Privacy Policy

Online Privacy Policy

Tenarai and its affiliated companies (herein after referred to as Tenarai or Organization) value our relationship with our business partners, clients, and any party who may be interested in Tenarai’s business services and solutions for any reason. We are committed to protecting your information by handling it responsibly and safeguarding it using appropriate technical, administrative, and physical security measures. This Statement outlines the types of personal information collected on our website, including how this data is used and safeguarded, as well as how users may exercise their rights with respect to personal information.

This Privacy Policy applies to Tenarai.com, Tenarai-branded apps, Tenarai company pages, apps, communications, and services (“Services”), including off-site Services, such as our email services, “Contact us”; “Apply with Tenarai” and “Share on” functionalities on our digital properties.

 What Personal Data will Tenarai collect?

The personal data we process may include:

  • name, gender, age, and date of birth;
  • contact information, such as address, email, and mobile phone number;
  • country of residence;
  • lifestyle and social circumstances (for example, your hobbies);
  • family circumstances (for example, your marital status and dependents);
  • employment and education details (for example, the organization you work for, your job title and your education details);
  • financial and tax-related information (for example your income, investments and tax residency);
  • postings or messages on any blogs, forums, platforms, wikis or social media applications and services that we provide (including with third parties);
  • IP address, browser type, and language, your access times;
  • information in chat conversations or any complaints you make ;
  • details of how you use our products and services;
  • CCTV footage and other information we collect when you access our premises; and
  • details of how you like to interact with us, and other similar information relevant to our relationship.

The personal data we collect may also include ‘sensitive’ or ‘special categories’ of personal data, such as details about your:

  • dietary requirements (for example, when Tenarai would like to provide you with lunch during a meeting);

  • health (for example, so that we can make it easy for you to access our buildings, products, and services); and
  • sexual orientation (for example, if you provide us with details of your spouse or partner).

We may also process personal data relating to ethnic or racial origin (for example, any multicultural networks you belong to), or about your political opinions (inferred from information you give us about political associations you belong to or have donated to).

We will typically seek separate permission from you in writing to process these special categories of personal data.

If you choose not to provide, or object to us processing, the information we collect, we may not be able to process your instructions or continue to provide some or all of our services to you or our client.

How do we collect personal data? 

Directly:  We obtain personal data directly from individuals in a variety of ways, including obtaining personal data from individuals who provide us their business card, complete our online forms, subscribe to our newsletters and preference center, register for webinars, and attend meetings or events we host, visit our offices or apply for open roles. We may also obtain personal data directly when, for example, we are establishing a business relationship, performing professional services through a contract, or our hosted software applications.     

Automatic Collection: When When users access or interact with our websites, applications, emails, or digital services, certain information such as IP address, device identifiers, browser details, usage patterns, cookies, pixels, analytics data, and browsing behaviour may be collected automatically through cookies and similar technologies. 

Public Sources: Personal data may be obtained from public registers (such as Companies House), news articles, sanctions lists, and Internet searches.  

Social and Professional Networking Sites: If  you register or login to our websites using social media (e.g., LinkedIn, Google, or Twitter) to authenticate your identity and connect your social media login information with us, we will collect information or content needed for the registration or login that you permitted your social media provider to share with us. That information may include your name, email address, and depending on your privacy settings, additional details about you. Please review the privacy controls on the applicable service to review how much information you want shared with us.

Business Clients: Our  business clients may engage us to perform professional services, which involves sharing personal data they control as part of that engagement. For example, we will review payroll data as part of an audit and we often need to use personal data to provide global mobility and pension services. Our services may also include processing personal data under our clients’ control on our hosted software applications, which may be governed by different privacy terms and policies. 

Recruitment services: We may obtain personal data about candidates from an employment agency, and other parties including former employers, and credit reference agencies.

Paid subscriptions: We may obtain the personal data of the prospect clients. Our sales team can connect with them as a new prospect client and information that is captured will be name, mobile number, email address and designation.   

Feedback and User Contributions: We  may collect information contained in reviews, ratings, testimonials, survey responses, feedback submissions, comments, and other content voluntarily shared by users on our platforms or services. 

What lawful reasons do we have for processing personal data? 

We may rely on the following lawful reasons when we collect and use personal data to operate our business and provide our products and services:  

  • Contract – We may process personal data in order to perform our contractual obligations.
  • Consent – We may rely on your freely given consent at the time you provided your personal data to us.
  • Legitimate interests – We may rely on legitimate interests based on our evaluation that the processing is fair, reasonable and balanced. These include:
    • Delivering services to our clients – To deliver the professional services our clients have engaged us to provide.
    • Direct marketing – To deliver timely market insights and Specialty knowledge we believe is welcomed by our business clients, prospects, subscribers and individuals who have interacted with us.
  • Legal obligations and public interests – We may process personal data in order to meet regulatory and public interest obligations or mandates.  

We may also process personal data without obtaining separate consent where such processing is permitted under applicable law, including for compliance with legal obligations, responding to lawful requests from authorities, prevention and detection of fraud, ensuring information security, exercising or defending legal claims, and other legitimate uses recognized under applicable law.

Our platforms may contain links to third-party websites, applications, or services. Such third parties operate independently and are governed by their own privacy policies and practices, which are outside our control. We encourage users to review the privacy notices of such third parties before sharing personal data.

What will Tenarai do with your personal data?

Tenarai will use the personal data: 

  • To provide services to our clients
  • To meet legal or regulatory requirements
  • Conduct due diligence checks relating to the services
  • For other activities that form part of the operation of our business
  • To manage and respond to any request you submit through our Website.
  • Promoting our professional services, products, and capabilities to existing and prospective business clients.
  • Sending invitations and providing access to guests attending our events and webinars or our sponsored events.
  • Personalizing online landing pages and communications, we think, would be of interest base on interactions with us and group companies.
  • Administering, maintaining, and ensuring the security of our information systems, applications, and websites.
  • Authenticating registered users to certain areas of our sites
  • Detect, prevent, mitigate, and investigate fraudulent or illegal activities.

With whom do we share your personal data? 

In connection with any of the purposes outlined in the “What will Tenarai do with your personal data” section above, we may disclose details about you to:

  • other members of the Tenarai group companies or third parties that provide services;
  • competent authorities (including courts and authorities regulating us)
  • our advisers, or your advisers;
  • anyone to whom we may transfer our rights and/or obligations under the terms;
  • any other person or organisation after a restructuring, sale, or acquisition of any member of the Tenarai group, as long as they use your information for the same purposes we did;
  • credit reference agencies or other organisations that help us make credit decisions and reduce the incidence of fraud; and
  • other third parties that reasonably require access to personal data relating to you.

Our website hosts various blogs, forums, wikis, and other social media applications or services that allow you to share content with other users (collectively “Social Media Applications”). Any personal data that you contribute to these Social Media Applications can be read, collected, and used by other users of the application. We have little or no control over these other users, so any information you contribute to these Social Media Applications might not be handled in line with this privacy statement.

All processors engaged by us are required to implement appropriate technical and organizational security measures and process personal data only in accordance with our instructions and applicable law.

Where do we transfer your personal data?

Information we hold about you may be transferred to countries:

  • where we do business;
  • which are linked to your engagement with us;
  • from which you regularly receive or transmit information; or
  • where our third parties conduct their activities.

We may also require the recipient to subscribe to international frameworks intended to enable secure data sharing. If we transfer your personal data outside the applicable jurisdiction, in other circumstances (for example, because we have to abide by law), we will make sure it remains adequately protected.

For transfers of Personal Information from the European Economic Area (EEA) and the United Kingdom (UK), Tenarai shall implement appropriate transfer mechanisms and safeguards in accordance with applicable data protection laws to ensure the lawful transfer and protection of Personal Information..

For Personal Information governed by the DPDPA, Tenarai shall not transfer such Personal Information to any country or territory outside India that is restricted by notification of the Central Government, and shall comply with any higher obligation of localization or restriction imposed under any other law or by any sectoral regulator in India.

For Personal Information governed by the PDPA, Tenarai shall transfer Personal Information outside Singapore only after taking appropriate steps to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that provided under the PDPA.

Intra-group transfers of Personal Information between Tenarai entities shall be governed by an intra-group data transfer agreement incorporating the applicable transfer mechanism, and shall be subject to the same standard of protection as transfers to Third Parties.

We may share non-personal, anonymized and aggregated information with third parties for several purposes, including data analytics, research, submissions, thought leadership and promotional activity.

How does Tenarai protect your personal data?

We use a range of measures to ensure we keep your personal data secure, accurate and up-to-date.

These include but are not limited to:

  • education and training to relevant staff to ensure they are aware of our privacy obligations when handling personal data;
  • administrative and technical controls to restrict access to personal data to a ‘need to know’ basis;
  • technological security measures, including fire walls, encryption and anti-virus software;
  • we may apply Pseudonymization, de-identification and Anonymization techniques in efforts to further protect personal data

The transmission of data over the internet (including by e-mail) is never completely secure. So although we use appropriate measures to try to protect personal data, we cannot guarantee the security of data transmitted to us or by us. 

What are your data protection rights?

Your data protection rights are highlighted here. 

  •  Right to information - You shall have the right to receive clear, transparent and easily accessible information regarding the collection, use, disclosure, retention and other processing of his/her Personal Information, including the purposes of processing, categories of Personal Information processed, recipients of the information and the rights available under applicable law.
  •  Right to access - You shall have the right to obtain confirmation as to whether Tenarai processes his or her Personal Information and, where applicable, to access such Personal Information and obtain a copy of the Personal Information together with information relating to the processing activities, subject to applicable legal exemptions. 
  • Right to Erasure/Delete (”Right to be forgotten”)- You shall have the right to have your Personal Information erased, i.e. the Right to be forgotten, and no longer processed. 
  • Right to rectification - You shall have the right to request the correction, completion or updating of inaccurate, incomplete or outdated Personal Information processed by Tenarai.
  • Right to restriction of processing (Applicable under GDPR Only)- Where provided under applicable law, You shall have the right to request that Tenarai restrict the processing of Personal Information under circumstances prescribed by applicable law, including where the accuracy of Personal Information is contested, the processing is unlawful, or the processing is subject to a pending objection.
  •  Right to data portability - Where provided under applicable law, You shall have the right to receive Personal Information provided to Tenarai in a structured, commonly used and machine-readable format and, where technically feasible, to transmit such information to another controller.
  • Right to not to be discriminated against (Applicable under CCPA/CPRA Only) - Tenarai shall not discriminate against any individual for exercising his/her privacy rights, except where such differentiation is expressly permitted under applicable law.
  • Right to object (opt-out) to processing - Where applicable, You shall have the right to object to the processing of Personal Information based on legitimate interests or for direct marketing purposes. Tenarai shall cease such processing unless permitted or required under applicable law.
  • Right to withdraw consent - You shall have the right to withdraw consent at any time, and the ease of withdrawing consent shall be comparable to the ease with which consent was given. Withdrawal shall not affect the lawfulness of processing carried out prior to such withdrawal.
  • Right to nominate (Applicable under DPDPA Only) – You shall have the right to nominate any other individual to exercise, in the event of death or incapacity of the Data Principal, the rights available under the DPDPA in respect of the Data Principal.
  • Right to grievance redressal (Applicable under DPDPA Only) - You shall have the right to a readily available means of grievance redressal in respect of any act or omission of Tenarai regarding the performance of its obligations or the exercise of the Data Principal’s rights, and shall exhaust such means before approaching the Data Protection Board of India.
  • Right to limit the use and disclosure of sensitive personal information (Applicable under CCPA/CPRA Only) – You (consumer) shall have the right to direct Tenarai to limit the use and disclosure of sensitive personal information to that which is necessary to perform the services reasonably expected by the consumer, as provided under the CCPA.
  • Right to opt out of sale, sharing and cross-context behavioral advertising (Applicable under CCPA/CPRA only) - You (consumer) shall have the right to direct Tenarai not to sell or share personal information, including through an opt-out preference signal transmitted by the consumer’s browser or device, which Tenarai shall honor where applicable.
  • Rights in relation to automated decision-making and profiling - You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, except as permitted under applicable law, and shall have the right to obtain human intervention, to express his or her point of view and to contest the decision.
  • Right to lodge a complaint with a Supervisory Authority - You shall have the right to lodge a complaint with the competent Supervisory Authority, including the Data Protection Board of India, the supervisory authority of the relevant EU Member State, the Information Commissioner’s Office, the Personal Data Protection Commission of Singapore, and the California Privacy Protection Agency or the California Attorney General.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This helps us to ensure that personal data is not disclosed to any person who has no right to receive it. No fee is required to make a request unless your request is clearly unfounded or excessive. Depending on the circumstances, we may be unable to comply with your request based on other lawful grounds.  

Do we use Cookies?

In order to provide you with a more personalized and responsive service, Tenarai needs to remember and store information about how you use this Website. This is done using small text files called cookies. Cookies contain small amounts of information that are downloaded to your computer or other device by a server for this Website. Your web browser then sends these cookies back to this Website on each subsequent visit so that it can recognize you and remember things such as your user preferences.

You are requested to explicitly agree or disagree to our usage of cookies. You may refuse to accept browser cookies; however, we will continue capturing essential and functional cookies to be able to provide you with our services.  You may still choose at any time to delete or disable all or part of these cookies using the Cookie settings area accessible at the bottom of each page of this Website, except for the Cookies which are necessary for the Website to function (Essential category of cookies). All cookies (including essential and functional cookies) can also be enabled or disabled through your browser settings. Please refer to Cookie Policy on our website for more details.

How long will Tenarai retain your personal data?

We seek to ensure that we only keep your personal data for the longest of:

  • the period necessary for the processing of relevant activity or services, for which the data was originally collected.
  • any retention period that is required by law; or
  • the period in which litigation or investigations might arise in respect of the services.

Changes to this privacy statement:

From time to time, we may update this statement. When we do, we will publish the changes on this Website. If you do not agree with these changes, you should discontinue your use of our Website. If material changes are made to this Statement, we will notify users by e-mail or by placing a prominent notice on this Website.

How to contact us, request access to your personal data or contact Tenarai with questions or feedback related to Privacy? 

If you have a privacy concern, comment, or complaint, or wish to access a copy of your personal data or to correct it if you believe it is inaccurate, you may contact Tenarai’s Data Protection Officer / Grievance Officer (Mr. Ravinder Arora) at DPO@Tenarai.com.

This policy was last updated and reviewed on 08 September 2026.