Privacy, terms and cookies

1. Who we are

This website is operated by Arokha Global Enterprises Private Limited(“Arokha”, “we”, “us”), a company incorporated in India with its office at H.No 9-37/P, Plot 37, Sai Daya Enclave, Injapur, Abdullapurmet, Hyderabad, Telangana 500070, India.

For personal data collected through this website, we are the Data Fiduciaryunder India's Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it. For visitors in the European Union or the United Kingdom, we are the controller under the GDPR and UK GDPR.

This policy covers this website and enquiries you send us. When we handle personal data on behalf of a client during a project (for example, data in a system we build or maintain for them), we act as that client's Data Processor under a written contract, and the client's own privacy notice applies to that data.

2. Personal data we collect

What you give us. When you use our contact form, we collect:

• your name and email address;
• your company stage, if you choose to select one;
• your message and anything you include in it (for example, your company name, project details, timeline or budget);
• the service you were looking at, if you sent the form from a service page.

If you email or call us, we collect the details you share, such as your name, email address, phone number and the content of the conversation.

Collected automatically when you submit the form.Your IP address, your browser's user-agent string (which describes your browser and device type) and the date and time of submission. We use these to prevent spam and abuse and to keep the form secure.

Technical logs. Like most websites, the servers that host this site may record standard request logs (such as IP address, the page requested and the time) for security and troubleshooting.

Emails we send you. We keep a record of the emails we send you about your enquiry, such as the confirmation email, including the recipient, subject, content and delivery status.

What we don't collect.We do not use analytics, advertising or social-media tracking on this website. We do not ask for sensitive data such as financial, health or government ID information. Please don't include it in your message.

3. How we use your data

We use your personal data only to:

• reply to your enquiry and send you a confirmation that we received it;
• discuss your project with you, arrange calls, and prepare a proposal or quotation if you ask for one;
• keep an internal record of enquiries so that our team can follow up properly;
• protect the website and the contact form against spam, fraud and misuse;
• comply with our legal obligations and respond to lawful requests from authorities.

We do not sell or rent your personal data. We do not use it for automated decision-making or profiling, and we will not add you to a marketing mailing list unless you separately agree to it.

4. Consent and legal basis

Under the DPDP Act. We process your personal data on the basis of your consent, which you give when you submit the contact form or write to us after being shown this notice, and for legitimate uses permitted by Section 7 of the DPDP Act, such as when you voluntarily give us your data for a specific purpose, or where we must comply with the law.

Withdrawing consent. You can withdraw your consent at any time by emailing info@arokhaglobal.com. Withdrawing is as easy as giving consent. Once you withdraw, we will stop processing your data and delete it within a reasonable time, unless we are required by law to keep it. Withdrawal does not affect processing that took place before it.

Under the GDPR and UK GDPR (for visitors in the EU or UK), our legal bases are: our legitimate interest in responding to business enquiries; taking steps at your request before entering into a contract; compliance with legal obligations; and your consent, where it is required.

5. Who we share your data with

We share personal data only with people and service providers who need it to do the things described above, under contracts that require them to protect it and use it only on our instructions:

We may also share personal data:

• within Arokha, with team members who need it to respond to you;
• with our professional advisers (such as lawyers and auditors), under a duty of confidentiality;
• with government or law enforcement authorities when the law requires us to;
• with a successor business if Arokha is involved in a merger, acquisition or reorganisation, in which case this policy will continue to apply to your data.

6. International transfers

Some of our service providers may store or process data on servers outside India. Where that happens, we transfer personal data only as permitted under the DPDP Act (including any restrictions the Central Government notifies on transfers to particular countries) and rely on the provider's contractual data protection commitments. For data of visitors in the EU or UK, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

7. How long we keep your data

• Enquiries that don't lead to a project: we keep your enquiry, including the technical data recorded with it, for up to 24 months after our last contact with you, so we have the context if you get in touch again. After that we delete or anonymise it.
• Enquiries that lead to a project: we keep the relevant records for as long as the engagement lasts and afterwards for as long as the law requires (for example, under accounting and tax laws).
• Technical logs: kept for a limited period for security and troubleshooting, then deleted in the normal course.

If you withdraw consent or ask us to delete your data, we will delete it sooner, unless we have to keep it to meet a legal obligation.

8. Your rights

As a Data Principal under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you, how we process it, and the other Data Fiduciaries and Data Processors we have shared it with;
• correct, complete, update or erase your personal data;
• withdraw consent at any time;
• grievance redressal through our Grievance Officer (see below);
• nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

If you are in the EU or UK, you also have the rights to object to or restrict processing, to data portability, and to complain to your local data protection authority.

To use any of these rights, email info@arokhaglobal.comwith the subject “Privacy request”. We may ask you to confirm your identity before acting on a request. We aim to respond within 30 days, and in any case within the time required by law. Under the DPDP Act, Data Principals also have duties, including not providing false information and not filing frivolous complaints.

9. Grievance Officer

If you have a concern or complaint about how we handle your personal data, please contact our Grievance Officer:

We will acknowledge your complaint and work to resolve it promptly. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.

10. Security

We use reasonable security safeguards to protect personal data, including encryption in transit (HTTPS), access to enquiry records restricted to authorised team members with individual accounts and role-based permissions, hashed passwords, and spam and rate-limit protection on the contact form. No system is perfectly secure, so we can't guarantee absolute security. If a personal data breach occurs, we will notify the Data Protection Board of India and affected people as required by law.

11. Children

This website is meant for businesses and is not directed at children. Under the DPDP Act, a child is anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us at info@arokhaglobal.com and we will delete it.

12. Changes to this policy

We may update this policy when our practices or the law change. We will post the updated version on this page and change the “Last updated” date at the top. If a change materially affects how we use personal data you have already given us, we will let you know before it takes effect where required by law.