Privacy Policy
What this website does with your data, what we do with it when you contact us, and the rights you have over it.
This notice describes what this website actually does, verified against its code. The highlighted placeholders need input from your solicitor or from the business before this can be relied upon. Remove this banner once that review is complete.
Who we are
Mithra Consulting (“we”, “us”) is a cybersecurity advisory firm registered in India. We are the controller of the personal data described in this notice.
| Entity | Mithra Consulting |
|---|---|
| Registered address | Phase 1, Vikram Sarabhai Instronics Estate, Tharamani, Thiruvanmiyur, Chennai 600041, Tamil Nadu, India |
| sales@mithraconsulting.com | |
| Telephone | +91 98807 81801 |
| Grievance Officer (DPDPA) | [NAME AND EMAIL OF GRIEVANCE OFFICER - required by DPDPA s.13] |
| EU representative (GDPR Art. 27) | [EU REPRESENTATIVE, or state that none is appointed - see note to counsel] |
The short version
This website sets no cookies, runs no analytics, and contacts no third party when you load a page. Fonts are served from our own servers. The only external service is the booking calendar, and it loads only if you click to load it. We receive your personal data solely when you choose to send it to us.
What we collect, and why
Information you send through our forms
The contact and partnership forms collect the fields below. They are not submitted to a server: the form opens a message in your own email application, which you then choose to send. We receive the information only when that email arrives.
| Field | Form | Required |
|---|---|---|
| First and last name | Contact | Yes |
| Email address | Contact, Partnership | Yes |
| Company | Contact, Partnership | Yes |
| Telephone | Contact, Partnership | No |
| Service of interest | Contact | No |
| Your message | Contact, Partnership | Yes |
| Name, partnership type | Partnership | Yes |
| Company website | Partnership | No |
We use this to answer your enquiry, scope the work you are asking about, and where relevant send you a proposal. Our lawful basis is [LAWFUL BASIS - typically Art. 6(1)(b) pre-contract steps, or 6(1)(f) legitimate interests].
Because the message is sent by your own email application, it travels over your email provider’s infrastructure before it reaches us. We cannot apply our own security controls to that leg of the journey, and we cannot confirm delivery. Please do not send confidential technical detail, credentials or personal data about third parties through this route — ask us for a secure channel instead.
Booking a discovery call
Our contact page offers a booking calendar operated by Calendly LLC, a company based in the United States. The calendar does not load automatically. Until you press “Load booking calendar”, no request is made to Calendly and it receives nothing about you.
If you choose to load it, Calendly receives your IP address and may set cookies in your browser, and any details you enter to book a meeting are processed by Calendly under its own privacy notice. Our lawful basis for this is your consent, given by clicking to load it, which you may withdraw at any time by not using the calendar — you can email or telephone us instead.
Server logs
Our web servers record technical information for every request: IP address, timestamp, the page requested, HTTP status, referring page and browser user-agent string. This is standard web server operation and we use it to keep the service available, diagnose faults, and detect and investigate attacks. Our lawful basis is our legitimate interest in the security and integrity of our systems.
These logs are retained for 90 days and are then deleted automatically.
Cookies and tracking
This website sets no cookies of its own. It contains no analytics, advertising, remarketing, session recording or fingerprinting technology, and no social media tracking pixels. Fonts are served from our own infrastructure rather than a third-party font service, so no font provider learns that you visited.
The one exception is the booking calendar described above, which may set cookies once you actively load it. That is why we ask first.
Who else sees your data
| Recipient | What they receive | When |
|---|---|---|
| Calendly LLC (United States) | IP address, browser data, meeting details you enter | Only if you click to load the calendar |
| Our email provider | Enquiry emails you send us | When you send an enquiry |
| [HOSTING PROVIDER / DATA CENTRE NAME AND LOCATION] | Server log data | Every page request |
We do not sell personal data, and we do not share it for advertising. We may disclose information where we are legally required to do so, or to establish or defend legal claims.
Transfers outside your country
We are established in India, so if you contact us from elsewhere your data will be processed in India. Where you choose to load the booking calendar, data is additionally processed in the United States by Calendly. Our transfer mechanism for personal data originating in the EEA or UK is [TRANSFER MECHANISM - e.g. Standard Contractual Clauses].
How long we keep it
| Data | Retention |
|---|---|
| Server logs | 90 days |
| Enquiries that do not lead to engagement | [RETENTION PERIOD] |
| Client and engagement records | [RETENTION PERIOD - check against contractual and tax obligations] |
| Partnership enquiries | [RETENTION PERIOD] |
Your rights
Depending on where you are, you may have some or all of the following rights over your personal data.
If the UK or EU GDPR applies to you
- Access — obtain a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted where there is no continuing basis to hold it
- Restriction — limit how we use your data while a concern is resolved
- Objection — object to processing carried out on the basis of legitimate interests
- Portability — receive data you gave us in a machine-readable format
- Withdraw consent — where processing relies on consent, withdraw it at any time
If India’s DPDPA 2023 applies to you
- Access — a summary of the personal data we process and how
- Correction and erasure of your personal data
- Grievance redressal through the Grievance Officer named above
- Nominate another person to exercise your rights in the event of death or incapacity
To exercise any of these, email sales@mithraconsulting.com. We will respond within [RESPONSE TIME - GDPR requires one month; DPDPA has its own timeline]. We may need to verify your identity before acting, so that we do not disclose your data to somebody else.
Complaints
If you are not satisfied with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to a supervisory authority:
- India — the Data Protection Board of India
- EU — the supervisory authority in your country of residence or workplace
- UK — the Information Commissioner’s Office
How we protect your data
This site is served over HTTPS only. It is built as static files with no database, no content management system and no server-side scripting, which removes most of the ways a website is ordinarily attacked. Our servers are firewalled, patched automatically, monitored, and access to them requires named accounts. Access to enquiry data is limited to the people who need it to respond to you.
No system is perfectly secure. If you believe you have found a vulnerability in this site, please see the responsible disclosure section of our Terms of Use.
Children
Our services are sold to organisations, and this website is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes to this notice
If we change how we handle personal data we will update this page and revise the date at the top. Where a change is significant we will say so clearly rather than relying on you to notice.
Contact us
Questions about this notice, or about how we handle your data:
Email: sales@mithraconsulting.com
Telephone: +91 98807 81801
Post: Mithra Consulting, Phase 1, Vikram Sarabhai Instronics Estate, Tharamani, Thiruvanmiyur, Chennai 600041, Tamil Nadu, India