Privacy Policy

1. Introduction

Decipher Consultancy Services (hereinafter referred to as "Decipher", "we", "us", or "our"), operating through the website https://decipherconsultancy.in, is committed to protecting the privacy and personal data of all individuals who interact with our services.

This Privacy Policy is drafted in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and explains how we collect, use, store, and protect your personal data. By using our website or submitting your personal data to us, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Data Fiduciary Information

Under the DPDP Act 2023, Decipher Consultancy Services acts as a Data Fiduciary. Our details are as follows:

• Legal Entity: Decipher Consultancy Services
• Registered Address: 295, Block C, Sushant Lok III, Sector 57, Gurugram, Haryana - 122003, India
• Grievance Officer / Data Protection Contact: Subesh Kumar
• Email: info@decipherconsultancy.in
• Phone: +91 9911 202099

Mr. Subesh Kumar is the designated person authorised to address any queries, complaints, or requests relating to the processing of your personal data under this policy.

3. Personal Data We Collect

We collect the following categories of personal data:

a) Data You Provide Directly

• Contact Information: Name, email address, phone number, company name
• Enquiry Details: Message content submitted through our contact forms
• Service Data: Information provided during onboarding or service engagement

b) Data Collected Automatically

• Device Information: IP address, browser type, operating system, device type
• Usage Data: Pages visited, time spent, referral source, click patterns
• Cookies: Session cookies for website functionality; analytics cookies for improving user experience (see Section 10)

4. Purpose of Data Collection

Under Section 4 of the DPDP Act, we collect and process your personal data only for lawful purposes. The specific purposes are:

Purpose	Data Used	Lawful Basis
Responding to enquiries	Name, email, phone, message	Consent (Section 6)
Providing contracted services	Contact info, service data	Legitimate use (Section 7)
Website analytics & improvement	Device info, usage data	Legitimate use (Section 7)
Security & fraud prevention	IP address, reCAPTCHA tokens	Legitimate use (Section 7)

We do not use your personal data for purposes beyond those stated above. We do not sell, rent, or trade your personal data to any third party.

5. Consent

In accordance with Section 6 of the DPDP Act, we obtain your consent before collecting personal data through our contact forms. Consent is:

• Free: You are not compelled or coerced to provide consent
• Specific: Consent is obtained for clearly stated purposes
• Informed: A privacy notice is displayed before consent is given, detailing what data is collected, why, how long it is retained, and how to withdraw
• Unconditional: We do not bundle consent with unrelated services
• Unambiguous: Consent is given through a clear affirmative action (checkbox)

You may withdraw your consent at any time by emailing info@decipherconsultancy.in. Withdrawal of consent is as easy as giving it. Upon withdrawal, we will cease processing your data and erase it within 30 days, unless retention is required by law.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, as required under Section 8(7) of the DPDP Act:

• Contact form enquiries: 90 days from submission, then securely deleted unless a professional engagement is established
• Client service data: Duration of the service engagement plus 3 years for legal and accounting obligations
• Website analytics data: 26 months (Google Analytics default), anonymized thereafter
• Cookies: Session cookies expire when you close your browser; analytics cookies expire after 12 months

Once the retention period expires or you withdraw consent, your data is permanently and securely erased from our systems.

7. Your Rights as a Data Principal

Under the DPDP Act 2023, you (the "Data Principal") have the following rights:

• Right to Access (Section 11): You may request a summary of your personal data being processed and the processing activities undertaken
• Right to Correction (Section 12): You may request correction of inaccurate or incomplete personal data
• Right to Erasure (Section 12): You may request deletion of your personal data, subject to legal retention requirements
• Right to Withdraw Consent (Section 6(5)): You may withdraw previously given consent at any time
• Right to Grievance Redressal (Section 13): You may raise a complaint with us or with the Data Protection Board of India
• Right to Nominate (Section 14): You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity

To exercise any of these rights, contact us at info@decipherconsultancy.in. We will respond to your request within 30 days.

8. Data Security Measures

We implement appropriate technical and organisational measures to protect your personal data in accordance with Section 8(4) of the DPDP Act, including:

• SSL/TLS encryption for all data transmitted through our website
• Access controls limiting data access to authorised personnel only
• Regular security audits and vulnerability assessments
• Secure hosting with encrypted storage
• Employee training on data protection and privacy obligations

9. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the Data Protection Board of India as required under Section 8(6) of the DPDP Act
• Notify affected Data Principals without unreasonable delay
• Take immediate remedial steps to contain and mitigate the breach
• Document the breach and the corrective actions taken

10. Cookies & Tracking Technologies

Our website uses the following cookies and third-party services:

• Essential Cookies: Required for basic website functionality (session management, security)
• Google Analytics: Collects anonymized usage data to help us improve our website. Google Privacy Policy
• Microsoft Clarity: Records user interaction patterns (clicks, scrolls) to improve user experience. Microsoft Privacy Statement
• Google reCAPTCHA: Protects our forms from spam and abuse. Google Privacy Policy

You may disable non-essential cookies through your browser settings. Disabling cookies may affect certain website features.

11. Cross-Border Data Transfer

Some of our third-party service providers (Google, Microsoft) may process data outside India. Such transfers are conducted in compliance with the provisions of the DPDP Act and only to jurisdictions permitted by the Central Government of India. We ensure appropriate safeguards are in place for any cross-border data transfers.

12. Children's Data

Our services are not directed at individuals below the age of 18. We do not knowingly collect personal data from children. In accordance with Section 9 of the DPDP Act, if we become aware that we have collected data from a child without verifiable consent from a parent or guardian, we will take immediate steps to delete such data.

13. Grievance Redressal

If you have any concerns or complaints regarding the processing of your personal data, you may:

1. Contact our Grievance Officer: Mr. Subesh Kumar — Email info@decipherconsultancy.in with the subject line "Data Privacy Grievance". We will acknowledge your complaint within 48 hours and resolve it within 30 days.
2. Escalate to the Data Protection Board of India: If you are unsatisfied with our response, you have the right to file a complaint with the Data Protection Board of India as per Section 13 of the DPDP Act.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any significant changes will be communicated through a prominent notice on our website. We encourage you to review this policy periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.

15. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: info@decipherconsultancy.in
• Phone: +91 9911 202099
• Address: 295, Block C, Sushant Lok III, Sector 57, Gurugram, Haryana - 122003, India