Privacy Policy

Surkhaab Consultants Private Limited ("we", "our", "us", or "the Company") is committed to protecting the privacy of individuals who visit our website, use our services, or interact with us. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information in compliance with applicable data protection laws, including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Information We Collect

We may collect the following types of personal information when you use our website or services:

• Personal Identification Information: Name, email address, phone number, postal address, date of birth, PAN, Aadhaar number (where required), and other identification details.
• Financial Information: Bank account details, income details, credit history, GST details, business registration documents, and other financial information necessary to provide our services.
• Technical Data: IP address, browser type, device information, operating system, pages visited, time and date of visit, and other usage data collected through cookies and similar tracking technologies.
• Communication Data: Records of your interactions with us via email, phone, WhatsApp, or contact forms.

2. How We Collect Information

We collect information through the following means:

• When you fill out forms on our website (contact forms, application forms, enquiry forms).
• When you communicate with us via email, phone, or other channels.
• When you use our services or apply for products through our platform.
• Automatically through cookies, log files, and analytics tools when you browse our website.
• From third-party sources such as credit bureaus, government databases, and business partners where you have provided consent.

3. Purpose of Collection and Use

We collect and use your personal information for the following purposes:

• To provide, maintain, and improve our consulting and business services.
• To process service registrations, applications, and enquiries.
• To communicate with you regarding your enquiries, applications, and service updates.
• To verify your identity and conduct due diligence as required under applicable laws.
• To comply with legal, regulatory, and government requirements.
• To improve our website, user experience, and service quality.
• To send promotional and marketing communications (where you have provided consent).
• To prevent fraud, misuse of services, and ensure security.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have provided your explicit consent for specific processing activities.
• Contractual Necessity: To fulfill our obligations under any agreement or contract with you.
• Legal Obligation: To comply with applicable laws, regulations, and government directives.
• Legitimate Interests: For purposes that are in our legitimate business interests, such as fraud prevention, network security, and service improvement.

5. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

• Government Authorities: When required by law, regulation, or legal process (e.g., court orders, regulatory directives).
• Service Partners: Third-party service providers who assist us in delivering our services (e.g., banks, insurance companies, certification bodies, payment processors).
• Professional Advisors: Lawyers, auditors, and consultants who provide professional services to us.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. The retention period may vary depending on the nature of the data and the legal requirements. Once the retention period expires, your data will be securely deleted or anonymized.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, alteration, or destruction. These measures include:

• Secure servers and encrypted data transmission (SSL/TLS).
• Access controls and authentication mechanisms.
• Regular security audits and monitoring.
• Employee training on data protection and privacy.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to protect your data to the best of our capabilities.

8. Your Rights

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal information, subject to legal and contractual obligations.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider, where technically feasible.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.
• Right to Lodge a Complaint: File a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us using the details provided in Section 12.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze site traffic, and understand where our visitors come from. Cookies are small text files stored on your device by your web browser.

We use the following types of cookies:

• Essential Cookies: Required for the website to function properly.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Functional Cookies: Remember your preferences and settings.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website.

10. Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party websites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated policy will be posted on this page with the "Last updated" date revised. We encourage you to review this page periodically for any changes. Your continued use of our website or services after changes constitute your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Delhi, India.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.