Privacy policy

1. Who we are

Brihad Consultancy Services is a proprietorship registered in India (Udyam Reg. No. UDYAM-JK-07-0091127), based in Pune, Maharashtra. We are the data controller (or “responsible party”) for personal data collected through this website. Our founder, Raman Nagyal, acts as our information officer and data-protection contact: brihadconsultancy@gmail.com.

2. What we collect

Details you give us: your name, work email, phone or WhatsApp number (optional), preferred contact method, company, country, role, industry, budget, timeline and message when you use our contact form; booking details when you schedule a session; and anything you send by email, WhatsApp, LinkedIn or Slack.

Technical data: our hosting provider processes basic connection data, such as IP addresses, to deliver and protect the website. We don't use advertising or tracking cookies.

Preferences on your device: the site stores your chosen language and currency in your browser so it remembers them. This stays on your device and isn't sent to us.

3. Why we use it

To reply to your enquiry and arrange sessions (legal basis: your consent, and steps before entering a contract); to deliver services you've engaged us for (contract); and to run, secure and improve our business (legitimate interests). We never sell your data or use it for third-party advertising.

4. Who we share it with

We use trusted service providers to operate: Netlify (website hosting), EmailJS (contact-form delivery), Google reCAPTCHA (spam protection on the contact form, if enabled), Google Workspace and Google Calendar (email and booking), and, if you choose to use them, WhatsApp, LinkedIn and Slack. Our pricing page requests exchange rates from ExchangeRate-API, which receives a basic request from your browser but no personal details from us. Specialists working on your engagement receive only what they need and are bound by confidentiality.

5. International transfers

We are based in India, and our service providers may process data in other countries, including the United States. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses or your consent.

6. How long we keep it

Enquiries that don't lead to work are deleted within 24 months. Client records are kept for as long as needed to deliver services and meet legal, tax and accounting obligations, typically up to 8 years.

7. Your rights

Depending on where you live, you can ask to access, correct, delete or move your data, object to or restrict its use, and withdraw consent at any time. This includes rights under the EU and UK GDPR, South Africa's POPIA, Mexico's LFPDPPP (ARCO rights) and India's Digital Personal Data Protection Act. Email us and we'll respond within the time the law requires.

You can also complain to your local data-protection authority, such as your EU supervisory authority, the UK ICO, South Africa's Information Regulator or Mexico's data-protection authority.

8. Security

We protect personal data with access controls, encrypted connections and reputable providers. No system is perfectly secure, and we'll notify you and the relevant authorities of a breach where the law requires.

9. Changes

We may update this policy. The latest version is always on this page.