Data Policy

This Data Policy describes how Fervent Communication Private Limited governs the data it holds — for its own operations and on behalf of clients — consistent with our ISO/IEC 27001:2022-certified Information Security Management System.

Data governance

• Data is classified by sensitivity, and access is granted on a need-to-know basis.
• Client data is processed only for the agreed engagement and under the instructions set out in the applicable contract or statement of work.
• Audience and campaign data used in demand-generation programs is sourced and processed in accordance with applicable data-protection law.

Storage & security

• Data is stored on access-controlled systems; transfers are encrypted in transit.
• Security controls are independently assessed under ISO/IEC 27001:2022 (Certificate No. 305026071550IS) and our quality processes under ISO 9001:2015 (Certificate No. 305026071549Q).

Retention & disposal

Data is retained for the duration required by the engagement, our legal obligations, or legitimate business need — whichever applies — and is securely deleted or anonymised thereafter.

Incidents

Suspected data incidents are triaged under our incident-response procedure, and affected clients are notified as required by contract and law.

Questions

Write to [email protected].