Privacy Policy

ArmourIQ respects your privacy and is committed to protecting the personal data we handle. This policy applies to personal data we collect through this website and in the course of providing our Services. We handle personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDPA) and, where applicable to clients or visitors in other regions, comparable data protection laws.

For the purposes of this policy, the data fiduciary (controller) is Twinflare Technologies LLP, doing business as ArmourIQ, registered in New Delhi, India. Where we process personal data on behalf of a client under an engagement, we act as a data processor and handle that data strictly on the client's documented instructions.

Information you provide

• Contact details submitted through our forms, name, work email, phone number, company, and role.
• The content of enquiries, consultation requests, and correspondence.
• Newsletter subscription details, where you choose to subscribe.

Information collected automatically

• Basic technical data such as IP address, browser type, device information, and pages visited.
• Analytics data about how the website is used, collected via cookies or similar technologies (see section 11).

Engagement data

During a service engagement we may receive information about your systems, environment, and personnel as necessary to deliver the Services. Such data is handled under the confidentiality and data-handling terms of the relevant engagement agreement.

• To respond to enquiries and consultation requests.
• To provide, manage, and improve our Services.
• To send advisory updates or threat intelligence briefings you have subscribed to.
• To maintain the security and integrity of our website.
• To meet legal, regulatory, and contractual obligations.

We process personal data on the basis of your consent (for example, when you subscribe to our newsletter), to take steps at your request before entering into a contract or to perform a contract with you, to meet legal obligations, and for our legitimate interests in operating and securing our business, provided those interests are not overridden by your rights.

We do not sell or rent personal data. We may share it only with:

• Service providers who support our operations (for example, email, hosting, and analytics providers) under appropriate confidentiality and data-processing terms.
• Professional advisers such as legal or accounting advisers, where necessary.
• Authorities where required by law or to protect our legal rights.

As a cybersecurity practice, protecting data is core to what we do. We apply administrative, technical, and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit, and least-privilege principles. No method of transmission or storage is completely secure, but we work to protect personal data against unauthorised access, loss, or misuse.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal and regulatory obligations, and to resolve disputes. When data is no longer needed, we securely delete or anonymise it. Retention of engagement data is governed by the relevant engagement agreement.

We are based in India and primarily process data here. Where we work with clients or service providers in other regions, any transfer of personal data across borders is carried out in accordance with applicable data protection law and appropriate safeguards. For clients with data residency requirements, we can scope engagements to keep data within a specified region.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where there is no overriding legal basis to retain it.
• Withdraw consent at any time, where processing is based on consent.
• Nominate another person to exercise your rights in the event of death or incapacity, as provided under the DPDPA.
• Raise a grievance with us, and escalate to the Data Protection Board of India where applicable.

To exercise any of those rights, contact us using the details in section 14.

Our website may use cookies and similar technologies to keep the site working properly and to understand how it is used. You can control or disable cookies through your browser settings; disabling some cookies may affect how the site functions.

Our website and Services are intended for businesses and professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated through the website or, where appropriate, directly.

For any privacy-related question, request, or grievance, contact us at:

• Email: hello@armouriq.com
• Phone: +91 8007024111
• Twinflare Technologies LLP (dba ArmourIQ), Saket Salcon, Saket District Centre, New Delhi 110017