We take your data seriously. We’ve listed exactly how we handle your data below.

This Privacy Policy explains how [Your Company Name] Private Limited (“[Your Company]”, “we”, “us”) collects, uses, stores and protects your personal data when you visit www.yourcompany.in. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary and you are the Data Principal.

Our registered office is at [Registered office address, City, State, PIN].

When you use our website we may collect the following personal data:

• Details you give us, such as your name, email address, phone number and company when you fill in a form or contact us
• Your consent status, or the withdrawal of your consent, for cookies
• Your IP address, browser type and version, and device information
• The date and time of your visit and the pages you viewed
• The approximate location from which you accessed our website
• A unique identifier stored when you interact with our cookie banner

For our website to function properly we use cookies. Under Section 6 of the DPDP Act, we process your personal data only after you give free, specific, informed, unconditional and unambiguous consent through a clear affirmative action. To obtain and record your consent for the use and storage of cookies in your browser, we use a consent management tool: [Your cookie consent tool, e.g. CookieYes / Cookiebot / custom banner].

When you open our website, the tool shows you a cookie banner. Your choice is saved in a cookie in your browser so that we only activate the cookies you have agreed to, and so that we can keep a record of your choice. This record is kept until the set storage period ends or you ask us to delete it, unless the law requires us to keep it for longer.

You can withdraw your consent at any time, as easily as you gave it, through the cookie settings link on our website. Withdrawal does not affect the lawfulness of processing done before you withdrew.

We use your personal data only for the purposes you have consented to, or for other lawful uses permitted by the DPDP Act. These are to:

• Run and secure our website
• Respond to your enquiries and requests
• Understand how our website is used and improve it
• Keep a record of your consent choices
• Meet our legal and regulatory obligations

We share personal data only with service providers who process it on our behalf, such as our hosting provider, analytics provider and consent management provider. We have a written agreement with each of them requiring them to process data only on our instructions and to keep it secure. We do not sell your personal data.

Where we transfer personal data outside India, we do so only in line with the DPDP Act and any restrictions notified by the Central Government.

We use reasonable security safeguards, including encryption in transit, access controls and regular reviews, to protect your personal data from unauthorised access, loss or misuse. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

We keep personal data only for as long as needed for the purpose it was collected, or as required by law. After that, we delete it or remove anything that identifies you.

As a Data Principal under the DPDP Act, you have the right to:

• Ask for a summary of the personal data we process and how we process it
• Ask us to correct, complete or update your personal data
• Ask us to erase your personal data when it is no longer needed
• Withdraw your consent at any time
• Get your grievance resolved by our Grievance Officer
• Nominate another person to exercise your rights if you die or become unable to do so

Our website is not meant for anyone under 18. We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian. If you think a child has given us their data, please contact us and we will delete it.

If you have a question or complaint about how we handle your personal data, please contact our Grievance Officer: [Name of Grievance Officer], grievance@yourcompany.in. We aim to respond within 7 days.

If we do not resolve your complaint, you can approach the Data Protection Board of India.

We may update this policy from time to time. The latest version is always on this page. Last updated: [DD Month YYYY].

[Your Company Name] Private Limited, [Registered office address, City, State, PIN]

Email: privacy@yourcompany.in | Phone: +91 [00000 00000]