Privacy Policy Last Updated : 3 November 2026
This policy explains what personal data we collect through weareeccentric.com, why we collect it, who we share it with, and the rights you have over it.
Who We Are
This website is operated by Eccentric Engine Pvt. Ltd., a company registered in India, having CIN number U74120MH2012PTC232452, with its registered office at Eccentric, 271 Business Park, IITC Rd, off Western Express Highway, Vishveshwar Nagar, Goregaon East, Mumbai, Maharashtra 400063, India, (“Eccentric”, “we”, “us”). Our products include One3D, a real-time 3D visualisation platform, and our GenAI solutions, used by automotive manufacturers (OEMs) and dealers.
For personal data collected through this website, we decide why and how it is used. That makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the Data Controller under the EU General Data Protection Regulation (“GDPR”) for visitors in the European Economic Area (EEA) whose data we process when offering our services or monitoring website use. [If required under Article 27 GDPR, our EU representative is: name, contact details.]
What This Policy Covers
This policy covers weareeccentric.com, our product site one3d.in, and any forms, emails or job applications you send us through them.
It does not cover 3D visualisers or configurators we build for our clients and that run on their websites, apps, kiosks or vehicles. When you use those, the brand or dealer you are dealing with decides how your data is used, and their privacy policy applies. We process that data only on their instructions, as their Data Processor. In such circumstances, Eccentric typically acts only as a Data Processor or service provider processing personal data on documented instructions of the relevant Client. The Client remains responsible for determining the purposes and means of processing and for complying with applicable privacy laws, including providing privacy notices and obtaining any required consents.
Personal Data We Collect
We collect only what we need for the purpose stated at the time of collection.
| When | What we collect |
|---|---|
| You contact us, request a demo or sign up for updates | Name, work email, phone number, company, job title, country, and your message |
| You apply for a job | Name, contact details, CV, work history, education, portfolio links, and anything else you choose to send |
| You browse the website | IP address, device and browser type, pages viewed, links clicked, referring site, approximate location (city or country level), and cookie identifiers |
| You email or call us | Your contact details and the content of the conversation |
We do not ask for sensitive data such as financial or government ID numbers through this website. Please do not include it in forms or CVs.
How We Use Your Data
We use your data only for the purposes below. Where we rely on your consent, we ask for it clearly before collecting the data, and you can withdraw it at any time.
| Purpose | Data used | Basis (DPDP Act) | Basis (GDPR) |
|---|---|---|---|
| Reply to your enquiry or demo request | Contact details, message | Consent | Legitimate interests (responding to business enquiries) |
| Assess your job application and contact you about it | Application data | Consent | Steps before entering a contract; consent to keep your CV for future roles |
| Send product news, event invites and marketing emails | Name, email, company | Consent (opt-in) | Consent (opt-in) |
| Measure and improve the website | Usage and device data | Consent (cookie banner) | Consent (cookie banner) |
| Keep the website and our systems secure | IP address, logs | Legitimate use | Legitimate interests (security) |
| Meet legal obligations or respond to lawful requests | Any relevant data | Compliance with law | Legal obligation |
Where we rely on legitimate interests under the GDPR, we have weighed our interest against your rights, and you can object at any time.
We do not sell your personal data. We do not use it for any purpose not listed here without telling you and, where needed, asking for fresh consent.
Use of Artificial Intelligence
We do not use artificial intelligence or automated decision-making to process personal data collected through this website. Every enquiry and job application is reviewed by a person.
Cookies and Analytics
We use essential cookies to make the website work, and with your consent, analytics cookies to understand how visitors use it.
- Essential cookies load pages, remember your cookie choice and protect against misuse. They cannot be switched off.
- Analytics cookies ([e.g. Google Analytics]) tell us which pages are visited and how people move through the site. They are set only if you accept them.
- Marketing cookies ([e.g. LinkedIn Insight Tag], if used) help us measure campaigns. They are set only if you accept them.
You can change your choice at any time through [Cookie settings link in the footer], or by clearing cookies in your browser.
Who Can Access Your Data
We do not sell, rent or share your personal data with other companies. It stays with Eccentric Engine Pvt. Ltd., and only employees who need it for their work can access it:
- HR team: job applications, to assess candidates and contact them.
- Business team: enquiries and demo requests, to respond and manage the business relationship.
- Marketing team: marketing contacts and website analytics, to send updates you opted in to and improve the website.
- Tools we use to run our business, such as website hosting, email and analytics ([e.g. hosting provider, Microsoft 365, Google Analytics]). They store or process data only on our instructions and cannot use it for their own purposes.
- Authorities, only where the law requires us to disclose data.
Transfers Outside India
We are based in India, and some of our service providers store data in other countries. So your data may be processed outside the country where you live.
- From India: we transfer data only to countries not restricted by the Government of India under the DPDP Act.
- From the EEA: where data goes to a country without an EU adequacy decision, including India, we use the European Commission’s Standard Contractual Clauses or another safeguard the GDPR allows. You can ask us for a copy.
Business Transfers
Personal data may be transferred, disclosed or otherwise processed as part of a merger, acquisition, financing transaction, reorganisation, sale of assets, bankruptcy proceeding or similar corporate transaction.
How Long We Keep It
We keep personal data only as long as the purpose needs it, then delete it, unless the law requires us to keep it longer.
| Data | How long |
|---|---|
| Enquiries and demo requests | 12 months after our last contact |
| Marketing list | Until you unsubscribe or withdraw consent |
| Job applications (not hired) | 12 months after the role closes, so we can consider you for other roles; tell us if you want it deleted sooner |
| Website analytics | 12 months |
| Security logs | 3 months |
How We Protect It
We run an information security management programme built on recognised standards. It includes encryption in transit and at rest, role-based access limited to staff who need the data, multi-factor authentication, logging and monitoring, vendor security reviews, and regular staff training.
We are currently working towards ISO/IEC 27001:2022 (information security), ISO/IEC 42001 (AI management) and a SOC 2 Type II report. We will update this section as each is achieved. No system is completely secure.
If a personal data breach occurs, we will inform the Data Protection Board of India and affected people as the DPDP Act requires. For data covered by the GDPR, we will notify the relevant supervisory authority within 72 hours where required, and tell you without undue delay if the breach poses a high risk to you.
Your Rights
You can exercise any of these rights by emailing [email protected] from the address you gave us. We will respond within one month. Some rights depend on where you live and the basis we rely on.
- Access: ask for a copy or summary of the personal data we hold about you and who we have shared it with.
- Correction and updating: ask us to fix data that is wrong, incomplete or out of date.
- Erasure: ask us to delete your data, unless we must keep it by law.
- Withdraw consent: at any time, as easily as you gave it. For marketing, click “unsubscribe” in any email. Withdrawal does not affect what we did before.
- Object (GDPR): object to processing based on our legitimate interests, and to direct marketing at any time.
- Restrict (GDPR): ask us to pause using your data while a concern is resolved.
- Portability (GDPR): receive data you gave us in a common machine-readable format, or have it sent to another organisation.
- Nominate someone (DPDP Act): name a person to exercise your rights if you die or become unable to.
- Complain: to us first, and then to a regulator (below).
We may need to verify your identity before acting on a request.
Grievance Officer
If you have a concern about how we handle your data, contact our Grievance Officer:
AbdulRazzaq Shaikh
CISO
[email protected]
Eccentric, 271 Business Park, IITC Rd
off Western Express Highway, Vishveshwar Nagar
Goregaon East, Mumbai
Maharashtra 400063
If you are not satisfied with our response:
- In India: complain to the Data Protection Board of India.
- In the EEA: complain to the data protection authority where you live or work, or where the issue arose.
Children
This website is meant for businesses and job seekers aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, contact us and we will delete it.
Compliance, Risk Management and Legal Claims
We may process personal data where necessary to:
- comply with legal obligations;
- establish, exercise or defend legal claims;
- enforce contractual rights;
- investigate misconduct, fraud or security incidents;
- maintain internal governance, audit and compliance programmes; and
- protect the rights, property or safety of Eccentric, customers, employees or third parties.
Changes to This Policy
We will update this policy when our practices or the law change, and show the new date at the top. If a change materially affects how we use data you have already given us, we will tell you by email or on the website, and ask for fresh consent where required.
Contact Us
For any question about this policy or your data, email [email protected] or write to Eccentric Engine Pvt. Ltd., Eccentric, 271 Business Park, IITC Rd, off Western Express Highway, Vishveshwar Nagar, Goregaon East, Mumbai, Maharashtra 400063, India.
