This Privacy Policy (“Policy”) governs your access to, use of, and interaction with the website https://thinktaraglobal.com/ (“website”, “platform”) and the services offered by THINKTARA GLOBAL (“THINKTARA“, “Company“, “we“, “us“, or “our“).
At THINKTARA GLOBAL, we deeply value privacy and data protection and are fully committed to safeguarding the personal information of our website visitors, business clients, partners, and prospects. As a global B2B lead generation and marketing solutions provider, we collect, process, and use certain types of personal and business-related data in the course of our operations, including through digital marketing, content syndication, telemarketing, and intent-based outreach.
This Policy outlines how we collect, use, disclose, store, and protect your personal data when you interact with our website or engage our services. We ensure that all data is handled with utmost integrity, transparency, and in compliance with applicable data protection laws such as the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Personal Information Protection and Electronic Documents Act (PIPEDA), and other relevant global regulations.
Our privacy practices are designed not only to ensure legal compliance but also to uphold your trust while enabling us to deliver intelligent, high-quality B2B lead generation services with a data-driven and personalized approach. This Policy also reflects our ongoing efforts to align with leading industry standards, including those set out under ISO/IEC 27001 and ISO/IEC 27701, for enhanced information security and privacy management.
1. Definition
- 1.1. “Privacy Policy” refers to this document, which governs the collection, processing, storage, disclosure, and protection of Personal Data when users access or interact with the website and services of THINKTARA GLOBAL.
-
- 1.2. “Company” refers to THINKTARA GLOBAL, including its website (https://thinktaraglobal.com/), services, and all related operations carried out under its legal and commercial identity. The terms “THINKTARA,” “we,” “us,” or “our” shall be used interchangeably to refer to the Company.
-
- 1.3. “Data” or “Personal Data” refers to any information that directly or indirectly identifies an individual or business contact, including but not limited to names, professional titles, email addresses, phone numbers, IP addresses, job roles, company information, location data, and behavioural insights collected in the course of our lead generation activities.
-
- 1.4. “Information” includes Personal Data as well as non-personal, technical, analytical, or aggregated details collected through the use of our website or services. This may include browsing behaviour, device identifiers, engagement metrics, preferences, communication records, and other forms of digital or telephonic interaction.
-
- 1.5. “User”, “You,” or “Your” refers to any individual, representative, or organization that accesses the THINKTARA website, submits inquiries, subscribes to our marketing services, or otherwise interacts with our platform.
-
- 1.6. “Services” refers to the full suite of B2B lead generation solutions offered by THINKTARA, including but not limited to content syndication, email marketing, telemarketing, appointment setting, intent marketing, ABM targeting, database enhancement, and customized marketing programs.
-
-
2. This Privacy Policy Applies To:
- 2.1. Individuals or entities visiting or accessing THINKTARA GLOBAL’s website and interacting with its content or contact forms.
-
- 2.2. Prospects, clients, marketing professionals, and decision-makers who subscribe to or inquire about our B2B lead generation services.
-
- 2.3. Business clients, vendors, and third-party partners involved in collaborations, data processing, or service execution with THINKTARA GLOBAL.
-
- 2.4. Individuals communicating with THINKTARA GLOBAL via phone, email, messaging platforms, or any other communication channels for sales, support, or campaign-related queries.
By accessing our website or availing any of our services, you acknowledge and consent to the collection and processing of your Personal Data as outlined in this Privacy Policy. If you do not agree with this Policy, you are advised to discontinue the use of our website and services.
3. Extent of Information Collected
We collect a wide range of information to effectively deliver our B2B lead generation, marketing, and sales acceleration services. The extent of information collected depends on your interaction with our website, engagement with our campaigns, or communication with our teams.
The information we may collect includes, but is not limited to:
- 3.1. Personal and Professional Identifiers
- Full Name
- Job Title/Designation
- Company Name
- Business Email Address
- Contact Number (Business/Mobile)
- LinkedIn or Social Media Profiles (when publicly available)
- 3.2. Business and Demographic Information
- Industry and Sector
- Company Size, Revenue, and Location
- Geographic Region (e.g., country, time zone)
- Role in Purchase Decisions (e.g., influencer, decision-maker)
- 3.3. Behavioural and Intent Data
- Response to email campaigns (opens, clicks, forwards)
- Participation in surveys, webinars, or gated content downloads
- Web behaviour (e.g., time spent on pages, resources accessed)
- Marketing engagement history
- Buyer intent signals derived from third-party platforms
- 3.4. Communication & Interaction Records
- Inquiries submitted through web forms
- Email or phone communications with our sales/marketing teams
- Appointment booking details and follow-up notes
- Notes gathered during telemarketing qualification
- 3.5. Technical Data (Automatically Collected)
- IP address and browser type
- Device information and operating system
- Access time, referral source, and geographic location
- Cookies, tags, and other tracking technologies for analytics and personalization
- 3.6. Third-Party and Publicly Available Information
- Data appended from third-party marketing databases
- Business information obtained from public directories or professional platforms
- Verification and enrichment information from authorized data partners
We only collect such information to the extent necessary to execute, personalize, and optimize our marketing campaigns and lead generation services. Where legally required, we ensure that personal data is collected based on explicit consent or legitimate business interest in accordance with applicable data protection laws.
4. Use of Information
THINKTARA GLOBAL uses the information collected to support and enhance our lead generation, marketing, and business engagement efforts in a secure, ethical, and lawful manner. The primary purposes for which we use your personal and business-related data include:
- 4.1. Lead Generation and Marketing Services
-
- We use your information to deliver and optimize our B2B services, including content syndication, email marketing, telemarketing, appointment setting, and account-based marketing. This includes identifying and profiling decision-makers for targeted outreach, sending relevant marketing communications (email or phone), scheduling sales appointments or product/service demonstrations, and matching you with appropriate client campaigns based on your interests and role.
- Compliance Note: All outreach activities are conducted in accordance with applicable data protection and marketing laws, including the GDPR (Europe), CCPA (California), PIPEDA (Canada), TCPA (USA), and India’s Digital Personal Data Protection (DPDP) Act. Where required, we obtain prior opt-in consent before initiating contact, especially for telemarketing or email campaigns.
-
- 4.2. Personalization and Campaign Optimization
- We analyse behavioural and demographic data to customize the content, timing, and targeting of our communications, improve user experience across digital platforms, and evaluate campaign effectiveness and engagement levels.
- This helps ensure that we only present offers or solutions that are relevant to your business interests, industry, and buying stage.
-
- 4.3. Data Enrichment and Validation
- We may enhance or verify the information you provide using reliable third-party data partners or publicly available business directories. This ensures data accuracy and relevance when matching with client campaigns.
- We take care to ensure that any third-party data usage complies with privacy regulations, including data residency and cross-border transfer requirements outlined under GDPR and other applicable laws.
-
- 4.4. Communication and Support
- We use your data to respond to inquiries, follow up on campaign interactions, and provide real-time customer support or consultation services.
-
- 4.5. Legal and Regulatory Compliance
- We may process and retain your data as necessary to comply with applicable legal obligations, respond to lawful requests from regulatory authorities or courts, enforce our terms of use and protect our rights or the rights of others, and maintain internal records required for audit, security, or data protection obligations.
- THINKTARA GLOBAL implements strong governance policies, access controls, and encryption measures consistent with ISO/IEC 27001 and ISO/IEC 27701 standards to ensure protection of personal data under all relevant jurisdictions.
-
- 4.6. Consent and Preference Management
- Provide clear opt-in/opt-out options
- Allow you to update your communication preferences
- Respect “Do Not Call” and “unsubscribe” requests in accordance with applicable laws
5. Sharing of Information
We do not sell your personal data. However, in the ordinary course of delivering our services, THINKTARA GLOBAL may share information with third parties under strict confidentiality, contractual, and compliance controls. Such sharing is done only to the extent necessary to fulfil our business obligations or comply with legal requirements. Your information may be shared in the following circumstances:
- 5.1. With Our Clients (Business-to-Business Context)
- We may share relevant and pre-qualified information (e.g., name, designation, business email, industry, company details) with our clients in connection with active marketing or appointment-setting campaigns, to facilitate a direct sales conversation based on your expressed interest or behaviour, only after such data has been verified through ethical and lawful means.
- All client relationships are governed by data processing agreements (DPAs) that require compliance with applicable data protection laws including GDPR, CCPA, PIPEDA, and India’s DPDP Act.
- 5.2. With Service Providers and Data Processors
- We engage trusted third-party vendors and service providers to support our operations, including cloud storage and CRM platforms, marketing automation tools, email delivery services, analytics providers, and call centres for telemarketing.
- These third parties are granted access only to the data strictly necessary to perform services on our behalf and are contractually bound to:
- Use the data solely as per our instructions
- Maintain strict confidentiality and security
- Comply with relevant data protection laws
- 5.3. For Legal, Regulatory, or Security Purposes
- We may disclose your data if required to:
- Respond to lawful requests by public authorities or regulators
- Enforce our agreements or investigate potential violations
- Prevent or address fraud, misuse, or security threats
- Comply with any applicable law, regulation, or legal process
- We take special care when handling data requests that involve cross-border disclosures, particularly under GDPR (EU to non-EU transfers), CCPA (California rights), and India’s DPDP Act once in force.
- 5.4. Business Transfers
- In the event of a merger, acquisition, asset sale, or restructuring, your data may be transferred as part of the business assets. In such cases, we will ensure that the acquiring party is subject to the same data protection obligations outlined in this Policy.
- 5.5. With Your Consent
- Where required by law, we will share your information with third parties only after obtaining your explicit consent. You may withdraw this consent at any time, subject to contractual or legal limitations.
6. International Data Transfer
- 6.1. Given the global scope of our services and client base, THINKTARA GLOBAL may transfer your personal information to, and process it in, countries other than your own. These countries may have data protection laws that are different from (and, in some cases, may not be as protective as) the laws of your jurisdiction.
-
- 6.2. We take all necessary steps to ensure that cross-border data transfers comply with applicable privacy regulations, including but not limited to:
- Standard Contractual Clauses (SCCs) under the General Data Protection Regulation (GDPR) for EU to non-EU transfers
- Data Processing Addendums with non-EEA clients and service providers
- Adequate security measures under PIPEDA (Canada), CCPA (California), and India’s upcoming DPDP Act
- Respect for communication preferences and Do Not Call rules under the TCPA (USA) for telemarketing activities
-
- 6.3. Where personal data is transferred outside of the country in which it was collected, THINKTARA GLOBAL ensures that such data is treated in accordance with this Privacy Policy and the standards required by the relevant jurisdiction.
7. Responding to Legal Requests
- 7.1. THINKTARA GLOBAL may access, preserve, or disclose your personal data when we believe, in good faith, that it is necessary to:
- Comply with a legal obligation or lawful request by public authorities, including national security or law enforcement requirements
- Respond to subpoenas, court orders, or other legal processes
- Investigate, prevent, or take action regarding illegal activities, suspected fraud, or potential threats to the safety of any person
- Enforce our agreements, policies, or protect our rights and the rights of others
- 7.2. We assess each request carefully to ensure that it is legally valid and proportionate. Where appropriate, we may notify affected individuals of such disclosures, unless prohibited by law.
8. Protecting Your Information
- 8.1. At THINKTARA GLOBAL, protecting your data is a top priority. We implement a combination of technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of the personal data we collect and process.
- 8.2. Key security measures include:
- Encryption of sensitive data in transit and at rest
- Role-based access controls and multi-factor authentication
- Regular security audits and vulnerability assessments
- Data minimization and retention control policies
- Employee training and confidentiality obligations
- 8.3. While we take reasonable steps to protect your information, no system is 100% secure. We encourage users to exercise caution and contact us immediately if they suspect any unauthorized access or activity involving their data.
9. Your Rights and Choices
Depending on your country of residence and applicable data protection laws, you may have the following rights regarding your personal information:
- 9.1. Right to Access: You may request confirmation of whether we process your personal data and receive a copy of such data.
- 9.2. Right to Rectification: You may request correction of inaccurate or incomplete personal information.
- 9.3. Right to Erasure (“Right to be Forgotten”): In certain cases, you may request that we delete your personal data, subject to legal and contractual obligations.
- 9.4. Right to Restriction of Processing: You may request that we restrict the processing of your data under specific circumstances.
- 9.5. Right to Data Portability: Where technically feasible, you may request to receive your data in a structured, commonly used, and machine-readable format.
- 9.6. Right to Object: You may object to the processing of your data for direct marketing or certain other purposes.
- 9.7. Right to Withdraw Consent: If we rely on your consent to process your data, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
- 9.8. Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority in your country.
We honor these rights under all applicable frameworks including the GDPR (EU), CCPA (California), PIPEDA (Canada), and India’s DPDP Act. We will respond to valid requests within the legally required time frame. To exercise any of the above rights, please email us at sales@thinktaraglobal.com.
10. Additional Terms for International Users
- 10.1. THINKTARA GLOBAL operates globally, and your information may be accessed, stored, and processed in countries with different data protection laws than your own.
- 10.2. By using our website and services, you understand and agree that:
- Your personal data may be transferred to and processed in jurisdictions including but not limited to the United States, Canada, India, and the European Union.
- We take appropriate safeguards to ensure such transfers comply with the requirements of applicable data protection laws, including GDPR, PIPEDA, and India’s DPDP Act.
- 10.3. If you are a user located in the European Economic Area (EEA), California, Canada, or India, additional privacy rights may apply to you, and we take extra steps to ensure that these rights are respected.
11. Safety and Reliability
- 11.1. We are committed to creating a secure and reliable digital experience. Our services are designed to maintain:
- System Security: Through secure servers, encrypted connections, and advanced monitoring tools.
- Service Uptime: We maintain high availability and uptime through global infrastructure and backup systems.
- Data Integrity: We implement strict protocols to avoid data tampering or unauthorized access.
- 11.2. However, the internet is never fully secure. While we take reasonable precautions, we cannot guarantee the absolute security of any data transmitted online. Users are encouraged to maintain up-to-date device security and notify us immediately of any suspected breaches.
12. Termination of Account
- 12.1. As THINKTARA GLOBAL operates primarily on a B2B model, direct user accounts are limited and typically created as part of service engagements. However, in cases where user accounts or CRM records are created:
- You may request termination of your account or profile by contacting us at sales@thinktaraglobal.com.
- Upon verified request, we will deactivate or delete your information, except where retention is required by law, regulatory compliance, or legitimate business purposes (such as billing, dispute resolution, or audit).
- 12.2. We reserve the right to suspend or terminate any user access or associated data if:
- Fraudulent, harmful, or unauthorized activities are detected
- There is a breach of terms of use or legal violations
- It is required by law enforcement or regulatory directives
13. Third-Party Sites
- 13.1. Our website may contain links to third-party websites, services, or platforms that are not owned or controlled by THINKTARA GLOBAL. These third-party sites operate under their own privacy policies and data handling practices, which may differ from ours.
- 13.2. We are not responsible for the privacy practices, content, or security of such external sites. Users are encouraged to read and understand the privacy policies of any third-party services before interacting with them or sharing personal data.
- 13.3. THINKTARA GLOBAL disclaims liability for any loss or misuse of information caused by third-party platforms accessed through our website.
14. Hacking / Cyber Frauds
- 14.1. While we take extensive measures to protect the confidentiality and integrity of data, cyber threats remain a persistent risk across the digital landscape.
- 14.2. THINKTARA GLOBAL:
- Maintains multi-layered security protocols to detect, prevent, and respond to unauthorized access attempts.
- Does not request sensitive information such as passwords, payment details, or OTPs via email or unsolicited communication.
- 14.3. If you suspect any fraudulent activity, phishing attempt, or data compromise linked to THINKTARA GLOBAL, please report it immediately to sales@thinktaraglobal.com. We will investigate and take swift remedial action.
- 14.4. We shall not be held liable for any damages or losses incurred from fraudulent acts or cyberattacks beyond our reasonable control, including those caused by negligence or user inaction.
15. Children’s Privacy
- Our website and services are intended solely for business entities and professionals aged 18 years and above. If we discover that personal data from a minor has been collected inadvertently, we will delete such information as soon as possible.
- Parents or legal guardians who believe their child may have submitted information to us may contact us directly for prompt removal.
16. Confidentiality
- 16.1. THINKTARA GLOBAL upholds strict confidentiality protocols in all client and prospect interactions. All information collected, including business-related or personal data, is:
- Treated as confidential and processed under internal access restrictions.
- Used solely for the purposes stated in this Policy or permitted by law.
- Never disclosed or sold to third parties without legal basis or written consent.
- 16.2. We ensure that all employees, contractors, and partners handling data are bound by confidentiality obligations under our internal policies and agreements.
17. Data Protection and Security
- At THINKTARA GLOBAL, data protection is a core pillar of our service delivery, governance, and client trust framework. We recognize that handling personal and professional data in a global B2B context involves legal, operational, and ethical responsibilities.
- Accordingly, we have implemented strict controls to ensure that data collected, processed, and stored through our operations is handled in accordance with applicable laws and industry standards.
18. Compliance with Global Data Protection Laws
- 18.1. General Data Protection Regulation (GDPR) – European Union: The GDPR is the European Union’s comprehensive data protection law that governs how personal data of individuals within the EU/EEA is collected, processed, stored, and transferred. It emphasizes transparency, consent, accountability, and individual rights such as access, rectification, erasure, and objection to processing. It applies to any business — regardless of location — that targets or monitors EU-based individuals.
- 18.2. CCPA – California Consumer Privacy Act (USA): The CCPA grants California residents rights over their personal data, including the right to know what is collected, request deletion, opt out of data sales, and receive equal service regardless of privacy choices. It applies to for-profit businesses that process personal data of California residents and meet certain thresholds related to revenue or data volume.
- 18.3. CPRA – California Privacy Rights Act (USA): The CPRA builds upon the CCPA by strengthening consumer privacy rights and introducing the concept of Sensitive Personal Information (SPI). It also establishes the California Privacy Protection Agency (CPPA) for enforcement and requires businesses to implement risk assessments, data minimization, and retention limits.
- 18.4. PIPEDA – Personal Information Protection and Electronic Documents Act (Canada): PIPEDA governs the collection, use, and disclosure of personal information in commercial activities across Canada. It requires businesses to obtain consent, limit data use to stated purposes, and ensure individuals have access to their information. It also enforces accountability, breach notification, and fair handling practices.
- 18.5. DPDP Act – Digital Personal Data Protection Act (India): India’s DPDP Act is a newly enacted law that regulates the processing of digital personal data and introduces core privacy principles such as consent, purpose limitation, data minimization, and individual rights. It applies to both Indian and foreign entities processing personal data of individuals in India and sets out obligations for Data Fiduciaries and Data Processors.
- 18.6. TCPA – Telephone Consumer Protection Act (USA): The TCPA governs telemarketing and automated calling practices in the U.S. It requires prior express consent for marketing calls, especially to mobile numbers, and restricts the use of prerecorded messages, automated replies, and unsolicited faxes. Businesses must also respect Do Not Call (DNC) lists and provide opt-out options during calls.
- 18.7. APPs – Australian Privacy Principles (Australia): The APPs are a set of 13 privacy principles under Australia’s Privacy Act 1988 that regulate the handling of personal information. They cover areas such as collection, storage, use, disclosure, access, correction, and cross-border transfer of data. Organizations must maintain a clear privacy policy and ensure proper notice and consent mechanisms are in place.
- 18.8. CASL – Canada’s Anti-Spam Legislation (Canada): CASL regulates the sending of commercial electronic messages (CEMs), such as emails and SMS, to Canadian recipients. It requires express or implied consent, accurate sender identification, and a functional unsubscribe mechanism. It also prohibits the use of misleading content or unauthorized data collection through electronic means.
- 18.9. We strive to adopt privacy and communication practices that are consistent with the core principles of applicable data protection frameworks, including transparency, data minimization, consent management, and the provision of opt-out mechanisms where required. All data processing activities are undertaken with due consideration of the relevant legal basis—such as legitimate interest, contractual necessity, or prior consent—depending on the nature of the engagement and jurisdictional requirements.
- 18.10. Our internal policies and procedures are subject to periodic review and refinement to reflect changes in applicable laws, evolving regulatory expectations, and industry best practices. At the same time, we remain committed to maintaining operational flexibility that enables us to support client needs effectively across diverse markets and regulatory landscapes.
19. Data Minimization and Purpose Limitation
- 19.1. We collect only the minimum necessary information required to fulfill specific, legitimate business purposes, such as:
- B2B lead qualification and outreach
- Campaign execution and optimization
- Service delivery and reporting
- Client communication and billing
- 19.2. Personal data is never processed in a manner that is incompatible with the original purpose for which it was collected, unless legally permissible or with additional consent.
-
20. Security Measures and Information Governance
- 20.1. To protect data against unauthorized access, alteration, disclosure, or destruction, we implement robust technical and organizational security measures, including:
- Encryption of data in transit and at rest
- Role-based access control with user authentication
- Regular data audits and vulnerability assessments
- Secure cloud infrastructure with geographically controlled servers
- Secure deletion and retention policies
- Breach detection, incident response, and recovery procedures
-
21. Data Transfers and Cross-Border Processing
- 21.1. Given our global client base, data may be transferred to and processed in jurisdictions outside of the data subject’s home country, including the United States, India, Canada, the European Union, and others. Such transfers are:
- Conducted under adequate safeguards (e.g., Standard Contractual Clauses (SCCs), Data Transfer Agreements, local adequacy rulings)
- Subject to contractual obligations with recipients to uphold confidentiality, integrity, and lawful usage
- Disclosed transparently in our client-facing documentation or privacy disclosures
22. Third-Party Processors and Subcontractors
- 22.1. We may engage authorized third-party service providers to process data on our behalf (e.g., CRM platforms, analytics tools, telemarketing partners). In such cases, we ensure:
- Data Processing Agreements (DPAs) are in place
- Sub processors are subject to strict confidentiality and compliance requirements
- Regular performance and compliance audits are conducted
- No subcontractor may further process or use the data for unauthorized purposes
- 22.2. THINKTARA GLOBAL does not sell personal data to any third party under any circumstance.
23. Profiling and Automated Decision-Making
- Where permitted by law, we may conduct data-driven profiling for B2B targeting, segmentation, and campaign optimization. However:
- No solely automated decisions that significantly affect individuals are made
- All targeting and filtering are subject to human oversight and logic-based controls
- Data subjects have the right to opt-out of profiling or request human intervention, especially under GDPR and India’s DPDP Act
24. Data Subject Rights
- We recognize the rights of individuals and business representatives whose data we may process, including (where applicable):
- Right to access, correct, or delete data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to file a complaint with the appropriate data protection authority
- We provide transparent and accessible mechanisms to exercise these rights via [https://thinktaraglobal.com/contact-us/] and respond within legally mandated timelines.
25. Data Retention
- We retain personal and business contact information only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or audit requirements.
- Once no longer needed, data is securely deleted or anonymized.
26. Breach Notification
- 26.1. We will notify affected individuals and authorities as required under applicable laws (e.g., GDPR Articles 33 & 34, CCPA §1798.82).
- 26.2. We will provide details about the breach, affected data categories, potential consequences, and mitigation steps taken.
- 26.3. We will take immediate corrective actions to contain and resolve the breach.
27. Disclaimer and Limitation of Liability
- 27.1. Shall not be liable for any indirect or consequential loss resulting from cyberattacks, phishing, or third-party failures beyond our control.
- 27.2. Are not responsible for the security practices of third-party websites or tools used independently by clients.
- 27.3. Strongly advise clients to maintain appropriate internal security measures and legal compliance on their end.
28. Policy Changes
- 28.1. We reserve the right to update, revise, or amend this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or technological advancements.
- 28.2. When updates are made:
- We will revise the “Last Updated” date at the top of the Policy
- In case of material changes, we will notify users via the website or through direct communication (where feasible)
- 28.3. We encourage you to periodically review this Policy to stay informed of how we are protecting your information.
- 28.4. Continued use of our website and services after any update constitutes acceptance of the revised Policy.
29. Contact Us
- 29.1. If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us through any of the following channels:
- b) If required by law (e.g., GDPR, India’s DPDP Act), we will also appoint a Grievance Officer or Data Protection Officer (DPO) and provide their contact details here when applicable.