Global Privacy Policy
CandorWorks is committed to rigorous data ethics, deterministic verification, and full compliance with GDPR, CCPA/CPRA, UK GDPR, CASL, LGPD, and international privacy standards.
1. Overview & Data Controller Identification
This Privacy Policy describes how CandorWorks Private Limited, CandorWorks, their subsidiaries, and operating entities (collectively, "CandorWorks", "we", "us", or "our") collect, process, maintain, protect, and share professional business information.
CandorWorks acts as an independent Data Controller with respect to the personal data processed through our direct digital properties (such as candorworks.com and research publications) and as a Data Processor / Service Provider when executing B2B demand generation, precision ABM campaigns, and content syndication programs on behalf of our enterprise technology clients.
Global Head Office • Pune, India
4th Floor, Westend Center 3, Aundh, Pune – 411007, Maharashtra, India.
Middle East Entity • Dubai, UAE
Commercial Building 5, Office desk – DMC-BLD05-VD-G00-774, Dubai Media City, Dubai, United Arab Emirates.
United Kingdom Office • London, UK
Bloomsbury Square, London WC1B 4DA, United Kingdom
North America Office • Boston, USA
1 Lincoln St, Boston, MA 02111, United States
2. Scope & Target Audience
Our services, publications, and intelligence platforms are strictly designed and intended for business-to-business (B2B) professionals, enterprise buying committee members, marketing executives, and corporate technology buyers.
We do not market to, solicit, or knowingly collect data from individual consumers, children, or minors under the age of 18. If you believe a minor has submitted personal information to our systems, contact our DPO immediately for prompt erasure.
3. Categories of Information We Collect
To provide verified B2B demand generation, content syndication, and intent telemetry, CandorWorks collects and processes standard professional business contact details:
- Full Name and Professional Salutation
- Corporate / Business Email Address
- Job Title, Seniority Level, and Functional Department
- Employing Company Name and Corporate Domain
- Direct Business Phone Number or Corporate Switchboard Extension
- Public LinkedIn Profile URL and Company Headquarters Location
- Corporate Autonomous System Number (ASN) & Corporate IP Address
- Whitepaper and research asset download timestamps
- Custom qualifying survey responses (e.g., timeline, tech stack)
- Double opt-in verification timestamps & consent logs
- Browser user-agent, operating system, and referrer telemetry
CandorWorks strictly does NOT collect or process sensitive personal information, including government identification numbers, Social Security Numbers, banking details, health records, biometric identifiers, political opinions, religious beliefs, or precise real-time personal GPS geolocation.
4. Sources of Information & Deterministic QA
We gather business information from authorized, transparent sources:
5. Lawful Basis for Processing (GDPR & UK GDPR Article 6)
Under European Union and United Kingdom data protection laws, we rely on the following lawful bases:
We process professional business contact data for commercial B2B marketing, account-based intelligence, and fraud prevention where our interests are balanced against the data subject’s fundamental rights. We conduct rigorous Legitimate Interest Assessments (LIAs) and honor every opt-out unconditionally within 48 hours.
For sponsored content downloads and direct email marketing under the ePrivacy Directive / PECR, we obtain freely given, specific, informed, and unambiguous opt-in consent with clear sponsor disclosures before transferring lead details to campaign sponsors.
To deliver contracted services to enterprise clients, verify billing accuracy, maintain global suppression registers, and comply with tax and statutory recordkeeping mandates.
6. How We Use Business Data
We use collected professional records for the following specific commercial purposes:
Content Syndication Delivery
Connecting verified technology decision-makers with relevant vendor research and technical whitepapers.
Account-Based Marketing (ABM)
Orchestrating multi-stakeholder awareness campaigns across target enterprise buying committees.
CRM Data Hygiene & Enrichment
Updating outdated company roles, standardizing job hierarchies, and eliminating bounced email records.
Global Suppression Enforcement
Maintaining an immutable suppression registry to ensure opted-out contacts are never re-contacted.
7. Cookies, Web Beacons & Tracking Preferences
We use first-party and third-party cookies, pixel tags, and local storage tokens to ensure secure site operation, analyze aggregated telemetry, and measure marketing performance. We honor Global Privacy Control (GPC) signals sent by modern web browsers.
Cookie Consent & Privacy Preferences
Configure your tracking preferences for your current session on candorworks.com.
Required for secure authentication, CSRF tokens, and accessibility preferences. Cannot be disabled.
Aggregated visit statistics, page load latency, and navigation bounce telemetry.
Remembers dark/light mode preference, saved calculators, and interactive view state.
Anonymous reverse-IP lookup for corporate account matching and relevant B2B case study display.
8. Data Sharing, Clients & Subprocessors
We do not sell, rent, or trade personal data to open-web ad brokers or data aggregators. Data is shared exclusively under strict Data Processing Agreements (DPAs) with:
Amazon Web Services (AWS)
Secure hosting, serverless compute, and encrypted data storage (AES-256)
Google Cloud Platform (GCP)
Audience telemetry clustering, log management, and pipeline verification
Snowflake Inc.
Secure multi-tenant data governance, deduplication, and suppression indexing
Salesforce & Marketo Integration Gateways
Secure client lead routing upon explicit prospect content download consent
9. International Data Transfers & Standard Contractual Clauses
As a global B2B revenue operations organization with operating hubs across India, North America, and Europe, data may be transferred, accessed, and processed internationally.
For data transfers originating from the European Economic Area (EEA), the United Kingdom, or Switzerland to non-adequate third countries, CandorWorks implements the European Commission’s Standard Contractual Clauses (SCCs Module 1 and Module 2), supplemented by rigorous technical safeguards (AES-256 field-level encryption, role-based access control, and zero persistent local caching).
10. Security Safeguards & Data Retention
We maintain an enterprise information security management system (ISMS) certified to ISO/IEC 27001:2022 with comprehensive third-party security audits and zero-trust access controls.
Technical Safeguards
- AES-256 encryption at rest; TLS 1.3 in transit
- Multi-Factor Authentication (MFA) required on all internal tools
- 24/7 SIEM monitoring and automated intrusion detection
- Annual third-party black-box and white-box penetration testing
Retention Lifecycle
- B2B Contact Records: Re-verified every 90 days; deleted if stale
- Campaign Engagement Logs: Retained for 24 months for audit SLAs
- Suppression Register: Maintained indefinitely to honor permanent opt-outs
- DSAR Audit Logs: Retained for 3 years for statutory defense
11. Your Global Privacy Rights (GDPR / CCPA / CASL)
Depending on your geographical jurisdiction, you have statutory rights regarding your personal information:
Data Subject Access Request (DSAR) & Opt-Out Engine
Use this automated self-service portal to submit an access, update, deletion, or suppression request. Our Data Governance team executes all verified requests within 48 business hours.
13. Data Protection Officer & Regulatory Supervisory Contacts
If you have unresolved concerns or wish to lodge a formal complaint regarding our data handling practices, you may reach out directly to our appointed Data Protection Officer or your local supervisory authority: