Privacy Policy

Effective date: 15 October 2026
Last updated: 15 October 2026

1 Who we are and what this Policy covers

Ishvara Tech Consulting Pvt Ltd (“Ishvara”, “we”, “us” or “our”) operates https://ishvaratechconsulting.com (the “Website”). This Policy explains how we handle personal information relating to Website visitors, people making business enquiries, meeting participants, business contacts and people who contact us about work opportunities.

We determine how information is used for our own Website and business administration. Where we process personal information only on a client’s instructions while providing development, AI, analytics, design, cloud or testing services, the client determines the relevant purposes and the service agreement and data processing terms apply. Section 7 explains this distinction.

Separate products, applications and client-operated websites may have their own privacy notices. Merely linking to or describing a product on this Website does not make this Policy the privacy notice for that product. This Policy is a notice about our practices. Browsing the Website or accepting its Terms does not itself provide consent to optional tracking, unrelated marketing or AI model training.

2 Information you provide

Depending on how you interact with us, we may receive:

• Contact details: first and last name, email address and phone number provided through the contact form or another communication channel.
• Business enquiry information: your message and any organisation name, role, requirements, project description or other details you choose to share.
• Meeting information: your name, email address, selected date and time, time zone, booking responses, invitee details and correspondence relating to a Calendly booking or another agreed meeting.
• Relationship records: proposals, communications, agreements, business contact details and billing information needed if an enquiry becomes an engagement.
• Application information: a CV, employment or education details, portfolio links and correspondence if you contact us about a role or consulting opportunity.
• Privacy request information: contact details and limited information needed to verify and respond to a request or complaint.

Provide only information needed for your request. The public enquiry process is not intended for passwords, payment card details, Aadhaar or other identity documents, health information, biometric data, production credentials or confidential client datasets. If an engagement requires sensitive information, we will agree an appropriate purpose, lawful basis, safeguards and secure transfer method separately.

If you provide another person’s details, you must have authority and any necessary permissions, and make the relevant privacy information available to them.

3 Information collected through Website technology

Our Website and its service providers may receive technical information such as your IP address, browser and device type, operating system, referring page, pages requested, approximate location inferred from an IP address, access times and security or error logs. The information collected depends on the component used and its settings.

Cookies and similar technologies can support Website operation, security and preferences. Third-party components can also receive technical information when they load. Sections 5 and 6 describe the relevant components and choices. We may also receive information you direct a scheduling service, an authorised representative or another business contact to share with us.

4 Why we use information and on what basis

We use personal information for the following specified purposes:

• To receive and answer enquiries, understand requested services, prepare proposals and maintain related correspondence.
• To schedule and administer meetings, send invitations and reminders, and follow up on the discussion you requested.
• To administer an agreed business relationship, including contracts, invoicing, support and necessary service communications.
• To review work applications or consulting enquiries you submit and communicate about them.
• To operate, troubleshoot and protect the Website, prevent spam and investigate suspected misuse or security incidents.
• To understand Website use and improve content or performance through analytics where enabled and lawfully permitted, with consent where required.
• To send promotional communications only where lawfully permitted and, where required, with your separate consent.
• To manage privacy requests, maintain necessary compliance records, comply with law and establish, exercise or defend legal claims.

We process information only on a basis permitted by the law applicable to the activity. This may include your specific consent, responding to information you voluntarily provide for a stated purpose where the law permits, steps you request before a contract, performance of an agreement, compliance with a legal obligation, or a legitimate interest where the applicable law recognises that basis. We do not treat legitimate interests as a general substitute for consent required by Indian law.

Where consent is required, we seek it for the relevant purpose. You may decline or withdraw consent through the relevant control or by contacting us. We may then be unable to carry out the activity that needs that information, but this will not prevent unrelated processing that has another valid legal basis. Withdrawal does not make earlier lawful processing unlawful. A materially different purpose requires an appropriate new notice and lawful basis.

5 Calendly and other Website components

Meeting bookings. Our booking links use Calendly. When you book, Calendly processes information submitted through its booking page and technical information relating to that interaction. We receive the information needed to arrange and follow up on your meeting. Our use of those records is covered by this Policy; Calendly’s processing is also described in its Privacy Notice. You can contact us directly if you prefer another way to arrange a meeting.

Spam prevention. The contact form uses Google reCAPTCHA. It may send Google device, browser, network and interaction information to assess whether a submission is automated or abusive. Google’s Privacy Policy and Terms of Service apply to that component. If you cannot use the form, you can email us.

Website tags. We use Google Tag Manager to manage Website tags. A tag management tool is a means of loading other components; the information processed depends on the tags enabled. Analytics or advertising tags, if enabled, must be used only on an appropriate lawful basis and subject to consent where required. See Section 6 for controls.

Reviews and external links. The Website includes a Trustpilot integration and may link to external reviews, social media or other services. A loaded integration may receive technical information from your browser, and an external service applies its own privacy notice when you interact with it. Links to another provider do not transfer responsibility for our own processing to that provider.

6 Cookies and tracking choices

Cookies are small files stored by a browser. Similar technologies include browser storage, pixels and tags. Essential functionality and security components can operate differently from optional analytics or advertising components.

Where applicable law requires consent for a non-essential component, we request your choice before enabling it. You can change choices through any cookie preference control made available on the Website, and can also block or delete cookies using your browser settings. Blocking a component may affect the related function. You can still contact us by email.

Third-party booking pages and other external websites provide their own cookie controls. A choice made on our Website may not automatically update choices on those services. Rejecting optional tracking does not prevent ordinary contact with us. We do not treat continued browsing as consent where an affirmative choice is required.

7 Client information and AI related processing

For client projects, personal information may be present in application data, datasets, source materials, user research, test records, system logs, recordings or other agreed inputs. Where the client determines the purposes, we process that information on documented instructions and under the applicable contract and data processing terms. The project terms should identify approved tools, subprocessors, locations, access, retention, deletion and incident responsibilities.

The description of AI, avatar, speech, analytics or NLP services on this Website does not mean that we collect voice, facial or biometric information from every visitor. Any project or demonstration requiring such information needs a specific notice and appropriate permissions and safeguards. We will provide notice and obtain consent where required before recording or transcribing a meeting.

We do not use client personal information or confidential project materials to train our own or a third party’s general-purpose AI model unless a separate documented arrangement permits that use and the required lawful basis, notices and permissions are in place. We do not authorise an AI provider to train on such information merely because that provider supplies a tool. Any independent reuse for our own purposes requires a separate legal assessment and notice.

If your information is held within a client’s application or dataset, please contact that organisation first. We will assist it as required by our contract and applicable law, and will respond directly where we have an independent legal obligation to do so.

8 When we share information

We share personal information only as necessary for the purposes described in this Policy and on a lawful basis:

• With authorised personnel and contractors who need access for their work and are subject to appropriate confidentiality duties.
• With service providers supporting hosting, security, Website maintenance, business email, communications, meeting scheduling and business administration, under suitable contractual restrictions where they act on our behalf.
• With professional advisers where necessary for accounting, legal advice, insurance or a related business requirement.
• With public authorities, courts or other recipients where disclosure is required by law or is otherwise legally permitted and necessary to address a security incident or protect legal rights.
• With a prospective or actual successor in a merger, acquisition or business transfer, subject to appropriate safeguards, purpose limits and any notice required by law.
• With another recipient when you specifically request it or provide the necessary consent.

We do not sell personal information collected through the Website or provide enquiry details to other businesses for their independent marketing. If applicable law requires a separate permission for a disclosure of sensitive information, we obtain it unless a lawful exception applies.

9 Processing locations and international transfers

We are based in India. Our personnel and service providers may process information in India or other countries, depending on the service used. For example, a third-party scheduling or security component may involve processing outside India. The mention of a cloud platform among our services does not establish where Website or client data is stored.

We assess transfers against the requirements and restrictions applicable at the time. Where required, we obtain consent, apply contractual or other lawful safeguards, and ensure the required level of protection for the information transferred. We do not rely solely on your visit to the Website as permission for an international transfer. A specific client commitment to an Indian or other hosting location must be agreed separately and honoured for that engagement.

10 How long we keep information

We keep personal information only for as long as reasonably necessary for the stated purpose or a retention period required by law. The criteria include whether an enquiry is still active, whether an engagement or application is ongoing, applicable accounting and tax requirements, security needs, statutory retention periods and the need to resolve a dispute or legal claim.

Enquiry and meeting records are reviewed when the relevant discussion or relationship ends. Application records are retained for the relevant process; retaining a CV for unrelated future opportunities requires an appropriate notice and lawful basis. Client project information follows the applicable contract and legal requirements. We may retain limited preference or suppression records to respect a marketing opt-out.

When information is no longer needed and no legal retention requirement applies, we delete it or make it irreversibly anonymous. Backup copies may remain until the applicable backup cycle expires and are restricted from ordinary use. A legal hold or statutory minimum retention requirement can limit an erasure request; we will explain a relevant exception where permitted.

11 Security and incident handling

We use reasonable technical and organisational safeguards appropriate to the information and risks involved. These include appropriate access restrictions, confidentiality controls, secure transmission, system maintenance and procedures for handling security incidents. Safeguards for a particular client environment are also governed by its agreed security requirements.

No internet transmission or storage system can be guaranteed completely secure. Please avoid sending sensitive material through an ordinary contact form or email without arranging an appropriate method with us. If a personal data breach occurs, we investigate, take appropriate corrective steps and notify affected people, clients or authorities where and within the time limits required by applicable law or contract.

12 Your choices and privacy rights

You can ask us to explain our handling of your information, correct inaccurate details, review information you supplied, withdraw consent where processing depends on it, stop marketing, or delete information that is no longer needed, subject to applicable law and legitimate retention requirements.

Depending on the law in force and applicable to your circumstances, additional rights may include access to a summary or copy of your information and relevant sharing details, restriction of or objection to specified processing, portability, grievance redressal and nomination of another person to exercise specified rights in the event of death or incapacity. These statutory rights apply when their legal conditions and commencement requirements are met.

To make a request, email info@ishvaratechconsulting.com with the subject “Privacy Request”, or use our contact page. We may ask for proportionate information to verify identity or authority. Please do not send an identity document unless we have explained why it is necessary and arranged an appropriate channel. We will explain any lawful reason for refusing or limiting a request.

If you are dissatisfied, you may complain to the competent regulator or authority where the relevant law provides that right. Where the DPDP Act’s complaint mechanism applies, this includes the Data Protection Board of India after use of the applicable grievance process. These options do not require you to waive other legal remedies.

13 Marketing preferences

Making a service enquiry or booking a meeting does not automatically subscribe you to a marketing list. Where we send marketing lawfully, you may unsubscribe using the message instructions or email us with the subject “Marketing Opt Out”. You can also tell us which channel you want to stop using. Necessary replies, meeting notices and contractual or legal communications may continue where appropriate.

14 Children

This corporate Website and its business enquiry process are intended for adults. We do not knowingly seek personal information from people under 18 through these channels. If you believe a child has submitted information, contact us so that we can review it and take appropriate action. Any separately agreed service involving children’s information requires its own safeguards and notices, including parental or guardian consent where applicable.

15 Applicable law and changes

We handle personal information in accordance with the requirements applicable to our processing, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 where applicable, and the Digital Personal Data Protection Act, 2023 and its rules as their relevant provisions come into force. Additional mandatory rights under other applicable privacy laws remain unaffected.

We may update this Policy as our practices or legal requirements change. The current version will show its effective and last updated dates. We will give additional notice and seek fresh consent where required for a new or materially different use of personal information.

16 Contact and grievances

For questions, requests or complaints about this Policy or your personal information, contact:

Privacy and Grievance Contact
Ishvara Tech Consulting Pvt Ltd
Email: info@ishvaratechconsulting.com
Subject: Privacy Request or Privacy Grievance
Phone: +91 707 701 3303

Postal address: 4th Floor, Units 410 and 411, DLF Cyber City, IDCO Info Park, Technology Corridor, Chandaka Industrial Estate, Patia, Bhubaneswar, Odisha 751024, India

Grievance Officer: Ms Pratyasha Dash

We will address grievances promptly and within one month of receipt, or sooner where applicable law requires. This does not extend any shorter statutory deadline. Please provide enough information to identify your concern and a way to contact you.