date and, where appropriate, update the version number.
Current version
Version: 1.1
Last Updated: 05 October 2026
The audit specifically found that the previous policy did not display a visible update date or version identifier.
17. Contact Us
For questions about this Privacy Policy or our privacy practices:
CyberXpertz
Email: grievance@bcbuzz.io
Phone: 9600327111
Address: 21/2, 1st Floor, Opp. to HITACHI Money Spot Chettipalayam Road Eachanari, Coimbatore – 641021
18. Privacy Policy Availability
This Privacy Policy should remain easily accessible from the website, including from relevant pages and personal-data collection points.
The audit found the collection-point Privacy Notice link requirement was satisfied, while the earlier footer Privacy Policy link was reported as pointing to an unreachable page.
Who we are
Suggested text: Our website address is: https://cyberxpertz.org.
Comments
Suggested text: When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Cookies
Last Updated: 5 October 2026
CyberXpertZ uses cookies and similar technologies to improve the functionality, security, performance, and user experience of our website. Cookies are small text files stored on your device when you visit a website.
1. What Are Cookies?
Cookies help us remember your preferences, understand how visitors use our website, maintain website functionality, and improve our services. Some cookies may be placed by third-party services that appear on our website.
2. Types of Cookies We Use
Essential Cookies
These cookies are necessary for the website to function properly. They may support essential features such as security, page navigation, session management, and website preferences. These cookies cannot generally be disabled through our cookie consent mechanism because the website may not function properly without them.
Functional Cookies
These cookies allow the website to remember choices you make, such as language, preferences, or other settings, to provide a more personalized experience.
Analytics and Performance Cookies
Where enabled, these cookies help us understand how visitors interact with our website, such as which pages are visited, how visitors navigate the website, and whether any technical issues occur. This information is used to improve website performance and user experience.
Marketing or Third-Party Cookies
If marketing, advertising, social media, embedded media, or other third-party services are used on the website, those services may place cookies or similar technologies on your device. Such cookies will be used only in accordance with applicable requirements and, where required, after obtaining your consent.
3. Cookie Consent
Where required by applicable law, non-essential cookies will be activated only after you provide your consent through our cookie consent banner.
You may accept, reject, or manage non-essential cookies through the cookie consent options provided on our website.
You can change or withdraw your cookie preferences at any time through the available cookie settings mechanism.
4. How Long Cookies Are Stored
The retention period of cookies depends on their purpose. Some cookies are session cookies, which are deleted when you close your browser. Other cookies may remain on your device for a specified period or until you delete them.
We retain cookies only for as long as reasonably necessary for their intended purpose, subject to applicable legal and regulatory requirements.
5. Third-Party Cookies
Our website may use third-party services such as analytics, security, embedded content, communication tools, or other website functionality. These third parties may use cookies or similar technologies in accordance with their own privacy policies.
We recommend reviewing the privacy and cookie policies of third-party services used on our website for further information.
6. Managing or Disabling Cookies
You can control or delete cookies through your browser settings. You can also manage non-essential cookies through the cookie consent options provided on our website.
Please note that disabling certain cookies may affect the functionality or performance of some parts of the website.
7. Personal Data and Cookies
Some cookies or similar technologies may collect information that could be associated with an individual or device. Where cookie-related information constitutes personal data, we process it in accordance with our Privacy Policy and applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), where applicable.
8. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our website, technology, cookies used, legal requirements, or our data-processing practices.
Any changes will be published on this page with an updated “Last Updated” date.
9. Contact Us
If you have questions about our use of cookies or wish to exercise applicable privacy or data-protection rights, please contact us using the contact details provided in our Privacy Policy.
Embedded content from other websites
Suggested text: Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Who we share your data with
Suggested text: If you request a password reset, your IP address will be included in the reset email.
How long we retain your data
Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where your data is sent
Suggested text: Visitor comments may be checked through an automated spam detection service.