Privacy policy

Last updated: [DATE]

Template notice: This document is a starting template for an Indian IT services company. It is not legal advice. Have it reviewed and adapted by a qualified lawyer before publishing, and remove this notice once that's done.

This privacy policy explains how Micro Consulting ("we", "us", "our") collects and uses personal data when you visit microconsulting.in, contact us, or apply for a job with us. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it, and we also follow the Information Technology Act, 2000 where applicable.

1. Who we are

Micro Consulting Private Limited (CIN U72900KA2020PTC135362), a company incorporated in India with its registered office at H-201, Tower 6, Jacaranda Block, Adarsh Palm Retreat, Devarabeesanahalli, Bengaluru, Karnataka 560103, India. You can contact us about privacy at shreya.patel@microconsulting.in.

2. Personal data we collect

Data you give us

Enquiries: your name, company, email address, phone number, the service you're interested in, budget range and message.
Job applications: your name, email address, phone number, the role you're applying for, your resume (file or link) and any other information you choose to include.
Correspondence: anything you send us by email, phone or WhatsApp.

Data collected automatically

Server logs: our hosting provider (Netlify) records IP addresses, browser type and pages requested, for security and troubleshooting.
Analytics: only if you accept analytics cookies, Google Analytics 4 collects information about how you use the site (pages visited, approximate location, device type). IP addresses are anonymised.
Spam protection: form submissions are checked by our hosting provider's spam filter, which may analyse the content and your IP address.

3. Why we use your data

We process personal data only for the purpose you gave it to us, on the basis of your consent or for legitimate uses permitted under the DPDP Act:

To reply to your enquiry, prepare proposals and deliver services you engage us for.
To assess job applications and communicate with candidates.
To keep the website secure and prevent spam and abuse.
To understand and improve how the website is used (analytics, with consent).
To meet legal, tax and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decisions that have legal effects on you.

4. Consent and withdrawing it

By submitting a form you consent to us processing the data in it for the purpose described. You can withdraw consent at any time by emailing us. Withdrawing consent does not affect processing already carried out, but we may be unable to continue with your enquiry or application.

5. Cookies

The site works without cookies. If you choose "Accept" on our cookie notice, Google Analytics sets cookies to measure site usage. If you choose "Decline", no analytics cookies are set. Your choice is stored in your browser; clear your browser storage to be asked again.

6. Who we share data with

We share personal data only with service providers who help us run our business, under contracts that require them to protect it:

Our website and form hosting provider (Netlify, Inc.), and our domain and email providers.
Google (Analytics, only with your consent).
Professional advisers such as accountants and lawyers, where necessary.

We may disclose data where required by law or by a lawful request from a government authority. Some providers store data outside India; where that happens, we rely on the transfer being permitted under the DPDP Act.

7. How long we keep data

Enquiries that don't become projects: up to 24 months, then deleted.
Client project records: for the duration of the engagement and as required by tax and company law afterwards.
Job applications: up to 12 months, unless you ask us to delete them sooner or you join us.

8. How we protect data

The website uses HTTPS encryption. Form submissions, including resume files, are stored by our form hosting provider in an access-controlled account and emailed to a restricted mailbox. We delete them in line with the retention periods above. Access to personal data is limited to people who need it. No system is completely secure, but we take reasonable security safeguards as required by the DPDP Act, and we will notify the Data Protection Board of India and affected individuals of a personal data breach as the law requires.

9. Your rights as a Data Principal

Under the DPDP Act you have the right to:

Get a summary of the personal data we process about you and how we process it.
Ask us to correct, complete, update or erase your personal data.
Have your grievances addressed by us promptly.
Nominate another person to exercise your rights in the event of your death or incapacity.

To use any of these rights, email shreya.patel@microconsulting.in. We'll respond within the time required by law.

10. Grievance officer

[GRIEVANCE_OFFICER_NAME], Grievance Officer
Email: shreya.patel@microconsulting.in
Address: H-201, Tower 6, Jacaranda Block, Adarsh Palm Retreat, Devarabeesanahalli, Bengaluru, Karnataka 560103, India

If you're not satisfied with our response, you may file a complaint with the Data Protection Board of India.

11. Children

This website is intended for businesses and job seekers aged 18 and over. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Significant changes will be highlighted on this page.