Privacy Policy

1. Introduction & Scope

CXO Junction Platform operated by CyberFrat Private Limited (“Company”, “we”, “us”, or “our”) is a global technology media and executive networking platform that connects enterprise leaders, decision-makers, industry experts, and technology solution providers through events, communities, media platforms, thought leadership initiatives, surveys, lead generation programs, and business engagement activities.

This Privacy Policy explains how we collect, use, disclose, protect, and retain personal data in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA") and other applicable laws.

Data Controller: CXO Junction of CyberFrat Private Limited.

Address: F-203, Eastern Business District, Neptune Magnet Mall, Bhandup West, Mumbai, Maharashtra, India. Contact: info@cxojunction.com | +91 8360909060 Website: www.cxojunction.com

2. Personal Data We Collect

Information Provided by You

We may collect:

• Name, business email address, phone number, and professional contact details.

• Company name, industry, designation, department, and business profile information.

• Event registrations, webinar participation, conference attendance, award nominations, and networking preferences.

• Survey responses, self-assessment submissions, feedback, and questionnaire responses.

• Content submissions, speaker applications, podcast participation information, and media contributions.

• Communications exchanged with us through email, website forms, social media, messaging platforms, or other channels.

Information Collected Automatically

We may collect:

• IP address, browser information, device information, and website usage data.

• Cookie and tracking technology information.

• Email engagement data, including opens, clicks, and campaign interactions.

Information Received from Third Parties

We may receive:

• Professional and business information from publicly available sources.

• Event participation information from event partners.

• Authorised marketing and data partners, who supply business contact information in compliance with applicable law and with appropriate consent or legitimate use basis.

• Analytics and audience insights from marketing and technology service providers.

We take reasonable steps to verify that third parties from whom we receive personal data have done so lawfully and with appropriate authorisation.

Sensitive Personal Data

CXO Junction generally does not collect sensitive personal data unless required for a specific event, legal obligation, or business purpose and with appropriate safeguards.

3. Purpose of Data Processing

We process personal data to:

• Operate and manage the CXO Junction community and networking platform.

• Facilitate executive networking, business introductions, and community engagement activities.

• Organize, administer, and manage conferences, roundtables, roadshows, webinars, podcasts, awards, and other events.

• Conduct surveys, assessments, research programs, and industry intelligence initiatives.

• Deliver thought leadership content, magazines, newsletters, reports, and industry insights.

• Provide marketing, sponsorship, advertising, and lead generation services to participating organizations.

• Communicate with community members regarding events, programs, updates, and opportunities.

• Improve our services, content, events, and user experience.

• Maintain platform security, prevent fraud, and manage operational risks.

• Comply with legal, regulatory, contractual, and business obligations.

Withdrawing Consent:

Where we process your personal data based on consent, you may withdraw that consent at any time by:

• Clicking the “Unsubscribe” link in any marketing or newsletter email from us. · Emailing us at privacy@cxojunction.com with the subject line “Withdraw Consent.” · Submitting a request through the contact form on https://cxojunction.com/

We will process your withdrawal request within 7 business days. Please note that withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal, and certain data may still be retained where we have a separate legal or contractual basis to do so.

4. Data Sharing & Third Parties

We may share personal data with:

• Event organizers, sponsors, exhibitors, and participating partners.

• Marketing, analytics, CRM, communication, and technology service providers.

• Webinar, podcast, conference, and event management platforms.

• Professional advisors, auditors, and legal consultants.

• Government authorities, regulators, law enforcement agencies, or courts where required by law.

For sponsored events, campaigns, webinars, surveys, or lead generation activities, relevant professional information may be shared with participating sponsors or partners where permitted by applicable law, disclosed to participants at or before the point of data collection, or where your explicit consent has been obtained for such sharing.

We do not:

• Sell personal data.

• Share personal data with data brokers.

• Share personal data for unrelated third-party marketing without appropriate consent or legal basis.

All third-party processors are subject to appropriate contractual confidentiality and data protection obligations.

5. Data Retention & Deletion

We retain personal data only for as long as necessary to:

• Provide our services.

• Maintain community participation records.

• Support event management and business operations.

• Comply with legal, regulatory, contractual, accounting, and audit requirements.

When personal data is no longer required, it will be securely deleted, anonymized, or de-identified, subject to applicable legal retention obligations.

You may request deletion of your personal data, subject to applicable laws and legitimate business requirements.

6. Your Rights under DPDPA

Subject to applicable law, you may:

• Access your personal data.

• Correct inaccurate or incomplete personal data.

• Request deletion of personal data.

• Withdraw consent where processing is based on consent.

• Nominate another individual to exercise rights in accordance with applicable law.

• Seek grievance redressal regarding the processing of your personal data.

Requests may be submitted to our Grievance Officer using the contact details provided below.

If you are dissatisfied with our response, you may approach the Data Protection Board of India in accordance with applicable law.

7. Security Measures

We implement reasonable technical, administrative, and organizational safeguards to protect personal data, including:

• Access controls and authentication measures.

• Encryption and secure transmission protocols where appropriate.

• Vendor risk management and contractual safeguards.

• Employee confidentiality obligations and training.

• Security monitoring and incident response procedures.

While we strive to protect personal data, no method of transmission or storage can guarantee absolute security.

8. Automated Processing & Profiling

We may use automated tools and analytics to:

• Analyse audience interests and engagement.

• Improve marketing campaigns and event participation.

• Deliver relevant content, invitations, and recommendations.

• Generate aggregated business intelligence and community insights.

Where legally required, appropriate safeguards and human oversight will be implemented.

Your rights regarding profiling:

• Where automated processing significantly influences decisions about you — such as targeting for sponsored content, event invitations, or lead generation

activities — we will, where legally required, implement appropriate human oversight and provide you the opportunity to object.

• You may request that your data not be used for profiling or targeted marketing by contacting us at privacy@cxojunction.com. We will honour such requests within 7 business days, subject to any overriding legitimate business or legal requirements.

9. Children's Data

• CXO Junction's services are intended exclusively for business professionals and enterprise decision-makers.

• We do not knowingly collect personal data from children.

• If we become aware that personal data of a child has been collected inadvertently, we will take reasonable steps to delete such information.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Operate and secure our website.

• Analyse website traffic and engagement.

• Measure campaign effectiveness.

• Improve user experience and content relevance.

You may manage cookie preferences through browser settings or available consent mechanisms.

Disabling certain cookies may impact website functionality.

11. International Data Transfers

• Given the global nature of our community and events across India, APAC, and the Middle East, personal data may be processed, accessed, or stored outside India where permitted by applicable law.

• Appropriate safeguards will be implemented for such transfers.

• We will only transfer personal data internationally in compliance with the provisions of the Digital Personal Data Protection Act, 2023, and any rules or notifications issued thereunder by the Government of India. You may request

information about the specific safeguards applicable to your data by contacting our Grievance Officer.

12. Breach Notification

In the event of a personal data breach, we will take appropriate measures to:

• Assess and contain the incident.

• Investigate the scope and impact of the breach.

• Notify affected individuals where required by applicable law.

• Notify competent authorities as required by law.

• Provide relevant information regarding the nature of the breach and recommended protective measures.

13. Grievance Redressal & Contact

Grievance Redressal & Contact

For privacy-related requests, concerns, or grievances, please contact our designated Grievance Officer:

Grievance Officer: [Full Name, Designation]

CXO Junction | CyberFrat Private Limited Email: privacy@cxojunction.com

Phone:

Address: F-203, Eastern Business District, Neptune Magnet Mall, Bhandup West, Mumbai, Maharashtra, India.

Website: www.cxojunction.com

We will acknowledge your request within 48 hours and resolve grievances within the timelines prescribed under the Digital Personal Data Protection Act, 2023 (generally within 30 days). If you remain dissatisfied with our response, you may escalate the matter to the Data Protection Board of India as per applicable law.

14. Policy Change Notification

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations.

• The "Last Updated" date at the top of this policy will reflect the most recent revision.

• For material changes — those that significantly affect how we process your personal data or your rights — we will notify you by email (where we hold your contact details) or by posting a prominent notice on our website at least 14 days prior to the change taking effect.

• Continued use of our services or participation in our community after the effective date of any revised policy constitutes your acknowledgment of the updated terms.

We encourage you to review this policy periodically.