Skip to content
ATLAS
// legal · last updated 1 July 2026

Privacy Policy

This Privacy Policy explains how Atlas (“Atlas”, “we”, “us”, “our”), based in Mumbai, Maharashtra, collects, uses, stores, and protects the personal data of visitors to our website atlashq.in (the “Website”). It is published in accordance with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Information Technology Act, 2000, and, to the extent applicable, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”).

Scope — this Website only

This Policy governs only your use of the Website. Personal data processed by the Urbantrace platform on behalf of our client organisations (such as resident welfare associations, campuses, malls, and other premises operators) is not governed by this Policy. In respect of the Urbantrace platform, Atlas acts as a Data Processor and the client organisation acts as the Data Fiduciary; that processing is governed exclusively by the Data Processing Agreement between Atlas and the relevant client.

1. Data we collect

We collect the following categories of personal data:

  • Identity and contact data: name, email address, telephone number, organisation or designation, when you submit an enquiry, demo request, or contact form.
  • Recruitment data: where you apply for a role — your CV or résumé, qualifications, employment history, references, and expected remuneration.
  • Usage and activity data: pages viewed, time on site, navigation and click activity, in aggregate.
  • Technical data: IP address, browser type, device and operating-system information.
  • Communication data: the content of forms you submit and correspondence you send us.

We do not knowingly collect special-category identity documents (such as Aadhaar, PAN, or passport) through the Website unless you voluntarily provide them in a recruitment context. We do not collect payment information through the Website (see Section 7).

2. Purpose of collection and how we use it

We process your personal data to: respond to your enquiries and demo requests; provide information about Atlas and Urbantrace; assess job applications; operate, secure, and improve the Website; send you communications you have requested; and comply with applicable law.

3. Legal basis for processing

We process your personal data on the following grounds under the DPDP Act: (a) your consent (s. 6), given by clear affirmative action when you submit a form or opt in; and (b) certain legitimate uses (s. 7), including where you voluntarily provide your data for a specified purpose and have not indicated objection (s. 7(a)), for employment-related purposes (s. 7(i)), and to comply with any law or judgment in force in India. We collect only the data necessary for these purposes and retain it only as long as necessary (see Section 8).

4. Your rights as a Data Principal

Under the DPDP Act, you have the right to: (i) access a summary of your personal data and its processing (s. 11); (ii) correction, completion, updating, and erasure of your data (s. 12); (iii) withdraw consent at any time (s. 6(4)–(6)); (iv) grievance redressal (s. 13); and (v) nominate another individual to exercise your rights in the event of death or incapacity (s. 14).

5. How to exercise your rights

To exercise any right, contact our Grievance Officer (Section 12). We will acknowledge your request within 48 hours and respond within 30 days, or such shorter period as may be prescribed. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal; it may, however, limit our ability to respond to your enquiry.

6. Sharing and disclosure

We do not sell your personal data. We share personal data only:

  • with service providers / Data Processors engaged by us — limited to categories such as website hosting, email delivery, and analytics — under written contracts requiring DPDP-compliant safeguards (DPDP Act, s. 8(2));
  • where required by law, regulation, court order, or governmental authority; and
  • to protect our rights, safety, or property, or those of others.

7. No collection of payment information

The Website does not process payments or collect card, bank, or other payment-instrument details.

8. Security practices and retention

We implement reasonable security safeguards in accordance with DPDP Act, s. 8(5) and, to the extent applicable, the SPDI Rules — including access controls, encryption in transit, and periodic review. We retain personal data only for as long as necessary for the purpose collected: enquiry and contact data for 24 months from last contact; recruitment data of unsuccessful applicants for 6 months after the conclusion of the recruitment process (unless a statutory obligation requires otherwise, or you consent to a longer talent-pool retention); and technical and usage logs for 12 months.

In the event of a personal data breach, we will intimate the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under s. 8(6) of the DPDP Act and the Digital Personal Data Protection Rules, 2025.

9. Cookies and analytics

The Website uses only essential cookies strictly necessary for it to function. For analytics we use privacy-friendly, cookieless tools (currently Plausible and/or Cloudflare Web Analytics) that set no cookies, use no cross-site identifiers, and collect no personal data — only aggregate, anonymous usage measures. Because we set no non-essential cookies, no cookie-consent banner is required. We do not use cookies for targeted advertising or to process sensitive personal data. The only value the site may store in your browser is a single functional display preference, which does not identify you.

10. Cross-border transfer of data

Some of our service providers may store or process data on servers located outside India. Where this occurs, such transfer is undertaken in accordance with DPDP Act, s. 16, and subject to any restrictions notified by the Central Government.

11. Governing law and jurisdiction

This Policy is governed by the laws of India. Any dispute is subject to the dispute-resolution (arbitration) provisions of the Terms of Website Use; subject thereto, the courts at Mumbai, Maharashtra shall have exclusive jurisdiction.

12. Contact and grievance redressal

For any question, request, or complaint regarding your personal data, contact our Grievance Officer:

Aman Sanghavi, Grievance Officer, Atlas
privacy@atlashq.in
Mumbai, Maharashtra

If your grievance is not satisfactorily resolved, you have the right to register a complaint with the Data Protection Board of India established under the DPDP Act.

13. Changes to this Policy

We may update this Policy from time to time. The “last updated” date above reflects the latest revision. Material changes will be notified on the Website.