Privacy Policy

1. Introduction

DataConsultant respects the privacy of website visitors, prospective clients, clients, client personnel, consultants, contractors, vendors, job applicants, business partners, and other individuals who interact with us.

This Privacy Policy explains how we may collect, receive, use, disclose, store, retain, and otherwise handle information that identifies, relates to, describes, or may reasonably be linked with an individual. In this policy, we refer to that information as “personal information.”

Our activities may include data analytics, business intelligence, data strategy, data engineering, data management, dashboards, reporting, artificial intelligence and machine learning support, data migration, integration, automation, database consulting, research, training, advisory services, dedicated professionals, managed teams, and related technical support.

2. Scope of This Policy

This policy applies to personal information handled in connection with:

• our website at https://dataconsultant.in and related forms, portals, or online features;
• enquiries, proposals, consultations, meetings, and business communications;
• client onboarding, project delivery, account management, billing, and support;
• recruitment, contractor engagement, vendor management, and professional relationships;
• training, advisory, research, analytics, and technical services; and
• security, administration, legal, and business-continuity activities.

This policy does not automatically govern personal information that a client controls and instructs us to process solely on its behalf. In those situations, the relevant client agreement and data-processing terms generally govern our handling of that information.

3. Our Role When Handling Personal Information

3.1 Information We Handle for Our Own Business Purposes

We may decide why and how personal information is used when we operate our website, respond to enquiries, manage client and vendor relationships, recruit personnel, administer accounts, issue invoices, maintain security, and manage our business.

3.2 Information We Process for Clients

During a consulting engagement, a client may provide access to customer, employee, supplier, user, financial, operational, marketing, technical, or other datasets. When we process such information solely for the client’s project, the client generally determines the purpose and permitted use of the data.

We will handle client data according to the applicable service agreement, documented client instructions, agreed security and confidentiality requirements, and relevant legal obligations. Clients remain responsible for ensuring they have the necessary rights, notices, permissions, and lawful grounds to provide data to us.

4. Personal Information We May Collect

The information we collect depends on how you interact with DataConsultant, the services requested, and the requirements of a particular project.

4.1 Identity and Contact Information

• name, job title, employer, professional role, and department;
• business email address, telephone number, postal address, and communication preferences;
• account, portal, or profile information where relevant;
• information needed to confirm authority, identity, or business representation.

4.2 Enquiry, Client, and Commercial Information

• service requirements, project briefs, objectives, budgets, timelines, and technical needs;
• proposals, quotations, contracts, statements of work, instructions, approvals, and feedback;
• communications, meeting notes, support requests, and relationship history;
• billing details, invoices, payment status, transaction references, and tax-related records.

4.3 Project and Client Data

• datasets, databases, files, spreadsheets, reports, source systems, exports, schemas, and documentation;
• customer, employee, supplier, transaction, marketing, finance, operations, or product data supplied by a client;
• system credentials, integration details, access permissions, and technical configurations where required;
• outputs, dashboards, models, reports, code, documentation, and project communications.

4.4 Website and Technical Information

• internet protocol address, browser, device, operating system, language, and approximate location;
• pages visited, referral source, session activity, clicks, form interactions, and timestamps;
• cookie identifiers, analytics identifiers, consent preferences, logs, and diagnostic data;
• security events, authentication activity, error reports, and suspected misuse.

4.5 Recruitment, Contractor, and Vendor Information

• curriculum vitae, employment history, education, skills, portfolio, and references;
• availability, rates, work authorisation, interview notes, and engagement records;
• vendor contacts, service details, payment records, and due-diligence information.

4.6 Sensitive Information

We do not ordinarily ask website users to provide highly sensitive information through public forms. A project may occasionally involve sensitive or regulated information supplied by a client. In that case, its use should be specifically agreed, limited to what is necessary, and governed by suitable contractual, technical, and organisational measures.

Please do not send passwords, private keys, full payment-card details, government identity documents, health information, biometric information, or other highly sensitive material through an unsecured form or ordinary email unless we have specifically requested it and provided an appropriate method.

5. How We Collect Information

We may collect personal information:

• Directly from you, including through website forms, email, telephone, video calls, meetings, contracts, support requests, or project submissions.
• From your organisation, such as when an employer, client, vendor, or partner identifies you as a contact or project participant.
• From clients, when a client provides datasets, system access, files, records, or instructions for a consulting engagement.
• Automatically, through cookies, analytics tools, server logs, security systems, and similar technologies.
• From third-party platforms, such as scheduling, communication, payment, cloud, analytics, professional-networking, or recruitment services.
• From public sources, such as business websites, professional directories, public registries, and information lawfully made public.

6. Why We Use Personal Information

Depending on the circumstances, we may use personal information to:

• respond to enquiries and arrange consultations;
• prepare proposals, quotations, service plans, and statements of work;
• onboard clients and deliver data consulting services;
• access, analyse, clean, migrate, transform, integrate, visualise, or otherwise process project data;
• develop dashboards, reports, data models, pipelines, automations, machine learning solutions, or technical documentation;
• manage projects, resources, approvals, quality reviews, support, and communications;
• operate, secure, maintain, and improve our website and systems;
• administer accounts, invoices, payments, taxes, records, and contractual obligations;
• evaluate applicants, consultants, contractors, and service providers;
• conduct internal planning, service evaluation, research, and business administration;
• prevent fraud, misuse, unauthorised access, and security incidents;
• establish, exercise, or defend legal rights and respond to lawful requests;
• send service-related communications and, where appropriate, business updates or marketing communications; and
• carry out another compatible purpose disclosed at the time of collection or permitted by applicable requirements.

7. Legal and Lawful Processing Considerations

Privacy requirements differ by location. Depending on the applicable rules and the nature of the activity, we may handle personal information because:

• you have provided consent;
• processing is needed to take requested steps or perform an agreement;
• processing is needed for legitimate and proportionate business purposes;
• processing is required to meet a legal, regulatory, tax, accounting, or security obligation;
• processing is necessary to protect rights, systems, property, or individuals; or
• another lawful basis or permitted purpose applies.

Where we rely on consent, you may withdraw it subject to applicable limitations. Withdrawal does not normally affect processing already carried out or processing supported by another lawful reason.

8. Client Data and Confidential Information

Clients may provide information relating to their customers, employees, contractors, vendors, users, transactions, operations, or systems. Examples include customer records, sales information, analytics data, financial records, human-resources data, ecommerce data, marketing data, and application logs.

Where we process client data on a client’s behalf:

• we will use it for the agreed services and documented instructions;
• access should be limited to authorised personnel and approved service providers with a business need;
• the client remains responsible for the lawfulness, accuracy, quality, and permitted use of the source data;
• the client should not provide data that is unnecessary for the project;
• project-specific confidentiality, ownership, retention, deletion, return, and security terms may be stated in a separate agreement; and
• requests from individuals relating to client-controlled data may be referred to the relevant client.

Neither this policy nor our receipt of data transfers ownership of client data to us. Data ownership and intellectual property rights are governed by the applicable contract, statement of work, licence terms, and law.

9. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, scripts, or similar technologies to support core website functions, remember preferences, understand website usage, maintain security, and improve performance.

9.1 Common Categories

• Necessary technologies support security, forms, sessions, consent preferences, and basic website operation.
• Functional technologies remember selected settings or preferences.
• Analytics technologies help us understand traffic, navigation, errors, and performance.
• Marketing technologies may measure campaigns or support relevant communications where enabled and permitted.

9.2 Your Choices

Where appropriate, you may be able to manage non-essential technologies through a cookie preference tool. You can also adjust browser or device settings. Restricting certain technologies may affect website functionality. Additional details may be provided in a separate Cookie Policy.

10. When We May Share Personal Information

We may disclose personal information only where reasonably necessary for the purposes described in this policy, instructed by a client, authorised by you, or required or permitted by applicable obligations.

Recipients may include:

• authorised employees, consultants, contractors, and project personnel;
• cloud hosting, storage, database, analytics, cybersecurity, communication, collaboration, project-management, and support providers;
• payment processors, banks, accountants, tax advisers, insurers, lawyers, and other professional advisers;
• client-selected platforms, software providers, integration partners, and technical vendors;
• business partners or subcontractors involved in an agreed engagement;
• government bodies, regulators, courts, law-enforcement agencies, or other parties responding to a lawful request;
• potential or actual participants in a merger, investment, financing, restructuring, acquisition, or sale of business assets.

Some third parties act independently and apply their own privacy notices. We encourage you to review those notices before directly using a third-party service.

11. Third-Party Tools, Platforms, and Integrations

DataConsultant may use or connect with third-party services for cloud hosting, databases, analytics, data visualisation, project management, communications, payments, customer relationship management, code repositories, artificial intelligence, automation, and other business or technical functions.

The tools used for a client engagement may depend on project requirements, client preferences, access rights, location, cost, security considerations, and technical compatibility. A project contract or statement of work may identify specific platforms and allocate responsibilities for their use.

We do not control the independent privacy, availability, security, or data-handling practices of every third-party provider. No integration should be treated as a guarantee that a provider will always meet every client requirement.

12. Artificial Intelligence, Machine Learning, and Automated Processing

We may use artificial intelligence, machine learning, analytical, or automated tools in connection with data preparation, coding, testing, documentation, research, forecasting, classification, anomaly detection, workflow automation, support, or other agreed activities.

Use of these tools may involve third-party platforms. Where personal or confidential data is involved, the intended use should be evaluated against project instructions, contractual restrictions, provider terms, access controls, and the sensitivity of the information.

Automated outputs may be incomplete, inaccurate, biased, or unsuitable for a particular decision. Human review may be used where appropriate, but we do not guarantee that every automated result will be error-free. Clients should independently assess outputs before relying on them for legal, financial, employment, medical, safety-critical, or similarly significant decisions.

You should not submit confidential, proprietary, regulated, or sensitive personal information into an unapproved public AI service on our behalf.

13. International and Cross-Border Processing

DataConsultant may serve clients in different countries and may use personnel, contractors, or technology providers located outside your country. As a result, personal information may be accessed, transferred, hosted, stored, or otherwise processed internationally.

Where cross-border processing occurs, we will seek to use reasonable contractual, technical, and organisational measures appropriate to the circumstances and any applicable transfer requirements. The protections available in another country may differ from those in your location.

Client-specific restrictions on data location, remote access, approved countries, or service providers should be stated in the applicable contract or data-processing agreement before work begins.

14. Data Retention

We retain personal information for as long as reasonably necessary for the purpose for which it was collected and for legitimate contractual, operational, security, accounting, tax, dispute-resolution, or legal needs.

Retention decisions may consider:

• the duration of an enquiry, contract, project, support period, or business relationship;
• client instructions and contractual deletion or return obligations;
• the sensitivity, volume, and risk associated with the information;
• backup, audit, security, and fraud-prevention needs;
• applicable accounting, tax, employment, or record-keeping requirements;
• actual or anticipated disputes, investigations, or claims.

When information is no longer reasonably required, we may delete, destroy, anonymise, or aggregate it. Residual copies may remain temporarily in backups, logs, or archives until they are overwritten or removed through routine processes.

15. Information Security and Risk Limitations

We seek to use reasonable administrative, technical, and organisational safeguards appropriate to the nature of the information and the services provided. Depending on the circumstances, safeguards may include access controls, authentication, confidentiality commitments, secure transfer methods, logging, backups, environment separation, vendor review, and incident-response procedures.

No website, internet transmission, software platform, cloud service, storage system, or security measure can be guaranteed to be completely secure or continuously available. We therefore cannot promise complete security, uninterrupted service, or prevention of every incident.

You and your organisation are responsible for protecting credentials, maintaining appropriate access permissions, using secure devices and networks, applying suitable internal controls, and promptly reporting suspected misuse.

16. Privacy and Security Incidents

We may investigate suspected unauthorised access, disclosure, loss, alteration, destruction, or misuse of personal information. Our response may include containment, access restriction, evidence preservation, technical review, remediation, client coordination, and documentation.

Where notification is required by an applicable contract or legal obligation, we will seek to provide the relevant notice to the appropriate client, individual, authority, or other party.

To report a suspected privacy or security issue, contact support@dataconsultant.in. Do not include unnecessary sensitive information in the initial report.

17. Your Privacy Rights and Choices

Depending on your location and the applicable requirements, you may have rights concerning your personal information. These may include the ability to:

• request information about how your personal information is used;
• request access to certain personal information;
• request correction or updating of inaccurate or incomplete information;
• request deletion where continued retention is not required or permitted;
• withdraw consent where processing depends on consent;
• object to or request restriction of certain processing;
• request a portable copy where applicable;
• opt out of certain marketing communications;
• raise a concern or complaint with us or an appropriate authority.

These rights are not absolute and may be limited by identity-verification needs, legal obligations, security considerations, confidentiality, legal privilege, the rights of others, or other permitted exceptions.

Where your request relates to information controlled by one of our clients, you should normally contact that client directly. We may refer your request to the client and assist as required by the applicable agreement.

18. How to Submit a Privacy Request

Send your request to support@dataconsultant.in and provide enough information for us to understand:

• your name and contact information;
• your relationship with DataConsultant or the relevant client;
• the nature of your request;
• the service, project, account, or communication concerned.

We may request reasonable information to verify your identity or authority. We will respond in accordance with applicable requirements and explain material limitations where appropriate.

19. Marketing Communications

We may send relevant business updates, service information, invitations, or other professional communications where appropriate. You may opt out of promotional email by using an unsubscribe option, where provided, or by contacting support@dataconsultant.in.

Opting out of marketing does not prevent us from sending necessary contractual, project, billing, security, support, or legal communications.

20. Children’s Privacy

Our website and services are primarily intended for organisations and adults acting in a professional capacity. We do not knowingly seek personal information directly from children through general website enquiries or business-development activities.

If a client project involves information about children, the client must identify that requirement in advance. Appropriate instructions, permissions, limitations, and safeguards should be agreed before processing begins.

21. Accuracy, Data Quality, and Your Responsibilities

You should provide accurate, relevant, and appropriately authorised information. Please notify us when your contact details, instructions, permissions, or project information change.

Clients are responsible for the source, quality, lawfulness, completeness, and permitted use of client-provided data. Although data consulting services may identify errors, inconsistencies, duplicates, or quality issues, we do not guarantee that every issue will be detected or corrected.

22. Relationship With Contracts and Other Policies

This Privacy Policy should be read together with any applicable:

• service agreement, master services agreement, proposal, or statement of work;
• data-processing agreement or security schedule;
• confidentiality or non-disclosure agreement;
• website terms and conditions or cookie policy;
• employment, contractor, vendor, or recruitment notice;
• project-specific notice, instruction, or consent form.

Those documents may define privacy, confidentiality, intellectual property, data ownership, service scope, payment, liability, security, retention, deletion, and audit obligations in greater detail. Signed contractual terms may take precedence where applicable.

23. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, website, technology, providers, business operations, or applicable requirements.

The latest version will be published on our website with an updated “Last Updated” date. Where appropriate, we may provide an additional notice of material changes.

Contact DataConsultant

Questions, privacy requests, complaints, or incident reports may be directed to:

• Business name: DataConsultant
• Legal business name: Rudrriv Solutions Pvt. Ltd
• Registered address: India
• Business address: India
• Country or jurisdiction: India
• General contact email: support@dataconsultant.in
• Privacy email: support@dataconsultant.in
• Data Protection Officer contact: support@dataconsultant.in
• Website: https://dataconsultant.in

Please provide sufficient information for us to understand and respond to your concern. Do not include passwords, one-time codes, private keys, or unnecessary sensitive data.

Legal Review Recommended

Questions, privacy requests or concerns regarding this Privacy Policy may be sent to support@dataconsultant.in.