Last updated: August 2026
Decipher Consultancy Services (hereinafter referred to as "Decipher", "we", "us", or "our"), operating through the website https://decipherconsultancy.in, is committed to protecting the privacy and personal data of all individuals who interact with our services.
This Privacy Policy is drafted in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and explains how we collect, use, store, and protect your personal data. By using our website or submitting your personal data to us, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Under the DPDP Act 2023, Decipher Consultancy Services acts as a Data Fiduciary. Our details are as follows:
Mr. Subesh Kumar is the designated person authorised to address any queries, complaints, or requests relating to the processing of your personal data under this policy.
We collect the following categories of personal data:
Under Section 4 of the DPDP Act, we collect and process your personal data only for lawful purposes. The specific purposes are:
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Responding to enquiries | Name, email, phone, message | Consent (Section 6) |
| Providing contracted services | Contact info, service data | Legitimate use (Section 7) |
| Website analytics & improvement | Device info, usage data | Legitimate use (Section 7) |
| Security & fraud prevention | IP address, reCAPTCHA tokens | Legitimate use (Section 7) |
We do not use your personal data for purposes beyond those stated above. We do not sell, rent, or trade your personal data to any third party.
In accordance with Section 6 of the DPDP Act, we obtain your consent before collecting personal data through our contact forms. Consent is:
You may withdraw your consent at any time by emailing info@decipherconsultancy.in. Withdrawal of consent is as easy as giving it. Upon withdrawal, we will cease processing your data and erase it within 30 days, unless retention is required by law.
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, as required under Section 8(7) of the DPDP Act:
Once the retention period expires or you withdraw consent, your data is permanently and securely erased from our systems.
Under the DPDP Act 2023, you (the "Data Principal") have the following rights:
To exercise any of these rights, contact us at info@decipherconsultancy.in. We will respond to your request within 30 days.
We implement appropriate technical and organisational measures to protect your personal data in accordance with Section 8(4) of the DPDP Act, including:
In the event of a personal data breach, we will:
Our website uses the following cookies and third-party services:
You may disable non-essential cookies through your browser settings. Disabling cookies may affect certain website features.
Some of our third-party service providers (Google, Microsoft) may process data outside India. Such transfers are conducted in compliance with the provisions of the DPDP Act and only to jurisdictions permitted by the Central Government of India. We ensure appropriate safeguards are in place for any cross-border data transfers.
Decipher Consultancy Services is a registered Technology Provider on Meta's WhatsApp Business Platform. Where we provide WhatsApp API integration or messaging infrastructure services to our business clients ("Client Businesses"), this section explains how data is handled in that specific context, separately from the personal data practices described elsewhere in this policy.
When acting as a Technology Provider, Decipher facilitates the connection between a Client Business and Meta's WhatsApp Business Platform. In this capacity, Decipher acts as a data processor on behalf of the Client Business, which remains the data controller / fiduciary for its own end-customer data and message content. Decipher does not use Client Business data, or the personal data of a Client Business's end customers, for any purpose other than providing the contracted messaging infrastructure service.
Decipher does not access, read, or store the content of end-customer message conversations beyond what is technically necessary to deliver the messaging service (e.g., transient processing for delivery), and does not use this data for advertising, profiling, or any purpose unrelated to the service provided.
As required to operate the WhatsApp Business Platform, relevant account and message delivery data is shared with Meta Platforms, Inc. in accordance with Meta's own Platform Terms, WhatsApp Business API Terms, and Privacy Policy. We encourage Client Businesses to review Meta's WhatsApp Business Policy for details on Meta's own data handling.
Business account credentials and configuration data are retained for the duration of the Client Business's active service engagement with Decipher, and deleted within 30 days of account disconnection or a valid data deletion request, whichever occurs first, unless a longer period is required for legal or regulatory compliance.
A Client Business may request access, correction, or deletion of the data described in this section at any time by contacting info@decipherconsultancy.in, or by disconnecting their WhatsApp Business Account through Meta's WhatsApp Manager, which independently owns and controls their account and its data.
Our services are not directed at individuals below the age of 18. We do not knowingly collect personal data from children. In accordance with Section 9 of the DPDP Act, if we become aware that we have collected data from a child without verifiable consent from a parent or guardian, we will take immediate steps to delete such data.
If you have any concerns or complaints regarding the processing of your personal data, you may:
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated through a prominent notice on our website. We encourage you to review this policy periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
