Privacy Policy & Data Governance Standard

1. Corporate Scope & Fundamental Principles

MARS TechSol operates as a premier B2B demand generation, account-based marketing (ABM), and audience intelligence partner. We work exclusively with corporate clients seeking to identify, engage, and develop commercial relationships with business organizations.

We do not collect, process, or sell personal consumer data (e.g., home addresses, personal financial data, health records, or children’s data). Our operations are restricted strictly to professional business-to-business contact profiles and corporate intelligence.

2. Categories of Information We Collect

Depending on whether you visit our digital properties, submit a consultation request, or are identified as an in-market business professional, we collect the following categories of information:

Technical & Telemetry Data: When navigating our website, we automatically log standard HTTP telemetry including IP addresses, browser types, operating systems, referring URLs, access timestamps, and page interaction metrics.

3. Lawful Basis for Processing (GDPR / UK GDPR)

Pursuant to Article 6 of Regulation (EU) 2016/679 (EU GDPR) and the UK Data Protection Act 2018, MARS TechSol relies upon clearly established lawful bases to process professional business contact data:

• Legitimate Interests (Article 6(1)(f)): Processing B2B contact data to connect commercial enterprises with relevant software, technological, and corporate solutions is in the legitimate interest of both our enterprise clients and recipient organizations, provided these interests are balanced with appropriate safeguards and an effortless opt-out mechanism, as supported by GDPR Recital 47.
• Consent (Article 6(1)(a)): Where explicit opt-in consent has been provided, such as newsletter subscriptions, executive webinar registrations, or gated whitepaper access requiring explicit affirmative approval captured at the point of download.
• Contract Performance (Article 6(1)(b)): Where processing is necessary to execute commercial contracts, service delivery agreements, lead verification telemetry, and billing arrangements with our clients and enterprise corporate partners.
• Legal Obligation (Article 6(1)(c)): Where processing is required to satisfy statutory tax, accounting, audit, regulatory enforcement, or legal discovery obligations.

4. First-Party Data & Zero Tolerance for Scraped Lists

MARS TechSol enforces a rigorous data provenance policy. All contact records utilized in our demand generation engines undergo multi-stage human and automated validation.

Strict Anti-Scraping Warranty: We explicitly warrant that MARS does not acquire, purchase, license, or process unverified third-party data lists, bulk web-scraped email dumps, or illegally harvested contact directories. Every record is verified against live corporate email syntax, MX records, and active business status.

5. Data Disclosures & Authorized Sub-processors

We do not sell, rent, or lease personal information to consumer data brokers. Disclosures of business information occur strictly under the following controlled parameters:

• Direct Enterprise Clients: Where an individual has downloaded a sponsored whitepaper, registered for an executive webinar, or agreed to engage in a consultation with our client partner, their business profile is provided directly to that specific client under non-disclosure terms.
• Trusted Infrastructure Sub-processors: Cloud infrastructure providers (AWS, Google Cloud), CRM routing platforms, and verification API services who process data under written Data Processing Agreements (DPAs) with strict confidentiality covenants.
• Legal Mandates: Where disclosure is required by subpoena, court order, or governmental law enforcement regulation.

6. International Data Transfers & Standard Contractual Clauses (SCCs)

Because MARS operates commercial desks across the Americas, EMEA, and APAC, business contact data may be transferred, processed, and stored in regions outside your jurisdiction. Data transfers originating from the European Economic Area (EEA) or the United Kingdom to third countries are safeguarded under:

• 2021 European Commission Standard Contractual Clauses (SCCs - Controller-to-Controller & Controller-to-Processor).
• UK International Data Transfer Addendum (IDTA) to the EU Commission SCCs.
• Supplementary Technical Security Safeguards (AES-256 encryption in transit and at rest).

7. Data Retention & Security Architecture

MARS retains professional contact records only for as long as necessary to fulfill commercial demand generation objectives or comply with statutory accounting requirements:

8. Technical & Organizational Security Measures (TOMs)

MARS TechSol implements enterprise-grade cybersecurity controls aligned with ISO/IEC 27001 standards and SOC 2 Type II principles:

• Encryption Standards: All data in transit is encrypted using TLS 1.3 protocols. All data at rest is encrypted using AES-256 bit encryption algorithms.
• Access Controls: Strict Role-Based Access Control (RBAC) enforced via multi-factor authentication (MFA) and perimeter network segmentation.
• Breach Notification SLA: In the event of a confirmed security incident impacting personal data, MARS will notify competent Supervisory Authorities within 72 hours under GDPR Article 33 guidelines.

9. Your Global Privacy Rights (GDPR / UK GDPR)

Regardless of your physical location, MARS grants all business professionals comprehensive control over their professional contact profiles under Articles 15-22 of the GDPR:

• Right to Access: You may request a confirmation and copy of all personal business records we maintain regarding you.
• Right to Rectification: You may request that outdated or incorrect contact details (such as a previous company email or job title) be corrected immediately.
• Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your business profile from our active database.
• Right to Restrict or Object to Processing: You have an absolute, unconditional right to object to direct marketing communications at any time.

10. Notice for California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents possessing B2B contact records are entitled to specific statutory notices:

• Categories Collected: Professional business identifiers (name, corporate email, phone, employer, job title).
• Non-Discrimination: We do not deny services, adjust rates, or discriminate against any individual exercising their CCPA/CPRA rights.
• Do Not Sell or Share My Information: While MARS does not sell personal data for monetary consideration in the traditional sense, sharing B2B data with commercial clients may constitute a “sale” or “sharing” under statutory California definitions. California residents may exercise their opt-out right at any time via privacy@marstechsol.com.

11. Cookies, Telemetry & Analytics Technologies

Our website utilizes first-party and verified third-party cookies, tracking pixels, and server logs to optimize site performance, analyze traffic flows, and measure campaign effectiveness.

You may manage or disable cookies via your browser settings at any time. Disabling essential cookies may impair certain features of the site, but will not prevent you from browsing our core informational pages.

12. Data Protection Officer & Inquiries

For inquiries, formal legal notices, DSAR enforcement, or Data Protection Impact Assessments (DPIA), please contact our Data Protection Office:

EU/UK Data Subjects also maintain the legal right to lodge a complaint with their local Supervisory Authority (e.g., the Information Commissioner’s Office – ICO in the UK, or the relevant Data Protection Authority in Europe).