Privacy Policy
1. Who we are
Privara is a DPDPA compliance audit and advisory firm registered in India. Our website is located at https://privara.co.in. We are a Data Fiduciary under the Digital Personal Data Protection Act 2023 in respect of the personal data we collect through this website.
Grievance Officer: Viral Maru
Email: contact@privara.co.in
Address: Pune, Maharashtra, India
2. What personal data we collect
We collect personal data only when you voluntarily provide it to us through the contact form on this website. We do not collect personal data passively through tracking technologies beyond what is described below.
| Data collected | Purpose | Legal basis |
|---|---|---|
| Name | To address you in correspondence | Consent — provided via contact form submission |
| Email address | To respond to your inquiry | Consent — provided via contact form submission |
| Organisation name | To understand the context of your inquiry | Consent — provided via contact form submission |
| Message content | To respond to your specific inquiry or request | Consent — provided via contact form submission |
| IP address and browser data | Standard server logs for security and performance monitoring | Legitimate use — website security |
We do not collect sensitive personal data. We do not collect payment information through this website. We do not use cookies for tracking or advertising purposes.
3. How we use your data
Personal data submitted through our contact form is used solely to:
- Respond to your inquiry or service request
- Conduct a scoping conversation if you have requested one
- Follow up on an existing correspondence where you have initiated contact
We do not use your personal data for marketing communications unless you have specifically requested to receive them. We do not use your data for profiling, automated decision-making, or any purpose beyond responding to your inquiry.
4. How we share your data
We do not sell your personal data. We do not share your personal data with advertisers, data brokers, or third parties for commercial purposes.
Your data may be processed by the following third-party services that we use to operate this website:
| Processor | Purpose | Data processed |
|---|---|---|
| Formspree | Contact form submission processing — routes form submissions to our email | Name, email, organisation, message content |
| GitHub Pages | Website hosting | IP address, browser data (standard server logs) |
Both processors operate under their own privacy policies and data processing terms. We have reviewed these terms and selected processors whose data handling practices are consistent with the requirements of the DPDPA Act 2023.
5. How long we retain your data
Personal data submitted through our contact form is retained for as long as necessary to manage the inquiry and any resulting engagement, and for a period of up to 24 months thereafter for correspondence records.
If no engagement results from your inquiry, your contact data will be deleted within 12 months of the last correspondence.
You may request deletion of your data at any time by contacting us at contact@privara.co.in. We will process your request within 30 days.
6. Your rights under the DPDPA
As a data principal under the Digital Personal Data Protection Act 2023, you have the following rights in respect of your personal data that we hold:
- Right to access — You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
- Right to correction — You may request that we correct any inaccurate or incomplete personal data we hold about you.
- Right to erasure — You may request that we delete your personal data. We will process this request unless we are required to retain it for legal or statutory purposes.
- Right to withdraw consent — You may withdraw consent to processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
- Right to grievance redressal — You may raise a grievance with our Grievance Officer. We will acknowledge your grievance within 48 hours and resolve it within 30 days.
- Right to nominate — You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer at contact@privara.co.in with the subject line "Data Principal Rights Request".
7. Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. Access to contact form submissions is restricted to authorised personnel only.
In the event of a personal data breach that is likely to affect your rights or interests, we will notify you and the Data Protection Board of India in accordance with Section 8(6) of the DPDPA Act 2023.
8. Children's data
This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has submitted personal data through our website, please contact us at contact@privara.co.in and we will delete it promptly.
9. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.
Continued use of this website after a policy update constitutes acceptance of the updated policy.
10. Contact and grievance redressal
For any questions about this Privacy Policy, to exercise your data principal rights, or to raise a grievance, please contact:
Name: Viral Maru
Email: contact@privara.co.in
Address: Pune, Maharashtra, India
We will acknowledge grievances within 48 hours and resolve them within 30 days of receipt.
If you are not satisfied with our response, you have the right to approach the Data Protection Board of India at www.meity.gov.in.