Legal
Privacy Policy
Effective date: 1 January 2025 · Last updated: 1 January 2025
This Privacy Policy explains how Staffinc (a trading name of Maverick Mount Technologies Pvt Ltd) collects, uses, stores and protects your personal information when you visit our website, use our services or interact with the platforms we build and operate. We take privacy seriously. This policy is written in plain language so you understand exactly what we do with your data — and what your rights are.
Who We Are
Staffinc is a software development company that designs and builds technology platforms for healthcare staffing agencies. We operate under the trading name Staffinc as part of Maverick Mount Technologies Pvt Ltd.
For the purposes of this Privacy Policy, Staffinc acts as the data controller for personal data collected through our marketing website (staffinc.io) and any direct business communications. For platforms we build on behalf of clients, our clients are the data controllers and we act as a data processor.
Data Controller Details
Information We Collect
We collect information in two ways — information you give us directly, and information collected automatically when you use our website.
| Data Type | What It Includes | How Collected |
|---|---|---|
| Contact Information | Name, email address, phone number, company name | Discovery call booking forms, contact forms, email |
| Business Information | Agency type, size, location, current tech stack, operational challenges | Discovery call questionnaires, onboarding conversations |
| Usage Data | Pages visited, time on site, referral source, browser type, IP address | Automatically via cookies and analytics tools |
| Communications | Emails, messages and notes from calls or meetings | Direct communication with our team |
| Payment Information | Billing details for project invoices | Invoicing process — processed via third-party payment providers |
Note on platforms we build: If you are an end user of a platform built by Staffinc (for example, a nurse using an app, or a patient using a homecare tool), your data is controlled by the agency or company that operates that platform — not by Staffinc. Please refer to their privacy policy for details.
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to enquiries and schedule discovery calls
- To assess your project requirements and prepare proposals
- To deliver software development services to clients
- To communicate project updates, timelines and deliverables
- To process invoices and manage billing
- To improve our website and understand how visitors use it
- To send relevant content or case studies where you have given consent
- To comply with our legal and contractual obligations
We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
Legal Basis for Processing
Where applicable under data protection law (including the GDPR), we process your personal data under the following legal bases:
- Contractual necessity — to deliver services you have engaged us for
- Legitimate interests — to respond to enquiries, improve our services and market to relevant businesses
- Legal obligation — to comply with applicable laws and regulations
- Consent — where you have explicitly opted in to receive marketing communications
Where we rely on consent as our legal basis, you have the right to withdraw that consent at any time by contacting us at [email protected].
Sharing Your Data
We do not sell or rent your personal data. We may share your information with third parties only in the following circumstances:
- Service providers — tools we use to operate our business, such as email platforms, scheduling software, analytics providers and cloud hosting services. These providers are contractually required to handle your data securely and only as instructed.
- Professional advisors — accountants, lawyers or auditors where necessary for compliance or legal purposes.
- Legal requirements — if required by law, court order or to protect the rights, property or safety of Staffinc, our clients or the public.
- Business transfers — in the event of a merger, acquisition or sale of all or part of our business, your data may be transferred as part of that transaction.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Enquiry and contact data | 2 years from last contact, or until deletion is requested |
| Client project records | 7 years from project completion (legal and financial compliance) |
| Invoice and billing records | 7 years (tax and accounting requirements) |
| Website analytics data | 26 months (aggregated and anonymised) |
| Marketing contact data | Until consent is withdrawn or unsubscribe is actioned |
Your Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — request deletion of your data where we have no lawful reason to retain it
- Right to restrict processing — ask us to limit how we use your data in certain circumstances
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before actioning a request.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority.
Cookies
Our website uses cookies and similar tracking technologies to improve your experience and understand how the site is used.
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential cookies | Required for the website to function correctly | No — necessary for operation |
| Analytics cookies | Understand how visitors use the site | Yes — via cookie preferences |
| Marketing cookies | Track effectiveness of advertising and retargeting | Yes — via cookie preferences |
You can manage your cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect website functionality.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include:
- Encrypted data transmission (HTTPS/TLS) across all web properties
- Access controls — personal data is accessible only to staff who need it
- Regular security reviews of our systems and third-party providers
- Secure, access-controlled storage of client and project data
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at [email protected].
Children's Privacy
Our website and services are directed at business professionals and are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, want to exercise your rights, or have a concern about how we handle your data, please get in touch: