GLOBAL MASTER PRIVACY POLICY

---

Effective Date: 19-May-2023
Last Updated: 01-Apr-2025

StratAllies Inc (“StratAllies,” “we,” “our,” or “us”) is committed to protecting the privacy, security, and confidentiality of personal information. This Privacy Policy explains how we collect, use, share, store, transfer, protect, and manage personal data across our global operations.

This Privacy Policy applies to all individuals who interact with StratAllies, including website visitors, clients, job applicants, contractors, consultants, freelancers, vendors, and contacts (“you”).

We operate as a US-based company, and our data practices comply with:

• United States privacy laws including CCPA/CPRA
• International norms including GDPR (EU/UK)
• India DPDP Act 2023
• Singapore PDPA
• Other relevant global data protection regulations

If you are a current or former employee or contractor, please refer to our Worker Privacy Notice, which governs workforce privacy.

1. WHO WE ARE

StratAllies Inc is a business consulting, analytics, and staffing services company offering global services.

Legal Entity Name: StratAllies Inc
Privacy Contact: privacy@stratallies.com

We may appoint regional privacy contacts or Data Protection Representatives where required by law (e.g., EU/UK GDPR).

2. PERSONAL DATA WE COLLECT

“Personal Data” means any information that identifies or could reasonably be linked to an individual. We collect the following types:

A. Identification and Contact Information

• Name
• Email address
• Phone number
• Postal address
• Country of residence
• Identification documents (where needed)

B. Sensitive Personal Data

Collected only when necessary and in accordance with applicable laws:

• Passport, driver’s license, national ID numbers
• Social Security Number (SSN)
• Tax ID numbers
• Work authorization or immigration information
• Demographics such as race/ethnicity (voluntary only)
• Health information (e.g., fitness-for-duty documentation)

C. Recruitment and Professional Information

• CV/resume
• Education background
• Employment history
• Skills and certifications
• Reference contacts
• Background verification results
• Interview records and assessments

D. Website and Device Information

• IP address
• Browser type
• Device identifiers
• Cookie and tracking data
• Usage patterns (pages visited, time spent, clicks)

E. Communication Information

• Emails, chat messages, or communications you send to us
• Customer support interactions
• Request or complaint logs

F. Contract and Transaction Data

• Service agreements
• Project details
• Billing information
• Records of services provided

3. HOW WE COLLECT PERSONAL DATA

We collect data in the following ways:

Directly from you

• When you fill forms, contact us, apply for a job, or subscribe to updates.

Automatically through our website

• Cookies, analytics tools, server logs.

From third parties

• Recruitment partners
• Background check agencies
• Public platforms (e.g., LinkedIn)
• Clients (for project assignments)
• Technology service providers

From our internal systems

For workforce and contractor management.

4. PURPOSES FOR PROCESSING PERSONAL DATA

We process personal data for purposes including:

• Delivering consulting, analytics, and staffing services
• Recruitment and talent management
• Communication and relationship management
• Website performance improvement
• Security and fraud prevention
• Legal and contractual compliance
• Audits and regulatory reporting
• Marketing with consent
• Business continuity and disaster recovery

5. LEGAL BASES FOR PROCESSING (FOR GDPR/UK GDPR USERS)

We process personal data based on one or more of the following:

• Consent
• Performance of a contract
• Legitimate interests
• Compliance with legal obligations
• Protection of vital interests
• Public interest (rare and only where applicable)

6. COOKIES AND TRACKING TECHNOLOGIES

We use cookies to improve website functionality, enhance user experience, and conduct analytics.
Non-essential cookies are used only with your consent.

For more details, please see our Cookie Policy.

7. SHARING PERSONAL DATA

We may share data with:

A. StratAllies Group Companies

For coordination, staffing, project delivery, and compliance.

B. Third-Party Service Providers

All bound by confidentiality and data protection agreements:

• Cloud hosting providers
• Payroll and billing systems
• Background verification vendors
• Security and analytics tools
• Recruitment platforms
• IT infrastructure providers

C. Clients

Only when necessary for project delivery or staffing assignments.

D. Legal and Regulatory Authorities

When required by law, regulation, or court order.

E. Business Transfers

If StratAllies undergoes merger, acquisition, restructuring, or asset sale.

We do not sell personal data. We do not “share” data for targeted advertising under CPRA unless explicitly stated.

8. INTERNATIONAL DATA TRANSFERS

As a global company, StratAllies may transfer data internationally, including to:

• United States
• India
• EU/UK
• Singapore
• Other operational jurisdictions

We use recognized safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Contractual protections
• Encryption and access controls
• Data minimization and localization where required

9. SECURITY MEASURES

We implement reasonable and appropriate measures including:

• Encryption in transit and at rest
• Multi-factor authentication
• Role-based access controls
• System monitoring and logging
• Network security protocols
• Employee confidentiality agreements
• Secure development practices
• Vendor due diligence
• Regular audits and penetration testing

No system is completely secure, but we strive to maintain industry-standard safeguards.

10. DATA RETENTION

We retain personal data only for as long as necessary for:

• The purpose collected
• Legal or contractual obligations
• Financial recordkeeping
• Regulatory compliance
• Business continuity
• Security and fraud detection

After retention:
Data is securely deleted, anonymized, or archived in compliance with law.

11. YOUR PRIVACY RIGHTS

Depending on your region, you may have the following rights:

GDPR / UK GDPR Rights

• Access
• Correction
• Erasure
• Restriction
• Objection to processing
• Portability
• Right to withdraw consent
• Complaint to supervisory authority

CCPA/CPRA Rights (California)

• Right to know
• Right to delete
• Right to correct
• Right to opt-out of sharing
• Right to non-discrimination
• Right to limit use of sensitive personal data

DPDP Act (India)

• Access
• Correction
• Deletion
• Consent withdrawal
• Grievance redressal

How to make a request

Email us: privacy@stratallies.com

We may need to verify your identity before fulfilling requests.

12. CHILDREN’S PRIVACY

StratAllies does not knowingly collect data from children under 18 years of age.
If we learn we have done so inadvertently, we will delete such data promptly.

13. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling that produces legal or significant effects on individuals.

If automated tools (e.g., resume-screening algorithms) are used, human oversight is always included.

14. LINKS TO THIRD-PARTY SITES

Our website may contain links to external sites. We are not responsible for their content, privacy practices, or security. Your interaction with such sites is governed by their policies.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy occasionally.
We will revise the “Last Updated” date accordingly and provide notice where required by law.

16. CONTACT INFORMATION

For privacy enquiries, requests, or complaints:

Email: privacy@stratallies.com

 

If you are located in the EU/UK, you may have the right to contact the relevant supervisory authority.