Privacy Policy

This notice describes how Shadgunya Group("we," "our," the "Group") collects, uses, and safeguards personal information in connection with this website and the communication channels listed below. It is written to be consistent with the Digital Personal Data Protection Act, 2023 (DPDPA) and applies to all visitors and correspondents in India and abroad.

1. Who we are

Shadgunya Group is the data controller (or, under the DPDPA, the Data Fiduciary) responsible for the personal information processed through this site. Our registered office is:

Inquiries on this notice may be directed to the Data Protection Officer at spo@shadgunya.com.

2. What we collect

This website does not run user accounts, marketing trackers, or advertising cookies. Personal information is collected only when you choose to send it to us. The categories are limited to:

• Direct correspondence. When you write to any of the email addresses listed on this site, we receive the contents of your message, your name (where supplied), email address, and any attachments or context you choose to include.
• Server access logs. Our hosting provider logs standard request metadata (IP address, user agent, referring page, timestamp) for the limited purposes of operating, securing, and troubleshooting the site.
• Local preferences. Your browser may store non-identifying preferences such as theme selection. These are kept in your own browser and are not transmitted to us.

3. Why we use it

Personal information is used solely to respond to your inquiry, to evaluate potential investor, partner, or career conversations, to keep the site secure and operational, and to comply with applicable law. We do not profile, sell, rent, or share personal information for marketing purposes.

4. Lawful basis

Where the DPDPA applies, our processing relies on the consent you give by initiating contact with us, or on the limited legitimate-uses permitted under the Act for security, legal compliance, and recordkeeping. Where another regime applies (for example, in the EEA or the United Kingdom), we rely on the equivalent lawful bases.

5. Who receives it

• Group personnel. Members of the relevant team within the Group receive your message in the ordinary course of responding to it.
• Service providers. Hosting, email, and infrastructure providers process information on our instructions under contractual confidentiality and security obligations.
• Authorities. Where compelled by law, court order, or a regulator with valid jurisdiction, we may be required to disclose information; we resist requests that exceed lawful scope.

We do not transfer personal information to any country in respect of which the Government of India has issued a restriction under the DPDPA.

6. How long we keep it

Correspondence is retained for the period necessary to address the matter raised, to comply with statutory recordkeeping requirements, or to defend legal claims. Server logs are retained for short windows consistent with security operations and then discarded or aggregated.

7. Your rights

Subject to applicable law, you may exercise the following rights in relation to your personal information:

• The right to access information we hold about you.
• The right to correction or completion of inaccurate information.
• The right to erasure, where we are no longer required to retain it.
• The right to nominate another person to exercise these rights in the event of your death or incapacity.
• The right to grievance redress if you believe your information has been mishandled.

To exercise any of these rights, write to spo@shadgunya.com. We respond within the timeline required by the DPDPA, and in any event without undue delay. If you are not satisfied with our response, you may approach the Data Protection Board of India.

8. Security

We apply technical and organisational measures appropriate to the sensitivity of the information we hold, including encrypted transit, access controls, and logging. No system is perfectly secure; if you believe you have identified a vulnerability, please report it under our responsible disclosure policy.

9. Children

This site is not directed at children, and we do not knowingly process the personal information of a person under the age of eighteen. If you believe a minor has supplied us with personal information, please contact the DPO and we will delete it.

10. Changes

We may update this notice from time to time. The effective date at the top of the page reflects the current version. Material changes will be flagged on this page for a reasonable period.

11. Channels listed on this site

The following email address is the only channel published by the Group on this website. Any other address purporting to represent the Group should be treated with caution.

• spo@shadgunya.com, all inquiries, including privacy notices, data subject requests, grievances, and vulnerability reports under responsible disclosure.

Governing law

This notice is governed by the laws of India and is subject to the exclusive jurisdiction of the courts of Chennai, India.