Privacy policy

Brilliant Eight (“we”, “us”) respects your privacy. This policy explains what personal data we collect through brillianteight.com, why we collect it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its rules. For the purposes of the DPDP Act, Brilliant Eight is the Data Fiduciary.

What we collect

• Enquiries — when you use our contact form: your name, email, phone (optional), company (optional), service interest, budget range and message.
• Job applications — name, email, phone, location, current company, experience, notice period, profile links, your résumé, cover letter and answers to screening questions.
• Waitlists — your email and, optionally, your name and city.
• Technical data — our hosting provider processes IP addresses and request logs to deliver the site and protect it from abuse. We do not use advertising or analytics trackers.

Why we use it

• To reply to your enquiry and discuss a potential engagement.
• To assess your job application and contact you about this and suitable future roles.
• To tell you when a product you joined the waitlist for launches.
• To keep the website secure, prevent spam and meet legal obligations.

We process your data on the basis of the consent you give when you submit a form. We never sell your personal data or use it for unrelated purposes.

Where it is stored and who can see it

Data is stored encrypted on Amazon Web Services in the Mumbai (ap-south-1) region. Access is restricted to authorised Brilliant Eight staff: hiring data only to our hiring team and administrators, and enquiries only to administrators. Our service providers (AWS for hosting and email delivery) process data on our behalf under contract.

How long we keep it

• Job applications and résumés: up to 12 months, unless you join us or ask us to delete them sooner.
• Enquiries: up to 24 months after our last conversation.
• Waitlist entries: until the product launches or you unsubscribe.

Your rights

Under the DPDP Act you can:

• access a summary of the personal data we hold about you and how we use it;
• ask us to correct, complete, update or erase your data;
• withdraw your consent at any time (this does not affect processing already carried out);
• nominate another person to exercise your rights in case of death or incapacity; and
• raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.

To exercise any right or raise a grievance, email privacy@brillianteight.com. We will respond within the timelines required by law.

Children

Our website is not directed at children under 18, and we do not knowingly collect their personal data.

Security

We use encryption in transit and at rest, least-privilege access, multi-factor authentication for administrators, and monitoring to protect your data. If a personal data breach occurs, we will notify affected people and the Data Protection Board as required.

Changes

We may update this policy. The “last updated” date above shows when it last changed.

Contact

Brilliant Eight, HITEC City, Hyderabad, Telangana 500081, India · privacy@brillianteight.com