GCC as a Service
Build Operate Transfer(BOT) Model
Managed TeamsPrivacy Policy
1. Introduction
1.1 Xpansa is a brand of Intuit Management Consultancy Pte. Ltd. ("We", "Our", or the "Company"), a company registered in Singapore. Xpansa specializes in Global Capability Center (GCC) setup and management services, talent solutions, entity establishment, compliance support, and related operational services for international businesses (the "Services").
Any person or organization wishing to procure the Services (the "User", "Your", or "You") may access our website at www.xpansa.ai and, subject to submission of required documents and provision of information which may include Personal Information (defined in paragraph 2.3), the User may obtain access to the Services.
1.2 The Company is committed to ensuring that the privacy of its clients, visitors, and Users is always respected. This Privacy Policy explains how we collect, use, share, and protect Personal Information and Usage Information, and how You can access, update, or delete Your Personal Information.
1.3 We will not use or share Your information with anyone except as described in this Privacy Policy. This Privacy Policy does not apply to information collected offline or from other sources outside this Website.
1.4 This Policy has been drafted in accordance with the Singapore Personal Data Protection Act, 2012 (PDPA) and the European General Data Protection Regulation (GDPR, EC Regulation 2016/679).
2. Information Collected by the Company
2.1 Intuit Management Consultancy Pte. Ltd., operating as Xpansa, is the data controller for all Personal Information and Usage Information collected through this Website. You may contact Us at:
USA Office
11B 104-40 Queens Blvd,
Forest Hills 11375,
New York, USA
India Office
No. 7, Sriji Palace,
17, E.V.K Sampath Road,
Vepery, Chennai – 600 007
2.2 The legal basis for collecting and processing information is: (i) performance of the Services in accordance with Our Terms of Use; (ii) Our legitimate interests such as fraud prevention, security, and service improvement; and (iii) compliance with applicable legal obligations.
2.3 We may collect Personal Information such as Your name, email address, designation, company name, phone number, location, and other business-related contact details. This information is collected when You register on the Website, submit an inquiry, request a consultation, or otherwise interact with Us.
2.4 By voluntarily providing Personal Data or using the Website, You are deemed to have consented to the collection, use, and disclosure of Your Personal Data for the purposes set forth in this Privacy Policy.
3. Consent
3.1 We may obtain your consent through:
a. Express provisions in a contract, application form, or registration form submitted to the Company; or
b. Notifications and opt-in mechanisms on the Website.
3.2 By voluntarily providing Personal Data or using the Website, You are deemed to have consented to the Company collecting, using, and disclosing Your Personal Data as set forth in this Privacy Policy.
4. Cookies
4.1 We use standard cookies to understand website usability and provide Users with better, customized service. Cookies store preferences and record aspects of Your visit to assist Us in providing uninterrupted service. No Personal Information is collected through cookies alone. You may modify Your browser settings to accept or reject cookies at any time. For more information: ico.org.uk/for-the-public/online/cookies/
4.2 We may combine Usage Information collected through cookies and web beacons with Personal Information to improve Your experience and determine what Services may be relevant to You.
5. Information Collected Automatically
5.1 We may automatically collect certain Usage Information when You access the Website, including Your browser type, referring URL, IP address, and device information. When associated with Your Personal Information, such Usage Information will be treated as Personal Information under this Privacy Policy.
6. Information from Third Parties
6.1 We may supplement information collected through the Website with lawfully obtained records from third parties to enhance our ability to serve You and tailor our Services to Your needs. Such information will be processed in accordance with this Privacy Policy.
7. Processing of Data
7.1 Personal Information and Usage Information may be processed by: (i) the Company; (ii) affiliates and group companies of IMC; (iii) third-party service providers; (iv) auditors and professional advisors; and (v) law enforcement agencies or other parties as required by law.
We implement appropriate technical and organizational security measures including:
i. Limiting access to Personal Information to the minimum necessary, with appropriate confidentiality restrictions;
ii. Using secure servers to store Personal Information;
iii. Verifying the identity of individuals requesting access to Personal Information; and
iv. Using SSL encryption or equivalent technologies for data transmitted over the Internet.
8. Rights of the User
8.1 Any User who has submitted Personal Information has the right to:
i. Be informed about the Personal Information We collect and use;
ii. Access the Personal Information We hold about You;
iii. Request correction of inaccurate or incomplete Personal Information;
iv. Request deletion or removal of Personal Information We hold about You;
v. Block or suppress Our collection and use of Your Personal Information;
vi. Obtain and reuse Personal Information We hold about You for Your own purposes;
vii. Object to processing of Your Personal Information on legitimate grounds; and
8.2 Requests will be acknowledged within a reasonable period. A reasonable fee may apply for certain services.
8.3 If You choose not to provide Personal Data, the Company reserves the right to decline or limit the provision of Services.
9. Use of Information Collected
9.1 We do not share Personal Information with third parties without Your consent, except as required by law or as described in this Privacy Policy.
9.2 We may use Your contact information to respond to queries, provide Service information, or send marketing communications. You may opt out at any time by emailing gcc@xpansa.ai.
9.3 Collected information may be used to:
i. Operate and improve the Website and Services;
ii. Create aggregated, anonymized statistics for analysis;
iii. Detect, prevent, and investigate fraud or policy violations;
iv. Customize content and communications for You;
v. Provide, improve, and administer the Services;
vi. Confirm Your identity and eligibility to use the Website;
vii. Notify You about changes to the Website or Services;
viii. Comply with legal and regulatory obligations;
ix. Conduct market research or project planning; and
x. Protect against fraud and criminal activity.
9.4 We do not sell, rent, or trade Your Personal Information except as disclosed in this Privacy Policy.
10. Third-Party Links and Content
10.1 The Website may contain links to third-party websites. We are not responsible for the privacy practices of such third parties. We encourage You to review their privacy policies before submitting any information.
11. Data Transfer
11.1 Your Personal Information may be stored and processed in the USA, India, Singapore, or any other country where We or Our affiliates and service providers maintain facilities. Any cross-border transfer will ensure a level of protection equivalent to that under the GDPR or the Singapore PDPA.
12. Data Retention
12.1 We retain Your information for as long as necessary to provide the Services and to comply with applicable legal obligations. To request deletion of Your information, contact Us at gcc@xpansa.ai.
13. Security
13.1 We use industry-standard security practices including:
i. Encryption, firewalls, and SSL to protect Your Personal Information;
ii. Ensuring confidentiality, integrity, availability, and resilience of processing systems;
iii. Timely restoration of access to Personal Information following any incident; and
iv. Regular testing and evaluation of our technical and organizational security measures.
13.2 While We implement strong security measures, no system is entirely impenetrable. Personal Information You transmit to Us is done at Your own risk.
14. Security Breach Notification
14.1 In the event of a security breach compromising Your Personal Information, We will notify You promptly in compliance with applicable law.
15. Children's Privacy
15.1 Xpansa's Services are directed exclusively at businesses and professionals. We do not knowingly collect Personal Information from individuals under the age of 18.
15.2 If We learn that such information has been inadvertently collected, We will delete it promptly.
15.3 If You believe We may hold information about a minor, please contact Us at gcc@xpansa.ai.
16. Updating or Cancelling Your Information
16.1 You are responsible for maintaining the accuracy of Your submitted information. To update or correct Your Personal Information, contact Us at gcc@xpansa.ai. We will respond within 48 hours.
16.2 To cancel or modify communications You receive from Us, contact Us at gcc@xpansa.ai.
17. Opt-In for Marketing Communications
17.1 To opt in to receive promotional or marketing information regarding Xpansa and its Services, please email gcc@xpansa.ai.
18. Changes to This Privacy Policy
18.1 We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting on the Website. Material changes will be communicated via email or a notice on the Website. We encourage You to review this page periodically.
Quick Links
Engagement Models
Our Location
USA
11B 104-40 Queens Blvd,
Forest Hills 11375
New York, USA
INDIA
No.7 Sriji Palace,
17, E.V.K Sampath Road,
Vepery, Chennai – 600 007