Privacy Policy

Last updated: 04 November 2025

This Privacy Policy explains how MOBILOITTE GROUP ("Mobiloitte", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit www.mobiloitte.com (the "Site"), interact with our pages or communications, contact us, apply for jobs, or use any related services (collectively, the "Services").

By using the Services, you acknowledge this Policy. If you do not agree, please discontinue use of the Services.

1. Who We Are & How to Contact Us

Data Controller / Data Fiduciary: MOBILOITTE GROUP

Contact (privacy, DPO, grievance, security): [email protected]

We handle all privacy requests through the above email. If you are located in the EU/EEA, UK, India, Brazil, California, or other jurisdictions with specific rights, please mention your location in your request so we can process it accordingly.

2. Scope & Relationship to Client Data

This Policy covers personal information we collect through our Site, marketing, events, business development, and recruiting.

When we provide services to business customers (e.g., software development, managed services), we may process personal data on their instructions as a processor/service provider. In those cases, our Data Processing Addendum (DPA) with the customer governs, and the customer's own privacy notices apply to their end users.

3. Information We Collect

A) You Provide Directly

Contact details: name, work email, phone, company, role, country/region.
Inquiry content: messages, project details, RFPs/RFIs, attachments.
Subscriptions & preferences: newsletter sign-ups, event registrations, content downloads.
Recruitment data: CV/resume, cover letter, professional history, education, skills, interview notes, references, and any information you choose to submit (e.g., accommodation requests).

B) Collected Automatically

Usage & device data: IP address, approximate location, device identifiers, browser/OS, language, referring/exit pages, page views, time on page, clicks and interactions.
Cookies & similar tech: cookies, local storage, pixels, SDKs for functionality, analytics, and (where enabled) advertising/retargeting. See Cookies & Tracking below.

C) From Third Parties

Business lead sources/partners (where permitted): professional contact info and interest signals.
Social networks you interact with (e.g., LinkedIn).
Recruiting/background providers (where lawful and with notice).

Note: We do not intentionally collect sensitive personal data via the Site. Please avoid sharing sensitive information unless requested and necessary (e.g., recruiting accommodations).

4. How We Use Personal Information (Purposes & Legal Bases)

We use information to:

Operate the Site & provide Services (enable forms, downloads, demos).
Respond to inquiries & support (quotes, proposals, account/partnership discussions).
Marketing & communications (newsletters, invitations, product/service updates, case studies) — with your choices respected.
Recruitment & hiring (evaluate applications, schedule interviews, comply with employment laws).
Analytics & improvement (measure performance, A/B testing, UX, content effectiveness).
Security & fraud prevention (detect, investigate, prevent incidents, protect our rights).
Compliance & legal (legal obligations, regulatory requests, contract enforcement, corporate transactions).

Legal bases depend on your location and may include legitimate interests, contract (or pre-contract steps), consent (e.g., non-essential cookies/marketing in some regions), and legal obligations.

5. Cookies & Tracking

We use:

Strictly necessary cookies (security, form submissions, basic site features).
Functional cookies (remember choices such as language).
Analytics cookies (traffic, performance, user flows).
Advertising/retargeting cookies (to show relevant ads across sites, where enabled).

Your Choices

Manage preferences via our Cookie Settings (link from banner/footer): /cookie-settings.
Adjust your browser settings to block or delete cookies (some features may not work).
Where supported and required by law, we honor Global Privacy Control (GPC) signals for sale/share/targeted advertising opt-outs.

6. How We Share Information

We may share personal information with:

Service providers/Processors: hosting and cloud, website/CMS, analytics and measurement, marketing automation and email delivery, CRM, communications, applicant tracking, security and monitoring, and similar vendors working on our behalf under contract.
Business partners: co-marketing/event partners, when you engage or consent.
Professional advisors and authorities as required by law.
Corporate transactions: if we are involved in a merger, acquisition, financing, or sale of assets, data may be transferred with appropriate safeguards.

We do not sell personal information for money. In some U.S. states, certain analytics/ads practices may be considered a "sale" or "share" or "targeted advertising." See Your Rights to opt out.

7. International Transfers

We operate globally. Where personal information is transferred to countries that may not provide the same level of protection, we implement appropriate safeguards (e.g., Standard Contractual Clauses and supplementary measures; UK IDTA; other recognized mechanisms) and assess them as required.

8. Data Retention

We retain personal information only as long as necessary for the purposes described and to comply with legal, accounting, or reporting obligations. Typical periods:

Marketing leads: until you opt out or after 18–24 months of inactivity.
Inquiries/support: 2–3 years.
Recruitment: for the hiring process and up to 12–24 months thereafter (longer where required by law or with your consent).
Analytics logs: 12–24 months, and may be aggregated or pseudonymized where feasible.

9. Security

We implement reasonable administrative, technical, and organizational measures, including encryption in transit, access controls (least privilege, MFA), logging/monitoring, vulnerability management, and workforce training. No method is 100% secure; if you believe your data has been compromised, contact [email protected].

10. Your Privacy Rights & Choices

Depending on your location, you may have rights to access, correct, delete/erase, restrict or object, withdraw consent, data portability, and to opt out of certain processing (e.g., targeted advertising, "sale/share" under U.S. state laws). We do not use sensitive personal information for inferring characteristics.

How to Exercise

Email [email protected] with your request and location. We may ask to verify your identity. Authorized agents (where permitted) should include proof of authorization and the consumer's verification info.

Marketing

Use the unsubscribe link in our emails or email [email protected]. Manage cookie preferences at /cookie-settings.

11. Children's Privacy

The Services are not directed to children under 13 (or the age of digital consent in your country). We do not knowingly collect data from children. If you believe a child has provided data, contact [email protected] to request deletion.

12. Automated Decision-Making

We do not engage in automated decision-making that produces legal or similarly significant effects about individuals via the Site. We may use analytics and audience segmentation to understand interests and improve content, subject to your choices and applicable law.

13. Third-Party Links & Social Media

Our Site may link to third-party websites, plug-ins, and platforms. Their privacy practices govern data you provide to them. Review their policies before sharing data.

14. Region-Specific Information

EU/EEA & UK (GDPR/UK GDPR)

You have rights listed in Section 10. You may also lodge a complaint with your local supervisory authority. For cross-border transfers, we rely on safeguards described in Section 7.

India (DPDP Act, 2023)

You may consent/withdraw consent, and request access, correction, erasure, and grievance redressal. Grievance Officer contact: [email protected] (please include "DPDP" in the subject). We will acknowledge and resolve grievances within statutory timelines.

United States (CCPA/CPRA and Similar State Laws)

You may request access, correction, deletion, and to opt out of "sale/share" and targeted advertising. We will not discriminate against you for exercising rights. To opt out of "sale/share" or targeted advertising, submit a request to [email protected] or use /do-not-sell (when available). We honor GPC signals where required.

Brazil (LGPD)

You may confirm processing, access, correct, anonymize/block/delete, port, withdraw consent, and request information about sharing and legal bases. Contact [email protected].

We contractually require confidentiality, security, and deletion/return of data at the end of service. A current list of key subprocessors can be requested at [email protected].

16. Client Project Data (Processor Role)

When acting as a processor/service provider for clients, we process personal data solely per client instructions, implement appropriate security measures, assist with data subject requests as required, and support transfer mechanisms (e.g., SCCs). See our DPA with your organization for details.

17. Changes to This Policy

We may update this Policy to reflect changes in our practices or legal requirements. We will post updates with a new "Last updated" date and, where required, provide additional notice. Continued use of the Services after an update constitutes acknowledgment of the revised Policy.

18. Contact

Questions, requests, or complaints: [email protected]

We aim to respond within applicable legal timelines.