This Privacy Policy explains how Resourcera Data Lab Pvt. Ltd. (“Resourcera”, “we”, “us” or “our”) collects, uses and protects personal data when you visit resourcera.com, buy a Report, create an Account, subscribe to our newsletter or contact our team. Resourcera is the controller (called the “data fiduciary” under Indian law) of that data.
1. Information We Collect
| Source | Data | Why we use it | Legal basis (GDPR) |
|---|---|---|---|
| Account sign-up | Name, email, password (stored hashed) | Give you access to purchased Reports | Contract |
| Purchases | Name, billing address, company, tax ID, order and payment status | Process orders, issue invoices, keep tax records | Contract, legal obligation |
| “Speak to our team” and contact forms | Name, work email, phone, company, job title, industry, country, company size, budget, message | Reply to your enquiry and prepare proposals | Consent, legitimate interest |
| Newsletter | Email, subscription preferences | Send the newsletter you asked for | Consent |
| Calls with our team | Call notes and, where you agree, call recordings | Understand your requirements and train our team | Consent |
| Automatic collection | IP address, device and browser type, pages viewed, referral source, cookie identifiers | Analytics, security and advertising measurement | Consent (analytics and advertising), legitimate interest (security) |
We do not collect card numbers. Payments are handled by Stripe, which sends us only the payment status and limited card details such as the card type and last four digits. We do not knowingly collect sensitive data such as health, financial account or government ID numbers.
2. How We Use Your Information
- Provide the Service, deliver Reports and manage your Account
- Respond to enquiries, prepare proposals and deliver customisation work
- Send the newsletter and, with your consent, other marketing emails (you can unsubscribe at any time)
- Measure site traffic and improve our content
- Measure and improve our advertising on Google
- Prevent fraud, secure the Service and comply with legal obligations
3. Who We Share Data With
We do not sell your personal data for money. We share it only with service providers who process it for us under contract, and only as needed for the purposes above:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| Google (Google Analytics 4, Google Ads) | Site analytics and advertising measurement |
| HubSpot | Enquiry management (CRM) and newsletter delivery |
| CookieYes | Recording your cookie consent choices |
| Cloudflare and our hosting provider | Hosting, security and content delivery |
| Affiliate partners, such as Semrush | Tracking referrals when you click an affiliate link (see our Affiliate Disclosure) |
We may also disclose data where required by law, court order or government request, or where needed to protect the rights, property or safety of Resourcera, our users or others.
4. Business Transfers
If Resourcera Data Lab Pvt. Ltd. is involved in a merger, acquisition, investment, reorganization or sale of assets, personal data may be transferred to the new owner or investor as part of that transaction. The recipient must continue to use it in line with this Privacy Policy. We will notify you before your data becomes subject to a different privacy policy.
5. Sharing Between Our Offices
Resourcera operates from the United States and India. Staff in both locations may access personal data to answer enquiries, deliver Reports and provide support, under the same safeguards described in this policy.
6. Cookies and Tracking Technologies
We use cookies for essential site functions and, with your consent, for analytics and advertising. You can accept, reject or change your choices at any time through our cookie banner. Full details are in our Cookie Policy.
7. Call Recording
If you book a discovery call or speak with our team, we may record the call to review your requirements accurately and for training. We tell you at the start of the call before recording begins. You can ask us not to record, before or during the call, and you can ask us to delete a recording at any time by emailing [email protected]. We keep recordings for 12 months unless they are needed for an active project.
8. Data Security
We maintain an ISO/IEC 27001-certified information security management system. Data is encrypted in transit, access is limited to staff who need it, and our providers are bound by contractual security obligations. No online service is completely secure, so we cannot guarantee absolute security.
9. Data Retention
| Data | How long we keep it |
|---|---|
| Account data | While your Account is active, then deleted within 90 days of closure |
| Purchase and invoice records | As long as Indian tax and company law requires, typically 8 years |
| Enquiry and CRM data | 24 months after our last contact |
| Newsletter data | Until you unsubscribe or ask us to delete it |
| Call recordings | 12 months, unless needed for an active project |
| Analytics data | 14 months, under our Google Analytics retention settings |
10. International Data Transfers
Your data may be processed in the United States, India and other countries where our providers operate. Where we transfer data from the European Economic Area or United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful transfer mechanism.
11. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you and receive a copy
- Correct inaccurate or incomplete data
- Delete your data
- Restrict or object to certain processing, including processing based on legitimate interests
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing already carried out
- Opt out of marketing emails through the unsubscribe link in any email
12. How to Exercise Your Rights
Send requests to [email protected], call us on +1 (323) 395-2637 or write to us at the addresses in Section 18. You can also ask someone to act for you as your authorized agent or nominee, if they send written proof that you have authorized them. Before acting on a request, we verify your identity by matching the details you give against what we hold, such as the email address on your Account or enquiry. We do not charge for requests unless they are clearly unfounded or excessive.
| Region | We acknowledge within | We respond within |
|---|---|---|
| India (DPDP Act) | 48 hours | 30 days |
| EU and UK (GDPR) | 5 business days | 1 month, extendable by 2 months for complex requests |
| California (CCPA/CPRA) | 10 business days | 45 days, extendable by 45 days with notice |
If we need to extend a deadline, we will tell you why.
13. Users in the EU and UK
We process personal data under the EU General Data Protection Regulation and the UK GDPR, using the legal bases shown in Section 1. Our representative in the EU and UK is Michael Specter, who can be reached at [email protected] or at [representative’s EU/UK postal address]. You also have the right to complain to your local data protection authority.
14. Users in India
We process personal data under the Digital Personal Data Protection Act, 2023. You may request access to, correction of, or erasure of your data, withdraw consent at any time, and nominate another person to exercise these rights on your behalf.
Grievance Officer: Grievance Officer, Resourcera Data Lab Pvt. Ltd., [India registered office address], Nashik, Maharashtra 422003, India. Email: [email protected]. We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.
15. California Residents
In the last 12 months we collected identifiers, commercial information, internet activity and professional information, from the sources and for the purposes described in Sections 1 and 2.
We do not sell personal information for money. We share limited online identifiers with Google for cross-context behavioral advertising, which California law treats as “sharing”. You can opt out through the Do Not Sell or Share My Personal Information link in our footer as Privacy Policy, and we honor Global Privacy Control signals. You also have the right to know, delete and correct your data. We do not collect sensitive personal information. We will not discriminate against you for exercising any of these rights.
16. Children
The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email [email protected] and we will delete it.
17. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new version on this page with a new “Last updated” date and, for material changes, notify Account holders and newsletter subscribers by email.
18. Contact Us
Resourcera Data Lab Pvt. Ltd.
Global headquarters: 9575 Reseda Blvd, Northridge, California 91324, USA
India office: [India registered office address], Nashik, Maharashtra 422003, India
Phone: +1 (323) 395-2637
Email: [email protected]
