Privacy Policy
How TEdgeOne Global Solutions Pvt. Ltd. collects, uses and protects personal data on tedgeone.com, in the consultant network and in the consultant portal.
1. Who we are
TEdgeOne Global Solutions Pvt. Ltd. (“TEdgeOne”, “we”, “us”) is the Data Fiduciary for personal data collected through tedgeone.com, the TEdgeOne consultant network, the consultant portal and our emails. If you share personal data with us you are a Data Principal under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025.
This policy explains what we collect, why, who sees it, how long we keep it and how you can exercise your rights. Our DPDP Notice gives the same information as a short itemised notice for each form.
2. Personal data we collect
We collect only what each purpose needs:
| Who | What we collect |
|---|---|
| Website visitors who contact us (contact, careers and advisory brief forms) | Name, work email, company and role, engagement type, areas of expertise, LinkedIn profile, and what you tell us about your needs or background. |
| Consultants applying to the network (Associate form) | Name, email, optional phone, location, LinkedIn profile, years of experience, practices, skills, industries and regions, availability, preferred engagement type, indicative rate range, certifications, a professional summary, why you want to join and how you heard of us. |
| Consultants in verification (verification pack) | Career history (roles and employers); outcome claims with supporting links; anonymised project examples; certifications and the evidence you upload; referee names, organisations, emails and your relationship to them; conflicts of interest and client restrictions; NDA status; availability, work mode, days per week and rates; invoicing entity, an optional tax registration number (such as GSTIN) and the authorised signatory’s name and role; time zone, languages and travel; whether you follow our LinkedIn page; your declaration and acceptance of the associate agreement; and your consent choices for publication. |
| Assessment records we create about consultants | Reviewer scores, tier and fit category, results of sanctions and conflict checks, flags raised during screening, review notes, follow-up actions, and delivery feedback after engagements. |
| Referees named by a consultant | Your name, organisation, email and relationship to the consultant (given to us by the consultant), and the answers you give on our single-use referee form. |
| Network members (consultant portal) | Sign-in email codes; your profile and consent settings; your rate card (usual and lowest acceptable rate); rate negotiation history; engagements and invitations; requests you raise for other expertise (brief, budget band, consultants named); your answers to client requests; and opportunities you refer. |
| People referred to us by a consultant (client opportunities) | Company name, the need, and — only if the consultant chooses to share them — a contact’s name, role and work email. The consultant must confirm the client is happy to be referred. |
| Clients requesting a consultant (network page) | Name, company, work email, the requirement, where the work is based, preferred start and duration, and when you confirmed your email. |
| Everyone using the site | Security data: IP address and browser details, form timestamps, and an audit log of sign-ins and changes made in the portal and console. The consultant network keeps IP and email addresses for rate limiting and look-ups only as keyed one-way hashes. |
| Anyone making a rights request | Name, email, request type and details. |
We do not ask for, and you should not send us, bank or card numbers, personal identity numbers (such as Aadhaar, PAN or passport numbers), health information or other sensitive data. Please do not include other people’s personal data unless they have agreed.
3. How we use it and our legal basis
We process personal data on the basis of your consent, given through separate, unticked boxes for each purpose, or for a legitimate use allowed by the DPDP Act (for example, a request you have made, or meeting a legal obligation). We use it to:
- answer enquiries and provide consulting and advisory services;
- assess applications to the consultant network, contact the referees you name, screen for sanctions and conflicts of interest, and decide on approval;
- publish an anonymised profile and place it on the public network map — only if you consent to each;
- let approved members find each other in the portal — only if you consent to being discoverable;
- send a client’s requirement, location and timeline to a consultant, suggest other consultants, manage rate negotiations and engagements, and introduce the parties once an engagement is confirmed;
- manage opportunities referred by consultants and keep the referrer informed;
- send service emails (sign-in codes, confirmations, reminders, status updates) and handle your rights requests;
- keep the site and our records secure, prevent misuse and meet legal obligations.
You may withdraw any consent at any time (see Your rights). Withdrawal stops the processing that depends on it from that point on, for example your public profile is removed at once.
4. How the consultant network handles your data
- Anonymised profiles. Public profiles show a code name (for example TEO-AI-1234), a headline and short summary written by TEdgeOne, seniority tier, practices, skills, industries, regions, a years-of-experience band, verified certifications, anonymised project examples and an availability band. Names, contact details, employers, client names and rates are never published.
- Approval decisions are made by people. No consultant is approved or rejected on merit automatically: a TEdgeOne reviewer makes every approval decision, and a record flagged by sanctions screening is held for human and legal review. See Automated processing for the steps that do run automatically.
- Client confidentiality. When a client requests a consultant, the consultant receives only the requirement, location and timeline — never the client’s name, company or email. The client must first confirm their email with one click; nothing is sent to anyone before that. Client and consultant contact details are exchanged only after TEdgeOne confirms an engagement with both sides.
- Rates stay private. Rate cards and negotiations are visible only to the consultant concerned and to TEdgeOne, never to clients, other consultants or the public.
- Team contacts. On an engagement with several consultants, TEdgeOne may share team members’ names and emails with the other members of that team only.
- Leaving. Members can download a summary of their data, change their consents or leave the network from the portal at any time; applicants can withdraw using the link in their acknowledgement email.
5. Automated processing
Some steps run automatically to keep things moving. They follow fixed rules and a person can review or reverse them:
- screening an application’s stated location against sanctioned countries and, if it matches, holding it for legal review without contacting the applicant;
- sending the verification pack to applications that pass screening, and reminders;
- closing an application if no verification pack arrives within 30 days;
- suggesting a fit score and ranking consultants for a request, using practice, skills, industry, region, availability, past delivery feedback, rate and whether the consultant follows our LinkedIn page;
- moving a client request to the next best consultant if the consultant declines or does not answer within 5 days, and closing client requests that are not confirmed within 3 days.
Approval or rejection of a consultant on merit is always decided by a person.
7. Transfers outside India
Some of our service providers, including Google, may process data outside India. Such transfers take place in line with Section 16 of the DPDP Act and any restriction notified by the Government of India.
8. How long we keep it
| Data | Kept for |
|---|---|
| Enquiries through the contact and similar forms | 2 years from our last contact |
| Client records for engagements | 7 years after the engagement ends (legal and tax obligations) |
| Careers applications that are unsuccessful | 12 months |
| Network applications under consideration (including those on hold or in review) | While the application is open |
| Network applications not approved | 12 months, then erased |
| Network applications withdrawn, or closed because no verification pack arrived within 30 days | Erased within 30 days |
| Members who leave the network | Erased within 30 days |
| Members offboarded by TEdgeOne | 24 months, then erased |
| Client consultant requests | 24 months from the request, then erased; 7 years where an engagement was confirmed |
| Client requests never confirmed by email | Closed after 3 days and erased 7 days later |
| Opportunities referred by consultants that do not go ahead | 24 months after closing, then erased |
| Referred opportunities that are won, or still open | Kept with the referring consultant’s record |
| Uploaded evidence files | Deleted together with the consultant’s record |
| Security and audit logs (record references, hashed IP addresses and short notes, never contact details) | At least 1 year and no more than 3 years |
| Rights requests and grievances | As long as needed to resolve and evidence the request |
| Advisory brief and other marketing preferences | Until you withdraw consent |
Erasure is automatic when a period ends. We may keep data longer only where the law requires it, and we will tell you if that applies to a request.
9. Your rights
Under the DPDP Act you can ask us to:
- give you a summary of your personal data, how we use it and who we have shared it with (access);
- correct, complete or update it;
- erase it when it is no longer needed or consent is withdrawn;
- withdraw consent, as easily as you gave it;
- nominate a person to exercise your rights if you die or cannot act;
- resolve a grievance about how we handle your data.
Use the Data Rights page or email privacy@tedgeone.com. Network members can also download their data summary, change consents and leave from the consultant portal. We may need to confirm your identity, and we respond within the period set by the DPDP Rules and in any case within 90 days.
10. Grievances
Please contact our Grievance Officer first: Director, privacy@tedgeone.com, TEdgeOne Global Solutions Pvt. Ltd., #10/A, 2nd Main Road, BEML 1st Stage Bangalore, INDIA - 560098. We resolve grievances within 90 days. If you are not satisfied, you may complain to the Data Protection Board of India through its online complaint process (see the Ministry of Electronics and Information Technology website, meity.gov.in).
11. Security and breaches
We protect personal data with HTTPS, encryption at rest (AES-256-GCM) for names and contact details (including clients’ identities), verification packs, referee answers, referral details and email bodies, encrypted storage of uploaded evidence outside the public website, keyed hashing of emails and IP addresses, password-free sign-in with emailed codes, two-factor authentication for TEdgeOne reviewers, role-based access, bot protection, rate limiting and an audit log.
If a personal data breach occurs we will inform affected people and the Data Protection Board without delay, and send the Board a detailed report within 72 hours or any longer period it allows.
12. Cookies
We use no analytics, advertising or tracking cookies. We use only essential cookies: a session cookie that keeps forms secure and keeps you signed in to the consultant portal or console, and, if a reviewer ticks “stay signed in”, a device cookie that lasts up to 30 days. Your browser may also store small items locally to remember your consent choices. Links to other websites, such as LinkedIn, are governed by those sites’ own policies.
13. Children
Our website and services are for adults. You must be 18 or older to submit personal data. If we learn that we hold a child’s data without verifiable parental consent, we will erase it.
14. Visitors from outside India
If you are in the European Economic Area or the United Kingdom you may have additional rights, such as restriction, portability and objection. Contact privacy@tedgeone.com to exercise them.
15. Changes to this policy
When we change this policy we update the date and version above, and where the law requires it we ask for your consent again. This version adds the consultant network, consultant portal, client requests and referrals.
16. Contact us
TEdgeOne Global Solutions Pvt. Ltd.
Registered Office: #10/A, 2nd Main Road, BEML 1st Stage Bangalore, INDIA - 560098
- Privacy and data protection: privacy@tedgeone.com
- Grievance Officer: Director, privacy@tedgeone.com
- Legal and terms: legal@tedgeone.com
- General enquiries: director@tedgeone.com or the contact page
- Exercise your data rights: Data Rights page