Privacy policy

Last updated: May 30, 2026

This policy explains how Attri Edge (“we”, “us”) collects, uses, and protects your personal information when you visit attriedge.com or engage our services.

We are based in India and operate globally. We comply with India’s Digital Personal Data Protection Act, 2023 (DPDPA), and align with GDPR and CCPA principles for users from those jurisdictions.

Information we collect

Information you provide: Name, email, company, role, and any other details you provide via our forms, diagnostic intake, or correspondence
Information we collect automatically: IP address (anonymized for analytics), browser type, pages visited, referrer, timestamps
Information from third parties: None. We do not purchase or import contact lists

How we use your information

To respond to inquiries and deliver requested services
To send the GCC Compliance Brief newsletter (only if you subscribe)
To improve the site and content based on aggregated usage patterns
To comply with legal obligations

Cookies

We use:

Essential cookies — required for site functionality (none currently set; updated if we add login or cart features later)
Analytics cookies — Google Analytics 4, only if you accept via the cookie banner. IP is anonymized

See our cookie policy for details.

We do not sell, rent, or trade your information. We share data only with:

Service providers under contract who help us operate (e.g., email delivery, payment processing) — limited to what’s necessary
Legal authorities when required by law

Data retention

Inquiry / contact form data: retained 2 years from last contact
Newsletter subscribers: retained until you unsubscribe
Client engagement data: retained 7 years post-engagement per professional standards
Analytics data: retained 14 months (GA4 default)

Your rights

Depending on your jurisdiction, you may have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your data (subject to legal retention obligations)
Object to processing
Port your data

To exercise any right, email hello@attriedge.com. We respond within 30 days.

Cross-border transfers

As an India-based operator serving US/UK/AU clients, your data may be processed in India. We apply standard contractual clauses and DPDPA-compliant safeguards.

Security

We follow industry-standard security practices:

2FA on all internal accounts
Encrypted local storage
TLS for all data in transit
No production database access; no PII storage beyond business contact details
Minimal data principle: we don’t collect what we don’t need