Contact Us

Privacy Policy

Effective Date: 10.6.26

1. Introduction

The Privacy Desk (hereinafter referred to as “we,” “our,” or “us”) is a private data consultancy firm specialising in data privacy, data governance, compliance advisory, and related professional services. We are committed to protecting the personal data of our clients, prospective clients, website visitors, business partners, and employees in accordance with applicable laws and regulations.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used, stored, and protected, your rights in relation to your data, and how you may exercise those rights. By engaging our services or interacting with our digital platforms, you agree to the practices described in this Policy.

2. Scope of This Policy

This Policy applies to:

  • Clients and prospective clients who engage or enquire about our consulting services
  • Visitors to our website
  • Third-party vendors, partners, and service providers
  • Any individual whose personal data is processed by us in connection with our services

This Policy does not apply to third-party websites or services that we may link to. We encourage you to review the privacy notices of those parties independently.

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Data You Provide Directly
  • Identity Data: full name
  • Contact Data: business or personal email address, phone number, mailing address
3.2 Data Collected Automatically
  • Device and technical data: IP address, browser type and version, operating system, device identifiers
  • Usage data: pages visited, time spent, clickstream data, referral sources
  • Cookie data: session cookies, analytics cookies (see our Cookie Policy for details)
3.3 Data Received from Third Parties
  • Publicly available professional information (e.g., LinkedIn profiles for business development purposes)
  • Referral information provided by existing clients or business partners
  • Data from client systems shared during delivery of consulting engagements

 

4. Purpose of Processing and Legal Basis

We process personal data only for specified, explicit, and legitimate purposes.

5. Data Retention

We retain personal data only for as long as is necessary for the purposes required by applicable law.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal Data Retention and Deletion procedures.

6. Data Sharing and Disclosure

We do not sell, rent, or trade personal data. We may share personal data with:

6.1 Service Providers and Data Processors

Third-party service providers who perform functions on our behalf (e.g., cloud hosting, IT support, payment processing, CRM platforms). These parties are contractually bound to process data only on our instructions and in compliance with applicable data protection laws.

6.2 Professional Advisors

Legal, financial, and other professional advisors where necessary for legal proceedings, compliance, or corporate transactions.

6.3 Regulatory and Law Enforcement Authorities

Where we are required to do so by law, court order, or regulatory directive, including disclosures to the Data Protection Board of India or equivalent supervisory authorities.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, personal data may be transferred as part of the transaction, subject to appropriate confidentiality protections.

7. Rights of Data Principals / Subjects

Subject to applicable law, you have the following rights in relation to your personal data:

 

  • Right of Access: Obtain a summary of the personal data we hold about you and information about its processing.
  • Right to Correction: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent (subject to legal retention obligations).
  • Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Grievance Redressal: Lodge a complaint with us or with the Data Protection Board of India.
  • Right to Nominate: Nominate another individual to exercise rights on your behalf in the event of your death or incapacity (as provided under the DPDPA, 2023).

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to improve user experience, analyse website performance, and support marketing activities. You may control cookie preferences through our cookie consent banner or through your browser settings. Disabling certain cookies may affect the functionality of our website.

Please refer to our separate Cookie Policy for full details of the cookies we use and the purposes for which they are used.

9. Third-Party Links

Our website and communications may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those external platforms. We encourage you to review the privacy policies of any third-party platforms you visit. We have no control over and assume no responsibility for the content or privacy practices of third-party sites.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. The version number and effective date at the top of this document will always reflect the most current version.

Your continued engagement with our services following the effective date of the revised Policy constitutes your acceptance of the updated terms.

11. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of India. Any dispute arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Pune, India.

12. Contact Us

For any queries, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact anindya@theprivacydesk.co