1. Who we are
Lily Asia Private Limited is a company incorporated in India. Our corporate details and contact information are set out at the end of this Policy.
2. Scope
This Policy applies to personal data processed through www.lilyinasia.com, related web pages, enquiry forms, email communications, recruitment forms, event or newsletter registrations, and other digital interactions controlled by Lily Asia Private Limited. Separate engagement documents may govern information processed during a client assignment.
3. Personal data we may collect
- Identity and contact information, such as name, organisation, designation, email address, telephone number and correspondence address.
- Enquiry and professional information, including the subject of an enquiry, project requirements, sector interests, attachments and information shared in meetings or communications.
- Recruitment information, such as curriculum vitae, qualifications, employment history, portfolio, references, compensation expectations and interview notes.
- Technical and usage information, including IP address, browser type, device information, operating system, referring pages, timestamps, security logs and website interaction data.
- Cookie and preference information, including consent choices, language settings, analytics preferences and communication preferences.
- Information obtained from publicly available sources, professional networks, referrals, event organisers or business contacts, where lawful and relevant.
Please do not submit passwords, banking credentials, government identification numbers, health information, biometric information or other sensitive information through a general website form unless we have specifically requested it through an appropriate secure channel.
4. How we collect personal data
- Directly from you when you complete a form, send an email, call us, attend an event, share a proposal request or apply for a position.
- Automatically through cookies, server logs and similar technologies when you use the website.
- From third parties such as referral sources, professional platforms, service providers, event partners and publicly available records.
5. Purposes of processing
- To respond to enquiries, understand requirements and communicate regarding potential or existing assignments.
- To prepare proposals, quotations, expressions of interest, presentations and engagement documentation.
- To deliver and administer consulting, advisory, technical, planning, research and related professional services.
- To operate, secure, troubleshoot, maintain and improve the website and digital infrastructure.
- To measure website performance and understand aggregated usage, where analytics are enabled.
- To manage recruitment, internships, vendor relationships, partnerships and events.
- To send updates, invitations or marketing communications where consent or another lawful basis is available.
- To prevent fraud, misuse, cybersecurity incidents and unauthorised access.
- To comply with legal, regulatory, contractual, audit, accounting and record-keeping obligations.
- To establish, exercise or defend legal rights and claims.
6. Grounds for processing
We process personal data for lawful purposes. Depending on the context, processing may be based on your consent, information voluntarily provided for a specified purpose, steps requested before entering into a contract, performance of a contract, compliance with law, protection of rights and security, or another ground permitted under applicable law. Where consent is the basis, it may be withdrawn using the contact details below; withdrawal does not affect processing already carried out lawfully.
7. Sharing of personal data
We may share personal data only where reasonably necessary and subject to appropriate safeguards with:
- Website hosting, cloud, email, analytics, cybersecurity, document management and other technology service providers.
- Professional advisers, auditors, insurers, banks, consultants, subcontractors and specialists supporting our operations or assignments.
- Clients, consortium members, joint-venture partners, project stakeholders or public authorities where relevant to an enquiry or assignment and permitted by law or agreement.
- Government, regulatory, judicial, law-enforcement or statutory authorities where disclosure is required or lawfully requested.
- A purchaser, investor, successor or adviser in connection with a proposed or completed restructuring, merger, acquisition or transfer of business, subject to confidentiality safeguards.
We do not sell or rent personal data for monetary consideration.
8. International processing
Our service providers or project teams may process information in locations outside India. Where personal data is transferred or made accessible across borders, we apply contractual, organisational and technical safeguards and comply with restrictions or requirements under applicable law.
9. Cookies and similar technologies
The website may use necessary cookies for security and basic operation. Analytics, functional or marketing technologies are used only as described in our Cookie Policy and, where required, after obtaining consent. You may change non-essential cookie choices through the cookie preference tool, if enabled.
10. Data security
We use reasonable technical and organisational measures designed to protect personal data, including access controls, secure configuration, encryption or equivalent safeguards where appropriate, logging, backups, vendor controls and incident-response procedures. No internet transmission or storage system can be guaranteed to be completely secure.
11. Retention
We keep personal data only for as long as reasonably necessary for the stated purpose, for an active business relationship, or to meet legal, contractual, security and record-keeping requirements. Indicative periods are set out in our Data Retention and Deletion Policy.
12. Your choices and rights
Subject to applicable law and verification, you may request information about processing, access, correction, completion, updating or erasure of personal data; withdraw consent; object to or restrict certain processing where available; nominate another person where applicable; and raise a grievance. Details are provided in our Data Principal Rights and Grievance Redressal Procedure.
13. Children
The website is intended for business and professional audiences and is not directed to persons under eighteen years of age. We do not knowingly seek personal data from children through the website. If you believe a child has submitted personal data, contact us so that appropriate action can be taken.
14. Third-party websites
Links, embedded content or social-media features operated by third parties are governed by their own terms and privacy practices. We do not control those services.
15. Changes to this Policy
We may update this Policy to reflect legal, operational or technology changes. The revised version will be posted with an updated effective date. Material changes may be highlighted through the website or an appropriate communication.
16. Privacy contact and grievance officer
Privacy and grievance communications may be addressed to: Compliance and Privacy Contact, Lily Asia Private Limited, House No. 5/5, Saloli, Tiwarbhat, Gun Naka, Saloli, Vasai, Thane - 401201, Maharashtra, India; email: business@lilyinasia.com; telephone: +91 96737 35235. Please use the subject line “Privacy Request” or “Privacy Grievance” and include enough information for us to identify the relevant interaction.