Last updated: 15 October 2026

Website:https://nbgspl.com

1. Introduction

Nota Bene Global Services Pvt. Ltd. (“NBGSPL”, “we”, “our” or “us”) respects the privacy of individuals who visit our website or contact us through it.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, submit a general enquiry, apply for a job, or otherwise communicate with us through the website.

We aim to handle personal data responsibly, use it for the purposes described in this Policy, retain it according to applicable requirements and our documented practices, and take reasonable steps to protect it.

Privacy contact: info@nbgspl.com
Company address: C-50, First Floor, Sector 65 Noida(201301)

 

2. Scope of This Policy

This Policy applies to personal data processed in connection with our corporate website, including its general enquiry and job application forms and the website services described below.

Our website primarily provides company information and contact facilities. It does not currently provide customer registration, customer accounts, a customer dashboard or online payment processing.

This Policy should be read alongside our Cookie Policy and any specific privacy notice presented when you use a particular service.

 

3. Personal Data We Collect

The categories of personal data we may collect depend on how you interact with our website.

 

3.1 General enquiries

When you submit a general enquiry, we may collect:

• Name
• Email address
• Phone number, if provided
• The contents of your message and any personal information you choose to include

Please avoid including sensitive or unnecessary personal information in your enquiry.

 

3.2 Job applications

When you apply for a job through our website, we may collect:

• Name
• Email address
• Phone number
• Resume or CV and the information contained in it
• Other information you voluntarily provide in your application

Please provide information relevant to your application and avoid submitting unnecessary personal information.

 

3.3 Technical and security information

When you visit our website, technical information may be processed as part of operating, securing and maintaining the website. Depending on the service and request, this may include:

• IP address and connection information
• Browser, device and request-header information
• Website requests and technical error information
• Security and anti-spam signals
• Cookies or similar technical identifiers, where applicable

The exact information processed depends on the website component or third-party service involved.

 

4. How We Use Personal Data

We may use personal data for the following purposes:

• Responding to enquiries: To understand and respond to messages, questions and business enquiries.
• Recruitment: To receive, assess and manage job applications and communicate with applicants.
• Website operation: To deliver website functionality and route submitted information to the appropriate team.
• Security and spam prevention: To detect and reduce automated submissions, spam, abuse and potentially harmful activity.
• Technical maintenance: To diagnose errors, maintain performance, troubleshoot issues and protect the website.
• Legal and administrative purposes: To address applicable legal obligations, disputes, requests or security incidents where relevant.

We do not intend to use personal data for unrelated purposes without an appropriate basis and any notice or permission required under applicable law.

 

5. How We Handle Form Submissions

5.1 General enquiry form

General enquiries are submitted through Contact Form 7, with anti-spam protection, and routed to our designated general enquiry Zoho Mail mailbox. Access is restricted to the employee responsible for handling those enquiries.

The forms are configured not to intentionally store submissions in the website’s Flamingo submission-storage system. This does not mean that personal data is never technically processed by the website, hosting environment, email service or other components involved in submitting and delivering a form.

 

5.2 Job application form

Job applications are submitted through Contact Form 7, with anti-spam protection, and routed to a separate HR Zoho Mail mailbox. Access to that mailbox is restricted to authorised HR personnel.

We use the information provided to manage the recruitment process and communicate with applicants.

 

5.3 Email and service providers

We use Zoho Mail to receive and manage form submissions. Information sent through the website may therefore be processed by the email service and the infrastructure required to deliver and store those messages.

The applicable service providers’ own privacy terms and practices may also apply to their processing of information.

 

6. Consent and Withdrawal

Where our processing of personal data is based on consent, we will seek consent in accordance with applicable law and explain the purpose for which the data is required.

You may withdraw consent by contacting info@nbgspl.com and identifying the relevant enquiry, application or processing activity. Where consent is the basis for processing, we will address the withdrawal request and cease the relevant processing within the applicable timeframe, unless continued processing is required or authorised by law.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It may also affect our ability to provide a service or continue an activity that depends on the relevant data.

We will provide a withdrawal method that is reasonably accessible and, where required by applicable law, comparable in ease to the method used to give consent.

 

7. Google reCAPTCHA v3 and Anti-Spam Protection

Our website uses Google reCAPTCHA v3 on the general enquiry and job application forms to help distinguish genuine submissions from automated or abusive activity.

For this purpose, Google reCAPTCHA may process technical and behavioural signals, which can include IP address, browser or device information, request data, interactions with the page, and cookies or similar identifiers where applicable.

This processing supports the security and integrity of our forms. Information handled by Google is also subject to Google’s applicable terms and privacy documentation.

Configuration note for internal review: Google reCAPTCHA v3 has been identified as the configured version. The precise Google account/project configuration, provider-side retention and any additional processing details have not yet been fully documented in this audit.

 

8. Google Maps

Our contact page uses Google Maps to display our office location and help visitors locate us.

When a visitor loads or interacts with the map, the browser may connect to Google services. Google may receive technical information associated with those requests, such as the visitor’s IP address, browser information and request metadata.

Google Maps is provided by a third party and is subject to Google’s applicable terms and privacy practices. Our use of the map is intended to display our office location; this statement does not establish that every possible location-related signal is absent from all Google processing.

 

9. Cookies and Similar Technologies

Our website and its components may use cookies or similar technologies for website functionality, security, performance, caching or third-party services.

The cookies and technical storage used may vary depending on the page visited, the services loaded and the visitor’s interaction with the website. Google reCAPTCHA and other embedded services may use their own technical identifiers or cookies where applicable.

Please refer to our Cookie Policy for further information about cookies and similar technologies identified on the website, their purposes and any available controls.

We do not make a blanket claim that the website never uses cookies or similar technologies. The final Cookie Policy should reflect actual configuration and testing.

10. Website Hosting, Security and Technical Logs

Our website is hosted using GoDaddy shared hosting. Hosting infrastructure may process technical information required to serve website requests, maintain the service and support security and troubleshooting.

According to GoDaddy’s written policy as confirmed for this audit, GoDaddy rotates shared-hosting log files every 7 days to remove stale data. This is the stated rotation period for those shared-hosting logs; it is not a statement about the retention period of all personal data processed by NBGSPL or by other providers.

WordPress components, email services, security tools and third-party integrations may handle information under their own operational processes. Their records and retention periods may differ from GoDaddy’s shared-hosting log rotation.

We use technical and organisational measures intended to restrict access and protect the website and information handled through it.

 

11. Data Retention

We retain personal data for the period reasonably required for the purpose for which it was collected, subject to applicable legal obligations, legitimate business requirements and the retention practices described below.

 

11.1 General enquiries

General enquiry emails are subject to our current internal retention practice: deletion after 30 days of inactivity. The practice includes deleting the relevant messages from the mailbox and its Trash/Bin.

11.2 Job applications

Job application emails are subject to our current internal retention practice: deletion one year after the relevant position is filled. The practice includes deleting the relevant messages from the mailbox and its Trash/Bin.

 

11.3 Hosting logs

GoDaddy’s written shared-hosting policy, as confirmed for this audit, states that log files are rotated every 7 days. This period applies to those GoDaddy shared-hosting logs only.

 

11.4 Website backups

Website backups may contain website files and database information. Our current practice is to create encrypted backups manually, generally following major website changes, and store them on the company’s local system. One backup is generally retained at a time and replaced when a newer backup is created.

A fixed backup schedule and a separate formal backup-retention period have not yet been established. Deletion from an active mailbox or website database should not be interpreted as proof that the same information has already been removed from every backup.

We will review and document backup retention and deletion practices as part of our ongoing privacy and security work.

 

11. Your Privacy Rights and Grievance Redressal

Subject to applicable law and its commencement, you may have rights relating to access to information about your personal data, correction and updating, erasure, withdrawal of consent where applicable, grievance redressal, and nomination of another person to exercise rights in the event of death or incapacity.

To submit a privacy request or raise a grievance, contact info@nbgspl.com. Please provide enough information for us to understand your request. We may verify your identity before taking action.

We will review and respond to requests and grievances in accordance with applicable law and our documented procedures. If you are dissatisfied with our response or the handling of your grievance, you may use the applicable escalation mechanism available under Indian law, including the Data Protection Board of India where applicable.

Responsible privacy contact: NBGSPL must designate the person responsible for responding to privacy communications before this policy is published.
Official escalation details: Confirm the applicable Board complaint process and link before publication.

 

12. Sharing and Disclosure of Personal Data

Personal data may be processed by service providers where required to operate the website or perform the functions described in this Policy. Depending on the interaction, these providers may include:

• Zoho Mail, for receiving, delivering and storing enquiry and recruitment emails.
• Google reCAPTCHA, for form security and anti-spam protection.
• Google Maps, for displaying the office location.
• GoDaddy, for website hosting and associated infrastructure.
• Other website service providers, where their involvement is confirmed and necessary for the website’s operation.

We aim to limit access to personal data to authorised individuals and relevant service providers who need it for the applicable purpose. We may also disclose information where required by applicable law or in connection with valid legal processes, security incidents or the establishment or defence of legal claims.

Open verification item: WP Compress is installed, but its installation-specific data flow—including whether files or technical information are transmitted to external infrastructure—has not yet been confirmed. This Policy must be reviewed and amended if the investigation establishes additional relevant processing or recipients.

 

13. Data Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

Reported measures include HTTPS/SSL for website connections, multi-factor authentication for relevant administrative access, restricted website administration, controlled access to email mailboxes, hosting security monitoring and encrypted local website backups.

No website, transmission method or storage system can be guaranteed to be completely secure. We continue to review and improve our security and privacy practices.

 

14. Personal Data Security Incidents

If we become aware of a personal data breach affecting personal data processed by or on behalf of NBGSPL, we will investigate the incident, take appropriate containment and remediation measures, assess its impact, and make notifications to affected individuals and the relevant authority where required by applicable law.

The information provided and timing of any notification will follow the requirements applicable to the incident. We maintain internal incident-handling practices and are formalising a written personal-data breach-response procedure.

 

15. Your Privacy Requests and Choices

You may contact us to raise a question or request concerning personal data submitted through our website. Depending on applicable law and the circumstances, requests may concern access to information, correction, updating, deletion, withdrawal of consent where applicable, or another available privacy right.

To submit a request, contact us using the details below. We may need to verify your identity before acting on a request. Where appropriate, we may ask you to write from the email address associated with the original enquiry or application, or use another reasonable verification method if that address is no longer accessible.

We will review requests and respond in accordance with applicable legal requirements and our internal procedures. Some information may need to be retained where required or permitted by law, or where necessary to address a legitimate legal or security matter.

Privacy contact: info@nbgspl.com

 

16. Children’s Privacy

Our website is intended for general corporate and business communication and recruitment. It is not designed as a service directed specifically at children.

Please do not submit personal data about a child through the website unless it is necessary and you are authorised to provide it. If you believe that a child has submitted personal data inappropriately, contact us so that we can review the matter.

 

17. Third-Party Websites and Services

Our website may contain or use third-party services and integrations. When you interact with those services, the relevant provider may process information under its own terms and privacy policy.

We encourage visitors to review the privacy information of third-party providers where relevant. This Policy describes NBGSPL’s website practices and does not replace the privacy policies of independent third parties.

 

18. Changes to This Privacy Policy

We may revise this Policy when our website, data-handling practices, service providers, retention practices or applicable legal requirements change.

The revised version will be published on this page with an updated “Last updated” date. We encourage visitors to review this page periodically.

 

19. Contact Us

For questions, concerns or requests relating to this Privacy Policy or personal data handled through our website, contact:

Nota Bene Global Services Pvt. Ltd.
Website: https://nbgspl.com
Email: info@nbgspl.com
Company address: C-50, First Floor, Sector 65 Noida(201301).

Please include sufficient information for us to understand your query. We may contact you to verify your identity or clarify the request before responding.