PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING OUR WEBSITE

Circullence Solutions Pvt. Ltd. (hereinafter referred to as “Circullence,” “Company,” “we,” “our,” or “us”) is committed to protecting the confidentiality and privacy of information entrusted to us by our clients, partners, and visitors. In line with this commitment, Circullence applies appropriate technical, administrative, and organizational safeguards to protect any Personal Information—also referred to as “Personally Identifiable Information” or “PII”—that is collected online from customers, prospective clients, website visitors, and their representatives (collectively referred to as “User,” “you,” or “your”).

Our approach is to collect only the Personal Information that you voluntarily provide when engaging with our website or services. This information enables us to deliver relevant insights, respond to service inquiries, share resources, and, where applicable, provide information about career opportunities with Circullence.

We encourage you to review this Privacy Policy in full to understand how we collect, use, share, and safeguard the PII you choose to share with us, in connection with our consulting, technology, analytics, AI, cloud, endpoint, and cybersecurity services.

1. Collection and Use of Personal Information

1.1 What Information We Collect

We collect Personal Information about you when you choose to provide it — for example, when you contact us through designated mailboxes, submit an inquiry form, or register for specific services. In some cases, you may have previously shared Personal Information with Circullence (for instance, if you are a former client, partner, or applicant).

If you choose to register or log in to a Circullence website using a third‑party single sign‑on service that authenticates your identity and connects your social media login information (e.g., Google, LinkedIn, or other supported platforms) with Circullence, we will collect the information or content required for registration or login that you have permitted the social media provider to share with us. This may include, but is not limited to, your name and email address. Any additional information collected will be subject to the privacy settings you have configured with your social media provider(s). We encourage you to review the privacy policy and settings of the applicable service.

When you register or submit Personal Information to Circullence, we will use this information in accordance with this Privacy Policy. Your Personal Information will not be used for purposes other than those stated, unless we obtain your consent or such use is otherwise required or permitted by applicable law or professional obligations.

For example:

• If you register on a Circullence website and provide information about your preferences, we may use this information to personalize your user experience.
• If you sign up or log in using a third‑party single sign‑on, we may recognize you as the same user across different devices and tailor your experience across other Circullence websites or applications you access.
• If you submit a résumé or curriculum vitae (CV) to apply for a position with Circullence, we will use the information you provide to assess your suitability and match you with available opportunities.

In certain cases, where you have registered for specific services, we may contact you as part of registration or de‑registration processes, or to provide relevant alerts, notifications, or service updates.

1.2 Legal Grounds for Using Your Personal Information

Circullence generally collects only the Personal Information necessary to fulfil your request. Where additional information is required, we will inform you at the point of collection.

We process Personal Information only when we have a lawful basis to do so under applicable data protection laws. These laws also require us to inform you of the legal grounds we rely on. Accordingly, when we process your Personal Information, we will rely on one or more of the following conditions:

a. Performance of a Contract When processing your Personal Information is necessary to perform our obligations under a contract with you, or to take steps at your request before entering into such a contract.

b. Legal Obligation When we are required to process your Personal Information to comply with a legal obligation — for example, maintaining records for tax purposes, responding to lawful requests from regulatory or law enforcement authorities, or fulfilling statutory reporting requirements.

c. Legitimate Interests When it is in our legitimate interest to process your Personal Information in the course of running a lawful business, provided such interests do not override your rights and freedoms. Examples include:

• Preventing, detecting, and responding to fraudulent or criminal activity, and protecting our information technology infrastructure.
• Providing information and/or services, or sharing details about employment opportunities, to individuals who visit our website.
• Executing and analysing our marketing activities to improve reach and relevance.
• Personalising your online experience and enhancing the performance, usability, and efficiency of Circullence’s digital platforms.
• Meeting our Corporate Social Responsibility (CSR) commitments.

d. Your Consent In certain situations, we will request your explicit consent to process specific categories of your Personal Information. We will process such information only if you agree, and you may withdraw or modify your consent at any time by contacting us at sarang.aloni@circullence.com

e. Special Categories of Data In limited cases, and only where permitted by law, the Personal Information we collect may include special categories of data — for example, diversity‑related information (including data about ethnic or racial origin, religious or philosophical beliefs, political opinions, or sexual orientation), health‑related data, or data concerning alleged or proven criminal offences. Such information will be processed with enhanced safeguards and only for lawful purposes.

1.3 Automatic Collection of Personal Information

In certain instances, Circullence Solutions Pvt. Ltd. (“Circullence”) and our trusted service providers may use cookies, web beacons, location‑based tools, and similar technologies to automatically collect specific types of information when you interact with us online, as well as through certain email communications. This automated collection enables us to personalise your online experience, enhance the performance, usability, and effectiveness of Circullence’s digital presence, and measure the impact of our marketing activities.

a. IP Addresses An Internet Protocol (IP) address is a unique number assigned to your computer or mobile device whenever you access the internet. It allows devices and servers to recognise and communicate with each other. IP addresses from which visitors appear to originate are logged for IT security, fraud prevention, and system diagnostic purposes. This information may also be used in aggregate form to analyse website performance and usage trends.

b. Cookies For details on how we use cookies and how you can manage them, please refer to our Cookies Policy.

c. Web Beacons Web beacons are small image files embedded in web pages or emails that can be used to collect certain information from your device, such as your IP address, the time content was viewed, browser type, and whether cookies from the same server are present. Circullence uses web beacons only in compliance with applicable laws. You may disable certain web beacons by turning off their associated cookies. In such cases, the web beacon may still record an anonymous visit from your IP address, but cookie‑based information will not be captured. In some of our newsletters or other communications, we may track recipient actions—such as whether an email was opened or a link was clicked—to assess engagement and improve future communications.

d. Location‑Based Tools Circullence may collect and use the geographical location of your device to provide you with information about services we believe may be relevant based on your location, and to improve our location‑based offerings.

e. Social Media Widgets and Applications Our websites may include functionality for sharing content via third‑party social media platforms, such as LinkedIn, X (formerly Twitter), or Facebook. These applications may collect and use information about your interaction with our site. Any Personal Information you provide through such platforms may be collected and used by other members of those platforms, and such interactions are governed by the privacy policies of the respective providers. Circullence does not control, and is not responsible for, the practices of these third parties. Additionally, our websites may host forums, blogs, crowdsourcing tools, or other interactive features (“social media features”) designed to facilitate knowledge and content sharing. Any Personal Information you post on these features may be visible to other users (unless otherwise specified at the point of collection), and Circullence may have limited or no control over how it is used by others.

f. Children Circullence recognises the importance of protecting children’s privacy, particularly in an online environment. Our websites are not intentionally designed for, or directed at, children under the age of 13. It is our policy not to knowingly collect or maintain information about anyone under 13, except where necessary to provide professional services and only in compliance with applicable laws.

2. Sharing and Transfer of Personal Information to Third Parties

Circullence Solutions Pvt. Ltd. (“Circullence”) does not share Personal Information with third parties except where necessary to meet our legitimate professional and business needs, to fulfil your requests, or as required or permitted by applicable law, regulation, or professional standards.

In certain cases, Circullence may transfer Personal Information outside India to trusted third‑party service providers, partners, or affiliates who work with us or on our behalf for the purposes described in this Privacy Policy. Such transfers may include storage or processing in jurisdictions such as the United States or other countries where Circullence or its service providers operate.

Whenever we transfer your Personal Information outside India, we ensure that appropriate contractual, technical, and organisational safeguards are in place to maintain the same level of protection as required under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and, where relevant, the General Data Protection Regulation (GDPR).

3. Your Choices

In general, you are not required to provide any Personal Information to Circullence. However, certain information will be necessary for us to respond to your inquiries, provide additional details about our services or events, or deliver specific resources you request.

Where we seek to use your Personal Information for purposes beyond those originally stated, we will request your explicit consent. You may choose to accept or decline such uses, and you may withdraw or modify your consent at any time by contacting us at [Insert Circullence Privacy Contact Email].

As outlined in our Cookies Policy, you can configure your browser to refuse all cookies or to alert you when a cookie is being sent. Please note that disabling cookies may affect the functionality and performance of certain parts of our website.

4. Your Rights

If Circullence Solutions Pvt. Ltd. (“Circullence”) processes Personal Information about you, you are entitled to exercise the following rights under applicable data protection laws:

a. Right to be Informed You have the right to know what Personal Information we have collected about you, the purposes for which it is collected, how long it will be retained, how you can lodge a complaint, and with whom your data may be shared.

b. Right of Access and Rectification You have the right to access your Personal Information through a “Data Subject Access Request.” If we are obliged to provide such information, it will be made available to you free of charge. Before doing so, we may request proof of identity and sufficient details about your interactions with us to locate your data. If the information we hold is inaccurate or incomplete, you have the right to request corrections.

c. Right to be Forgotten / Erasure You have the right to request the deletion of your Personal Information from our systems, subject to applicable legal and contractual obligations.

d. Right to Object and Restrict Processing You may object to or request that we restrict the processing of your Personal Information in certain circumstances.

e. Right to Data Portability You have the right to request the transfer of your Personal Information to another organisation, in a structured, commonly used, and machine‑readable format. This right applies only to information you have provided to us by consent or under contract, and where processing is carried out by automated means.

To exercise any of these rights, please contact us at sarang.aloni@circullence.com. We will make all reasonable and practical efforts to comply with your request, provided it aligns with applicable laws, regulations, and professional standards.

5. Data Security and Integrity

Circullence has implemented robust technical, administrative, and organisational measures to protect Personal Information from unauthorised access, loss, misuse, alteration, or destruction. These measures include, but are not limited to, encryption, access controls, secure network architecture, and regular security assessments.

While we strive to maintain the highest standards of security, no method of transmission or storage is entirely risk‑free. Access to your Personal Information is restricted to authorised personnel who require it to perform their duties, and such personnel are bound by confidentiality obligations.

We retain Personal Information only for as long as necessary to:

• Deliver our services and maintain ongoing client relationships.
• Comply with applicable laws, regulations, and professional obligations.
• Fulfil legitimate business purposes, including record‑keeping, dispute resolution, and enforcement of agreements.

6. Links to Other Sites

Please note that Circullence Solutions Pvt. Ltd. (“Circullence”) websites may contain links to external websites that are not operated or controlled by Circullence. These external sites are outside the scope of this Privacy Policy. We strongly encourage you to review the privacy policies of any such websites before providing them with your Personal Information.

If you register on any Circullence website and subsequently navigate to another Circullence‑owned website while still logged in, you agree that your Personal Information will be used in accordance with the privacy policy of the specific Circullence website you are visiting.

7. Changes to This Policy

Circullence may update or amend this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make updates, we will revise the “Last Updated” date at the top of this page. Our commitment to protecting the privacy of our website users will remain unchanged. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

This privacy policy was last modified on August 19^th, 2025.

This privacy policy dated August 19^th, 2025 is version 1.2.

8. Policy Questions and Enforcement

If you have any questions regarding Circullence’s privacy practices, this Privacy Policy, or our Cookies Policy — or if you wish to request this Privacy Policy in an alternative format — please contact us at:

• Contact Person: Sarang Aloni
• Contact Address: 33, Parimal House, Central Excise Colony, Chhatrapati Square, Nagpur, Maharashtra – 440015
• Phone: +91 9545802166
• Email: sarang.aloni@circullence.com

We will acknowledge your email within [14] days and seek to resolve your concern within one [1] month of receipt. Where the concern is complex or we have a large volume of concerns, we will notify you that the concern will take longer than one [1] month to resolve, and we will seek to resolve your concern within three [3] months of the concern being first raised. We may accept your concern (and in that case implement one of the measures set out in the ‘Your Rights’ section above), or we may reject your concern on legitimate basis.