Privacy Policy

1. Who we are

Privara is a DPDPA compliance audit and advisory firm registered in India. Our website is located at https://privara.co.in. We are a Data Fiduciary under the Digital Personal Data Protection Act 2023 in respect of the personal data we collect through this website.

Grievance Officer: Viral Maru
Email: contact@privara.co.in
Address: Pune, Maharashtra, India

2. What personal data we collect

We collect personal data only when you voluntarily provide it to us through the contact form on this website. We do not collect personal data passively through tracking technologies beyond what is described below.

Data collected	Purpose	Legal basis
Name	To address you in correspondence	Consent — provided via contact form submission
Email address	To respond to your inquiry	Consent — provided via contact form submission
Organisation name	To understand the context of your inquiry	Consent — provided via contact form submission
Message content	To respond to your specific inquiry or request	Consent — provided via contact form submission
IP address and browser data	Standard server logs for security and performance monitoring	Legitimate use — website security

We do not collect sensitive personal data. We do not collect payment information through this website. We do not use cookies for tracking or advertising purposes.

3. How we use your data

Personal data submitted through our contact form is used solely to:

• Respond to your inquiry or service request
• Conduct a scoping conversation if you have requested one
• Follow up on an existing correspondence where you have initiated contact

We do not use your personal data for marketing communications unless you have specifically requested to receive them. We do not use your data for profiling, automated decision-making, or any purpose beyond responding to your inquiry.

4. How we share your data

We do not sell your personal data. We do not share your personal data with advertisers, data brokers, or third parties for commercial purposes.

Your data may be processed by the following third-party services that we use to operate this website:

Processor	Purpose	Data processed
Formspree	Contact form submission processing — routes form submissions to our email	Name, email, organisation, message content
GitHub Pages	Website hosting	IP address, browser data (standard server logs)

Both processors operate under their own privacy policies and data processing terms. We have reviewed these terms and selected processors whose data handling practices are consistent with the requirements of the DPDPA Act 2023.

5. How long we retain your data

Personal data submitted through our contact form is retained for as long as necessary to manage the inquiry and any resulting engagement, and for a period of up to 24 months thereafter for correspondence records.

If no engagement results from your inquiry, your contact data will be deleted within 12 months of the last correspondence.

You may request deletion of your data at any time by contacting us at contact@privara.co.in. We will process your request within 30 days.

6. Your rights under the DPDPA

As a data principal under the Digital Personal Data Protection Act 2023, you have the following rights in respect of your personal data that we hold:

• Right to access — You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
• Right to correction — You may request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to erasure — You may request that we delete your personal data. We will process this request unless we are required to retain it for legal or statutory purposes.
• Right to withdraw consent — You may withdraw consent to processing at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to grievance redressal — You may raise a grievance with our Grievance Officer. We will acknowledge your grievance within 48 hours and resolve it within 30 days.
• Right to nominate — You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer at contact@privara.co.in with the subject line "Data Principal Rights Request".

7. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. Access to contact form submissions is restricted to authorised personnel only.

In the event of a personal data breach that is likely to affect your rights or interests, we will notify you and the Data Protection Board of India in accordance with Section 8(6) of the DPDPA Act 2023.

8. Children's data

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has submitted personal data through our website, please contact us at contact@privara.co.in and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

Continued use of this website after a policy update constitutes acceptance of the updated policy.

10. Contact and grievance redressal

For any questions about this Privacy Policy, to exercise your data principal rights, or to raise a grievance, please contact:

If you are not satisfied with our response, you have the right to approach the Data Protection Board of India at www.meity.gov.in.