Privacy Policy
Effective Date: March 2026 · Last Updated: March 2026
1. Introduction
This Privacy Policy explains how BPR Hub Private Limited, operating as PinnacleQMS ("we", "us", "our"), collects, uses, discloses, and protects your personal information when you visit pinnacleqms.com or use our services. We are committed to protecting your privacy in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the rules framed thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 where applicable.
2. Information We Collect
Contact Form Submissions
When you submit a consultation request or contact form, we collect your name, email address, company name, phone number (if provided), and the content of your message. This information is collected solely to respond to your consultation request and to communicate with you about our ISO consulting services. We retain this information for up to two years from the date of submission.
Website Analytics — Leadfeeder by Dealfront
We use Leadfeeder, a business visitor identification service provided by Dealfront, to identify companies visiting our website based on IP address data. Leadfeeder collects company-level information such as the company name associated with the IP address, pages visited, and time spent on the site. Leadfeeder does not collect personal names, email addresses, or other individually identifiable information. This data helps us understand which organizations are interested in our ISO consulting services. Leadfeeder is GDPR compliant and processes data in accordance with European and Indian privacy standards including the DPDP Act, 2023.
Google Analytics
We use Google Analytics to collect anonymized visitor data including pages viewed, traffic sources, device type, browser type, and general geographic location. Google Analytics does not collect personally identifiable information. IP addresses are anonymized before processing. This data is used solely for website performance analysis and to improve user experience.
3. Information We Do Not Collect
PinnacleQMS does not collect payment or credit card information, social insurance numbers (SIN) or social security numbers, health or medical information, passwords or authentication credentials, or any sensitive personal information beyond what is described in this policy.
4. How We Use Your Information
We use the information we collect to respond to consultation requests and inquiries, to provide ISO consulting services as agreed upon in separate service agreements, to understand which organizations are interested in our services through aggregated analytics, to improve our website content and user experience, and to comply with legal obligations under Indian law.
5. Third Party Services
We use the following third party services in the operation of our website. Leadfeeder by Dealfront provides visitor analytics and is based in Finland and Germany with GDPR compliance. Google Analytics provides website analytics and processes data in accordance with Google's privacy policies. Resend provides email delivery services for transactional communications. Sanity CMS provides content management for our blog and website content. Vercel provides website hosting with servers located in the United States and other global locations. Each of these service providers has their own privacy policy governing how they handle data. We encourage you to review their respective policies.
6. Cookies and Tracking Technologies
Our website uses cookies for essential website functionality, analytics cookies through Google Analytics to understand website usage, and tracking cookies through Leadfeeder to identify company-level website visitors. We do not use advertising cookies, third party advertising trackers, or cross-site tracking technologies. Most web browsers allow you to control cookies through their settings. Disabling cookies may affect certain website functionality.
7. Your Rights Under the DPDP Act, 2023
Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the right to access the personal data we process about you, to request correction, completion, updating, or erasure of inaccurate or outdated personal data, to nominate another individual to exercise your rights in the event of your death or incapacity, to withdraw your consent to the processing of your data at any time where processing is based on consent, and to file a grievance with us and, if unresolved, with the Data Protection Board of India established under the DPDP Act. To exercise any of these rights, contact us at [email protected]. We will respond to your request within a reasonable period as required under the DPDP Act and applicable rules.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encrypted data transmission via HTTPS, secure hosting infrastructure, access controls limiting who can view personal data, and regular review of our data handling practices.
9. Data Retention
Contact form submissions and related correspondence are retained for up to two years. Website analytics data is retained according to the default retention periods of Google Analytics and Leadfeeder. We periodically review and delete personal information that is no longer necessary for the purposes for which it was collected.
10. International Data Transfers
Our website is hosted on Vercel, which operates servers in the United States and other global locations. By using our website, you acknowledge that your data may be processed in jurisdictions outside of India. We ensure that any international transfers of personal information are conducted in compliance with the DPDP Act, 2023 and applicable rules.
11. Children's Privacy
Our website and services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. The updated policy will be posted on this page with a revised effective date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at: BPR Hub Private Limited operating as PinnacleQMS Vijayawada, Andhra Pradesh, India [email protected] pinnacleqms.com