Last Updated: 30 May 2025 | Effective: 30 May 2025
1. About This Policy
Infosek ("Infosek", "we", "us") provides cybersecurity and regulatory compliance consulting services. This Privacy Policy explains how we collect, use, and protect your personal data when you visit infosek.in or engage with our services. We are committed to compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable RBI and SEBI data governance norms.
2. What Data We Collect
- Contact information you submit: name, email, company name, phone number, and the nature of your compliance requirement (via our contact form or Calendly booking)
- Communications: emails, meeting notes, and service-related correspondence
- Website usage data: pages visited, browser type, approximate location (via standard web analytics — no cookies beyond session/functional cookies)
- No sensitive personal data (Aadhaar, PAN, financial account numbers) is ever collected via this website.
3. How We Use Your Data
- To respond to your enquiry or service request
- To deliver agreed consulting services
- To send relevant compliance updates or resources you've opted into (you can unsubscribe at any time)
- We do NOT sell, rent, or share your data with third-party marketers
4. Data Sharing
We share data only with:
- Calendly (scheduling) — governed by their privacy policy
- Email service providers (Google Workspace) — for communications
- No other third parties receive your personal data without your explicit consent
5. Data Retention
- Enquiry data: 12 months from last contact, unless a service engagement begins
- Client engagement data: 5 years from project completion (for regulatory record-keeping purposes)
- You may request deletion at any time by writing to contact@infosek.in
6. Cookies
This website uses only functional/session cookies necessary for basic website operation. No advertising or tracking cookies are set. Cookie consent banners are not shown because we do not deploy non-essential cookies.
7. Your Rights Under DPDP Act 2023
Under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access information about how your data is processed
- Correct inaccurate data
- Request erasure of your personal data (where not required for legal/regulatory purposes)
- Nominate a person to exercise rights on your behalf
- Withdraw consent for any specific processing at any time
To exercise any of these rights, email: contact@infosek.in
8. Security
We apply industry-standard technical and organisational measures to protect your data, consistent with the cybersecurity standards we advise our clients on. Access to client data is restricted to authorised Infosek personnel on a need-to-know basis.
9. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated by email to active clients. Continued use of infosek.in after updates constitutes acceptance of the revised policy.
10. Contact
For any privacy-related enquiries or to exercise your DPDP Act rights: