Privacy & Data Protection Policy

Welcome to Overseas Bridge (referred to herein as "Overseas Bridge", "we", "us", or "our"). Overseas Bridge is a premier business facilitation, entity structuring, Global Capability Centre (GCC), workforce recruitment, and operational infrastructure partner assisting international and high-growth enterprises in establishing and scaling operations in South India (including Bengaluru, Chennai, Hyderabad, Coimbatore, and Kerala).

We are steadfastly committed to respecting, safeguarding, and maintaining the privacy, confidentiality, and integrity of personal, corporate, and proprietary information entrusted to us. This Privacy & Data Protection Policy ("Policy") details how we collect, store, process, transfer, and protect your information when you visit our website (https://overseasbridge.in), engage our advisory services, request feasibility reports, communicate with our specialists, or enter into corporate establishment agreements.

We collect information across three primary operational categories:

A. Information You Voluntarily Provide

• Enterprise Contact & Inquiries: Full name, corporate email address, phone number, corporate designation, organization name, headquarter jurisdiction, and corporate website.
• India Strategy & Expansion Requirements: Target industry vertical, proposed headcount scale (e.g., 2 → 500+ employees), operational models, target South Indian hub preferences, timeline requirements, and budget parameters.
• Entity Structuring & Statutory Details: Corporate registration records, authorized signatory identification, tax registration documents, and board resolutions necessary for entity incorporation or commercial leasing.
• Candidate & Workforce Information: Resumes, employment histories, technical certifications, and references submitted during hiring drives and GCC team assembly.

B. Information Collected Automatically

• Telemetry & Device Data: IP address, browser type and version, operating system, time zone settings, referral URLs, and access timestamps.
• Interaction Metrics: Pages viewed, time spent per section, navigation clickstream, and interaction with our interactive tools (e.g., hub selectors, talent wizards).

C. Information from Verified Enterprise Sources

We may receive verified corporate information from authorized industry associations, public company registries (such as the Ministry of Corporate Affairs in India), and verified enterprise partners solely to validate corporate credentials.

We process collected data exclusively for legitimate enterprise purposes, including:

Under international privacy regulations, our processing of personal and corporate data relies upon the following legal grounds:

• Contractual Performance: Processing required to negotiate, execute, or perform our master service agreements, entity establishment contracts, or workforce advisory retainers.
• Explicit & Informed Consent: Where you have granted unambiguous consent for exploratory consultation, receiving market intelligence, or participating in advisory sessions.
• Compliance with Legal Obligations: Adhering to statutory requirements under the Indian Companies Act, Income Tax Act, Goods and Services Tax (GST) Act, Foreign Exchange Management Act (FEMA), and Reserve Bank of India (RBI) guidelines.
• Legitimate Enterprise Interests: Enhancing our platform security, optimizing user experience, preventing fraudulent inquiries, and ensuring business continuity.

Overseas Bridge applies rigorous, defense-in-depth technical and organizational safeguards to ensure that all enterprise information remains protected against unauthorized access, destruction, alteration, or disclosure:

All staff members and contractors handling client information are bound by strict, legally enforceable Non-Disclosure Agreements (NDAs). Access to client repository files is restricted on a strict need-to-know basis.

Information is disclosed solely in the following controlled circumstances:

• Government & Regulatory Authorities: Ministry of Corporate Affairs (MCA), Registrar of Companies (RoC), GST Network, Income Tax Department, and Reserve Bank of India strictly when instructed by you for legal company formation and compliance filings.
• Vetted Infrastructure Sub-processors: Secure Tier-4 cloud infrastructure providers (AWS, Microsoft Azure, Google Cloud) operating within strict Data Processing Addendums (DPAs).
• Legal & Professional Advisors: Certified chartered accountants, corporate attorneys, and statutory auditors assisting in client-authorized transactions under professional confidentiality privileges.

Because Overseas Bridge collaborates with international enterprises located in the United States, United Kingdom, European Union, Middle East, and Asia-Pacific regions, information may be transferred across international borders between your corporate headquarters and our operational hubs in India.

When transferring data internationally, we implement Standard Contractual Clauses (SCCs) approved by the European Commission, ensure DPDPA cross-border adequacy compliance, and execute comprehensive Data Transfer Agreements with enterprise clients.

We retain personal and enterprise data only for as long as strictly necessary to fulfill the operational objectives for which it was collected, or to satisfy legal, accounting, tax, or regulatory reporting mandates:

• Advisory Inquiries & Feasibility Scopes: Retained for 24 months from the last date of communication, unless converted into an active engagement.
• Corporate Entity Records: Retained for 8 years following the close of the applicable financial year pursuant to Section 128 of the Indian Companies Act, 2013.
• Candidate & Talent Profiles: Retained for 12 months with candidate consent for potential future placement in client GCC teams.

Depending on your jurisdiction (under DPDPA, GDPR, CCPA/CPRA), you are entitled to exercise the following enforceable rights:

To exercise any of these rights, please submit a formal request to our Data Protection Officer at privacy@overseasbridge.in. Requests are authenticated and responded to within 30 days without charge.

Our website uses cookies and similar telemetry tokens to ensure platform security, preserve user preferences, and analyze aggregate traffic trends:

• Strictly Necessary Cookies: Essential for session authentication, security firewalls, and routing.
• Performance & Analytics Cookies: Aggregated, anonymized metrics (via Google Analytics with IP anonymization enabled) to understand visitor flows.
• Preference Cookies: Remembering your UI settings and regional preferences.

You may modify or block cookies through your browser settings at any time without impacting core informational browsing.

We may periodically update this Policy to reflect changes in our operational services, regulatory frameworks, or statutory mandates. When material revisions occur, we will update the "Effective Date" at the top of this page and provide conspicuous notification across our website or via direct enterprise email.

In compliance with the Digital Personal Data Protection Act, 2023 and global data protection requirements, Overseas Bridge has designated an official Data Protection Officer (DPO) & Grievance Redressal Officer: