Privacy Policy
Last updated: January 2026
Ambadnya Consultancy Services Pvt. Ltd. (“Ambadnya”, “we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard personal information in compliance with:
- India’s Digital Personal Data Protection Act, 2023 (DPDP Act)
- EU General Data Protection Regulation (GDPR), where applicable
This policy applies to all visitors, clients, and users of our website and services.
1. Personal Data We Collect
We collect only the minimum data required for legitimate business purposes. This may include:
- Full name
- Email address
- Phone number
- Company or organization name
- Service of interest
- Message or inquiry details
- Technical data such as IP address, browser type, device information, and timestamps (for security and abuse prevention)
We do not collect:
- Passwords
- Financial or payment information
- Government-issued identifiers
- Sensitive personal data unless explicitly required and consented
2. Purpose of Data Processing
Your personal data is processed strictly for the following purposes:
- Responding to inquiries and contact requests
- Providing consulting, advisory, training, and related services
- Client communication and relationship management
- Internal audit, compliance, and record-keeping
- Website security, fraud prevention, and misuse detection
Your data is never used for unrelated marketing without consent.
3. Legal Basis for Processing
Under DPDP Act and GDPR, we process personal data based on one or more of the following lawful grounds:
- Consent – when you voluntarily submit information via forms
- Contractual necessity – to provide requested services
- Legal obligation – compliance with laws and regulations
- Legitimate interests – such as business communication, security, and fraud prevention
You may withdraw consent at any time, where applicable.
4. Data Sharing and Disclosure
We do not sell, rent, or trade personal data. Data may be shared only with:
- Authorized internal personnel on a need-to-know basis
- Trusted service providers (e.g., email delivery services) bound by confidentiality and data protection obligations
- Regulatory or legal authorities, where required by law
All reasonable safeguards are enforced to protect shared data.
5. Cross-Border Data Transfers
Where data is processed or stored outside India or the EU:
- Transfers are limited and purpose-driven
- Appropriate safeguards are applied in line with GDPR and DPDP requirements
- Data protection standards equivalent to this policy are maintained
6. Data Retention
We retain personal data only for as long as necessary to:
- Fulfill the stated purpose
- Meet legal, regulatory, or audit requirements
- Resolve disputes or enforce agreements
Once no longer required, data is securely deleted or anonymized.
7. Data Security Measures
We implement reasonable technical and organizational measures to protect personal data, including:
- Secure servers and access controls
- Monitoring for unauthorized access or abuse
- Limited internal access based on role
No system is immune to risk, but we actively work to minimize exposure.
8. Your Rights (DPDP & GDPR)
Subject to applicable law, you have the right to:
- Access your personal data
- Request correction or erasure
- Withdraw consent (where processing is consent-based)
- Restrict or object to processing (GDPR, where applicable)
- Raise concerns or lodge complaints with relevant authorities
Requests can be made using the contact details below.
9. Cookies and Tracking
Our website may use minimal cookies or similar technologies for:
- Basic functionality
- Performance and security monitoring
We do not use cookies for intrusive tracking or profiling.
10. External Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices or content. Users are encouraged to review third-party privacy policies independently.
11. Policy Updates
This Privacy Policy may be updated periodically to reflect legal or operational changes. The latest version will always be available on our website.
12. Contact & Grievance Redressal
For privacy-related queries, requests, or concerns, contact:
We aim to respond to all legitimate requests within a reasonable timeframe.