Privacy Policy

Last Updated: January 29, 2025

At Dhristhi System Private Limited (“Dhristhi,” “we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Applicability and Legal Framework

This Privacy Policy applies to:

• Visitors to our website at https://www.dhristhi.com
• Prospects and potential clients who inquire about our services
• Clients who engage our consulting and technology services
• Business partners and vendors

We are a data controller for personal information we collect directly from you or automatically through our website. When we process data on behalf of our clients as part of our consulting services, we act as a data processor and process such data in accordance with our client agreements and applicable data processing agreements.

This Privacy Policy is designed to comply with:

• India’s Digital Personal Data Protection Act, 2023 (DPDPA) – For individuals located in India
• General Data Protection Regulation (GDPR) – For individuals located in the EU and UK
• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) – For California residents
• Other applicable data protection laws in jurisdictions where we operate

Data Controller Identity: Dhristhi System Private Limited, a company incorporated in India. For contact details, see Section 11 below.

1. Information We Collect

1.1 Information You Provide

We may collect information that you voluntarily provide to us, including:

• Contact information (name, email address, phone number, company name)
• Business information (job title, industry, company size)
• Information provided in forms, inquiries, or communications
• Information provided when you subscribe to our newsletters or request our services

1.2 Automatically Collected Information

When you visit our website, we collect only aggregate, non-personal analytics data through Cloudflare Web Analytics, including:

• Page views and time spent on pages (aggregate)
• Referring website addresses (aggregate)
• Country-level location (aggregate, not IP-based tracking)
• Browser type and device type (aggregate)
• Core Web Vitals performance metrics

Note: Cloudflare Web Analytics does not collect or store IP addresses, does not use cookies, and does not track individual visitors across sessions.

1.3 Cookies and Similar Tracking Technologies

We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies, does not track individual visitors, and does not collect personal data. It measures only aggregate website metrics (page views, referrers, and performance).

Our website uses localStorage for storing your theme preference (dark/light mode). No tracking cookies are set by our website.

For full details, see our Cookie Policy.

1.4 Sensitive Personal Data

We do not intentionally collect sensitive personal data unless you voluntarily provide it in the context of our services, in which case we will process it only with your explicit consent and in accordance with applicable laws.

2. How We Use Your Information and Legal Basis

We use the information we collect for the following purposes and rely on the legal bases indicated:

Note: Transactional emails will continue to be sent even if you opt out of marketing communications, as these are necessary for service delivery.

Automated Decision-Making: We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: Third-party service providers who perform services on our behalf, bound by data processing agreements.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.
• Legal Requirements: If required by law, court order, or governmental regulation.
• With Your Consent: With your explicit consent for specific purposes.

Categories of Recipients: Cloud hosting providers (AWS), analytics service provider (Cloudflare — aggregate data only, no personal information), email service providers, and government authorities when required by law.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including:

• Primary Storage Location: India (where our primary servers and operations are located)
• Additional Locations: Cloud service providers with data centers in the United States, European Union, or other jurisdictions

We take appropriate safeguards including Standard Contractual Clauses (SCCs), Data Processing Agreements, Adequacy Decisions, and Technical and Organizational Measures.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your information to another service provider
• Objection: Object to processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at office@dhristhi.com.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Our retention periods:

• Marketing and Prospect Data: 3 years from last contact
• Client Data: Duration of relationship plus 7 years
• Website Usage and Analytics Data: Up to 26 months
• Legal and Compliance Records: 5–7 years
• Inquiry and Communication Data: 2 years from last interaction

When we no longer need your information, we will securely delete or anonymize it. Deletion requests are processed within 30 days.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

9. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

11. Data Protection Contact and Grievance Officer

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Grievance Officer (India): In accordance with India’s DPDPA, 2023, we have designated a Grievance Officer. Email: office@dhristhi.com. We will respond within 30 days.

EU/UK Representative: Contact us at the email address above. We will respond within one month.

California Residents: You may request information about our data sharing practices and opt out of the sale of personal information (we do not sell personal information).