Privacy Policy
Effective Date: October 24, 2023
Last Updated: September 2026
1. Introduction & Scope
Brilyant IT Solutions Pvt. Ltd., along with its group entities Brilyant MENA Venture LLC (UAE) and Brilyant Inc. (USA) (collectively, “Brilyant”, “we”, “us”, or “our”), operating at [https://brilyant.com](https://brilyant.com) and related regional domains, respects your privacy and is committed to protecting your personal data (“Data Principal”, “you”).
This Privacy Policy explains how we collect, use, store, share, retain, and delete personal data when you:
- Visit or interact with our website (brilyant.com)
- Fill out lead, contact, quote, or demo request forms
- Post comments or upload media to our website
- Interact with our marketing campaigns across platforms like Google, Meta, and LinkedIn
- Apply for career opportunities with us or engage in B2B transactions
Global & Regional Regulatory Compliance: This policy is drafted to comply with applicable data protection laws, including India’s Digital Personal Data Protection (DPDP) Act, 2023 and the rules thereunder, the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021), the California Consumer Privacy Act as amended by the CPRA (“CCPA”), and other applicable regional regulations.
2. Key Terms Used in This Policy
- Personal Data: Any data about an individual who is identifiable by or in relation to such data.
- Data Principal / Consumer: The individual to whom the personal data relates (e.g., website visitor, lead, job applicant, client contact).
- Data Fiduciary / Controller: Brilyant, as the entity that determines the purpose and means of processing personal data.
- Data Processor / Service Provider: A third party that processes personal data on Brilyant’s behalf and under our explicit instructions (e.g., CRM, hosting, analytics, or automation vendors).
- Consent: A free, specific, informed, unconditional, and unambiguous agreement to process personal data for a defined purpose, given through clear affirmative action.
3. Categories of Personal Data We Collect
We collect personal data directly from you, automatically through your interaction with our site, and through integrated digital advertising platforms.
| Category | Examples / Included Fields | Primary Source / Trigger |
|---|---|---|
| Identity & Contact Data | Name, corporate email address, phone number, job title, company name, location. | Form submissions, downloading resources, event RSVPs, or requesting quotes/demos. |
| Business & Professional Data | Company size, industry sector, IT infrastructure requirements, budget parameters. | Sales interactions, RFPs, and consultation inquiries. |
| Comments & Media Submissions | Name, email, comment text, IP address, user-agent string for spam detection. | Website blog or news comment section. |
| Technical & Usage Data | IP address, browser type/version, operating system, device identifiers, referring URLs, pages viewed, session time. | Automated web servers, log files, and analytics engines. |
| Cookies & Ad Tracking Data | Cookie IDs, Google Click ID (GCLID), Meta Pixel ID, LinkedIn Insight Tag ID. | Browser cookies, web beacons, and advertising tags. |
| Career Data | Resumes/CVs, work history, educational details, candidate references. | Job applications submitted via our Careers page. |
Embedded Media Warning: If you upload images to our website, avoid including embedded location data (EXIF GPS). Visitors can download and extract location details from public images hosted on the web.
Sensitive Personal Data: Brilyant does not knowingly collect sensitive personal data (e.g., biometrics, health records, financial account credentials, or government ID numbers) through our public website. If required for a specific business engagement, sensitive data will be gathered under a standalone, explicit notice and consent form.
4. Purposes of Processing Your Data
Your personal data is collected and processed strictly for specified, legitimate business purposes:
- Lead Generation & Sales Inquiries: Responding to inquiries, delivering quotes, managing demos, and processing software/hardware requests.
- B2B Marketing & Advertising: Sending promotional updates, company newsletters, and targeted advertisements across digital ad networks.
- Site Functionality, Support & Security: Optimizing website navigation, screening user comments through automated spam detection, and preventing cyber threats.
- Recruitment & Hiring: Evaluating qualifications and processing candidate applications for open roles within the Brilyant group.
- Legal & Regulatory Obligations: Maintaining audit trails, accounting ledgers, and statutory business records in accordance with law.
5. Consent Management & Withdrawal
Where required by law (such as under the DPDP Act, 2023), processing is grounded in your free, specific, informed, and explicit consent.
Granting Consent
Submitting a web form, posting a site comment, or accepting non-essential cookies via our preference center constitutes explicit authorization for Brilyant to store and process your information for the stated purpose.
Withdrawing Consent
You reserve the right to withdraw your consent at any time:
- Email Unsubscribe: Click the “Unsubscribe” link at the footer of any promotional email.
- Cookie Preference Center: Modify your settings using our website banner or through your browser settings.
- Direct Request: Email your request to hello@brilyant.com.
Processing Timeline: Upon receiving a verified request, we will stop processing your personal data within 7 business days, except where continued retention is required by law or for an active commercial contract. Withdrawal does not affect processing carried out prior to your request.
6. Digital Advertising, Analytics & Cookies
We use cookies, pixels, and web tracking technologies to ensure site function, measure campaign efficiency, and deliver relevant advertising:
- Essential Cookies: Mandatory for fundamental navigation, system security, and session management.
- Comment & Preference Cookies: Save your details (name, email) for up to 1 year so you do not need to re-enter them when leaving subsequent comments.
- Analytics Cookies: Deployed via platforms like Google Analytics to evaluate site traffic and visitor behaviors.
- Marketing Pixels & Advertising Tags: Integrated via Google Ads, Meta (Facebook/Instagram), and LinkedIn to run retargeting campaigns, measure conversion metrics, and deliver targeted advertising based on your interests.
Embedded Content from Third-Party Websites
Articles or pages on this site may feature embedded content (e.g., videos, maps, articles). Embedded content from third-party websites behaves as if you visited the external site directly. These external sites may collect data, deploy cookies, and track interactions—especially if you are logged into an account with that third party.
7. How We Share Your Personal Data
Brilyant does not sell or lease your personal data for monetary consideration. We share personal data strictly on a need-to-know basis with:
- Group Affiliates: Between Brilyant IT Solutions Pvt. Ltd., Brilyant MENA Venture LLC, and Brilyant Inc. for global account administration and service execution.
- Authorized Data Processors & Service Providers: Cloud infrastructure providers, CRM systems, email automation tools, and automated spam detection platforms operating under strict data processing agreements.
- OEM Technology Partners: Vendor partners (e.g., Dell, HP, Lenovo, Apple, Cisco) solely to fulfill specific hardware/software quotes, licensing, or enterprise support requests submitted by you.
- Advertising Networks: Google, Meta, and LinkedIn for campaign attribution, conversion tracking, and audience management.
- Legal & Regulatory Bodies: Statutory authorities, law enforcement agencies, or courts when mandated by law.
8. Cross-Border Data Transfers
Because Brilyant operates across India, the UAE, and the USA—and utilizes global cloud platforms (e.g., Google Cloud, Microsoft Azure, AWS)—your personal data may be stored or processed internationally.
When transferring data across international borders:
- We ensure destination entities and third-party vendors adhere to contractual safeguards at least as protective as this Policy.
- For transfers from India, we comply with the rules and country-restriction lists issued by the Central Government under the DPDP Act, 2023.
- For transfers involving other jurisdictions, we rely on standard data protection clauses and legally recognized international transfer frameworks.
9. Data Retention & Erasure Protocol
We retain personal data only for as long as necessary to fulfill the initial collection purpose or satisfy legal, accounting, and tax requirements:
| Data Type | Retention Period | Action Post-Expiration |
|---|---|---|
| Marketing & Lead Data | Up to 24 months from last active interaction, or until consent is withdrawn. | Permanent deletion / secure erasure. |
| Blog Comments & Metadata | Retained indefinitely to auto-approve follow-up comments. | Deleted upon valid Data Principal erasure request. |
| Client & Financial Records | Duration of active contract plus 7 years thereafter. | Anonymized or securely purged per tax & statutory rules. |
| Job Applicant Profiles | Up to 12 months post-recruitment (unless consent given for future openings). | Deleted from recruitment databases. |
| Analytics & Cookie Identifiers | Set per analytics vendor retention settings (typically 14 to 26 months). | Automatically overwritten or cleared. |
10. Data Security & Breach Notification
We enforce technical, administrative, and physical safeguards designed to protect personal data against unauthorized access, loss, or disclosure, including:
- Transport Layer Security (TLS 1.2+ / HTTPS) encryption for all website traffic and web forms
- Restricted, role-based access control to enterprise systems
- System monitoring, routine vulnerability checks, and automated threat detection
Breach Handling Protocol: In the event of a personal data breach impacting your rights, Brilyant will promptly take containment measures and notify the relevant statutory authorities (such as the Data Protection Board of India) and affected Data Principals within the timelines prescribed by law.
11. Your Rights as a Data Principal
Subject to statutory exemptions and identity verification, you hold the following rights:
- Right to Access: Request a summary of your personal data processed by us and the list of third parties with whom it has been shared.
- Right to Correction & Erasure: Ask us to update inaccurate or incomplete information, or permanently delete data that is no longer required for its original purpose.
- Right to Grievance Redressal: Access an efficient procedure to address concerns regarding the processing of your data.
- Right to Nominate (DPDP Act): Nominate another individual to exercise your privacy rights in the event of death or incapacity.
- Right to Opt-Out / Non-Discrimination: Opt out of targeted cross-context marketing without facing discriminatory service levels.
To exercise any of these rights, please write to us at hello@brilyant.com.
12. Children’s Privacy
Our website and enterprise offerings are intended exclusively for business professionals. We do not knowingly solicit or collect personal data from individuals under 18 years of age. If we learn that a minor’s information has been submitted without verified parental consent, we will delete that data immediately.
13. Policy Revisions
We may update this Privacy Policy periodically to reflect changes in our legal obligations, operational practices, or website features. We will post the revised version on this page with an updated “Last Updated” date. Significant changes will be accompanied by a banner notification or direct communication where appropriate.
14. Grievance Redressal & Contact Information
If you have questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact our designated Grievance Officer:
- Grievance Officer: Privacy & Data Protection Officer
- Company Name: Brilyant IT Solutions Pvt. Ltd.
- Email: hello@brilyant.com
- Toll-Free Phone: +91 1800 309 6500
- Registered Address:
Brilyant IT Solutions Pvt. Ltd., #401 & 410, 3rd Floor, Oxford Towers, New Municipal No. 139, Opp. Leela Palace, HAL Airport Road, Bangalore – 560008, Karnataka, India
If you reside in India and are unsatisfied with our grievance resolution, you have the right to lodge a formal complaint with the Data Protection Board of India (DPBI).