1Personal data collected

• Voluntarily provided data: your name, email address, contact number, organisation or business name, and the nature of your enquiry.
• Automatically collected technical data: IP address, browser type, device information, pages visited, time spent, and referral sources.

We do not collect sensitive personal data such as financial details, PAN, or Aadhaar through this website.

2Purposes of processing

Your data is processed only for the following purposes:

• Responding to your enquiries
• Providing general information about our services
• Improving website functionality and security
• Analytics and performance monitoring
• Compliance with applicable legal obligations

3Legal basis for processing

• Consent (Section 6, DPDP Act): by submitting an enquiry, you provide free, specific, informed, and unambiguous consent. Consent is voluntary and may be withdrawn at any time.
• Legitimate uses (Section 4, DPDP Act): technical data for site security is processed on the basis of legitimate interest.

4Data sharing and transfers

We do not sell or share your personal data for marketing. Limited sharing occurs with website hosting and analytics providers under strict contractual obligations, and with legal authorities where required by law. No cross-border transfers occur unless necessary and compliant with the DPDP Act.

5Data retention

Enquiry data is retained for up to three years after resolution, or longer if required by law. Technical data is retained for up to one year. After the applicable retention period, data is securely deleted or anonymised.

6Security measures

We implement reasonable security safeguards including encryption of data in transit, access controls, monitoring and logging, and incident response protocols. In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals as required under applicable law.

7Your rights as Data Principal

Under Sections 11 to 13 of the DPDP Act, you have the right to access your personal data, request correction of inaccurate data, request erasure where data is no longer needed or consent is withdrawn, and seek grievance redressal.

8Grievance redressal

For concerns regarding personal data, please contact us at office@caalkeshpatel.com. If unsatisfied with our response, you may file a complaint with the Data Protection Board of India.