Security

At Interloop Consulting, security is not an afterthought — it is integrated into how we operate. We understand that our clients trust us with sensitive business information, and we take that responsibility seriously.

Our approach to security is grounded in three core principles:

• Transparency. We are honest about our security practices and do not overstate our capabilities. Where we rely on third-party platforms and infrastructure, we are clear about the division of responsibility.
• Proportionality. Our security measures are proportionate to the nature and sensitivity of the information we handle. We do not implement measures that are unnecessary for our specific context, nor do we neglect appropriate safeguards.
• Continuous Improvement. Security is not a static state. We regularly review and update our practices to respond to evolving threats and changing business needs.

This page describes our security practices as they relate to this website, our consulting engagements, and the data we handle. For detailed information about how we collect and use personal data, please refer to our Privacy Policy.

2.1 Data in Transit. All traffic to and from this website is encrypted using industry-standard TLS (Transport Layer Security). This ensures that any information you submit through our contact forms or browse on our site is protected against interception during transmission.

2.2 No Public User Accounts. This website does not have a public user login or account system. We do not store user credentials, maintain sessions, or provide authenticated access to content. The primary interaction with our site is through contact forms and informational browsing.

2.3 Form Submissions. Information submitted through our contact forms is transmitted securely and used solely for the purpose of responding to your inquiry. At this time, form submissions are handled through our site's frontend; we do not store submitted data in a persistent database on this website. For details on how we use and retain inquiry data, please see our Privacy Policy.

2.4 Infrastructure. The website is hosted on modern cloud infrastructure with standard security practices including regular updates, network-level protections, and access controls.

We collect limited personal information through this website, primarily through our contact forms. The information we collect includes:

• Full Name
• Phone Number
• Email Address
• Entity Type

This information is collected solely for the purpose of responding to your inquiries about our services, which include Zoho implementation and consulting, HR consulting, payroll processing, managed HR services, business transformation, virtual consulting, and business development consulting.

We protect the information you provide through:

• Encryption in Transit. All form submissions are transmitted over TLS-encrypted connections.
• Limited Access. Access to inquiry data is restricted to personnel who need it to respond to your request.
• Data Minimization. We collect only the information necessary to fulfill your request.
• Purpose Limitation. We use your information only for the purposes for which it was provided.

For a comprehensive explanation of our data handling practices, including retention periods and your rights, please refer to our Privacy Policy.

As a consulting firm, we handle client data — including business processes, employee information, financial data, and strategic plans — as part of our service delivery. We take this responsibility seriously.

4.1 Confidentiality Obligations. All consulting engagements are governed by confidentiality provisions that protect client information. Our consultants are bound by confidentiality obligations as a standard part of their engagement agreements.

4.2 Access Limitation. Access to client systems, data, and platforms is limited to consultants who need it to perform their work. We follow the principle of least privilege — granting the minimum access necessary for the task.

4.3 Zoho Platforms. Many of our engagements involve implementing, configuring, and customizing Zoho applications. While we ensure that client Zoho environments are configured according to security best practices, the underlying platform security — including data center security, infrastructure-level protections, and compliance certifications — is the responsibility of Zoho Corporation as the platform provider. We recommend that clients review Zoho's own security and trust resources for detailed information about their platform-level security controls.

4.4 Types of Data Handled. Depending on the engagement, we may handle:

• HR and payroll data (through Zoho People and related services);
• CRM data (through Zoho CRM and related services);
• Financial and expense data (through Zoho Books, Expense, and related services);
• Business processes and strategy information (through consulting engagements); and
• Other business data as required for specific engagements.

All such data is handled in accordance with our confidentiality commitments and applicable legal requirements.

Our consulting services are built on a foundation of third-party platforms, primarily the Zoho suite of applications. We also rely on hosting and infrastructure providers for our website and internal operations.

5.1 Zoho Security. Zoho Corporation publishes comprehensive information about its security practices, certifications, and compliance frameworks through its official trust and security resources. As a Zoho Partner, we recommend clients review Zoho's documentation for assurance about the platform-level security of their Zoho environments.

5.2 Our Responsibility. While we rely on Zoho's platform security, we are responsible for:

• Configuring Zoho environments according to security best practices;
• Ensuring that customizations, scripts, and integrations do not introduce vulnerabilities;
• Managing access controls and user provisioning appropriately; and
• Advising clients on security best practices for their Zoho implementation.

5.3 Other Third-Party Services. We may use additional third-party services in our operations, including email hosting, collaboration tools, and infrastructure services. All such services are selected with consideration for their security practices and compliance with applicable laws.

Our internal security practices are designed to ensure that our team handles information responsibly and that client data is protected throughout its lifecycle.

6.1 Access Controls. Access to client systems and data is granted on a need-to-know basis and is reviewed periodically. Our consultants are provided with access only to the systems and data necessary for their specific engagement responsibilities.

6.2 Training & Awareness. Our team receives training on data protection, confidentiality, and security best practices. We encourage a culture of security awareness where every team member understands their responsibility to protect client information.

6.3 Confidentiality Commitments. All team members are bound by confidentiality obligations through their employment agreements and the specific engagement terms for each client project.

6.4 Remote Work. Our team may work remotely. We take reasonable steps to ensure that remote work does not compromise security, including the use of secure connections and appropriate access controls.

We welcome responsible disclosure of potential security vulnerabilities related to our website or services. If you believe you have identified a security issue, please report it to us promptly.

7.1 Reporting Channel. To report a potential security issue, please contact us at:

• Email: connect@interloopconsulting.com
• Phone: +91-9311632026

7.2 What to Include. When reporting, please provide:

• A clear description of the issue;
• Steps to reproduce the issue;
• Any relevant technical details (browser, operating system, URL);
• Your contact information (optional but appreciated for follow-up).

7.3 Our Commitment. We commit to:

• Acknowledging receipt of your report promptly;
• Investigating the issue in good faith;
• Taking appropriate action to address legitimate concerns; and
• Not taking legal action against researchers who report issues in good faith and in accordance with responsible disclosure practices.

We ask that you do not publicly disclose any issue until we have had reasonable time to address it.

We maintain a commitment to investigate and respond to any reported security concerns in a timely and professional manner. While we do not have a formal public SLA for incident response, we take every reported issue seriously and will address it appropriately.

8.1 Response Process. In the event of a reported security concern, we will:

• Acknowledge receipt of the report;
• Assess the nature and severity of the issue;
• Take appropriate action to contain and remediate the issue;
• Communicate with affected parties as appropriate; and
• Review and improve our practices to prevent recurrence.

8.2 Data Breach Notifications. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and the appropriate regulatory authorities as required by applicable law, including India's Digital Personal Data Protection Act, 2023.

9.1 Right to Modify. We reserve the right to modify, update, or replace this Security page at any time. We will notify you of any material changes by posting the updated page on the Website and updating the "Last Updated" date at the top of this page.

9.2 Continued Use. Your continued use of the Website after any such changes constitutes your acceptance of the revised content. If you do not agree with any changes, please stop using the Website.

9.3 Version Control. We recommend that you review this page periodically to stay informed of our security practices. You can always access the current version through the "Security" link in our footer.

If you have any questions, concerns, or inquiries regarding our security practices or wish to report a vulnerability, please contact us:

Interloop Consulting

Email: connect@interloopconsulting.com
Phone: +91-9311632026

For Security Inquiries: connect@interloopconsulting.com

Registered Office: [Registered office address to be confirmed]