Privacy Policy

About this policy

Conformite Assist (“we”, “us”, “our”) is a compliance advisory firm based in Hyderabad, India. This policy explains what personal data we collect through this website, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

It covers this website, www.conformiteassist.com, and the enquiries you send us through it. It does not cover the services we deliver under a signed engagement, which are governed by that agreement and any data processing terms we sign with you.

Our role

For the personal data described in this policy, Conformite Assist decides why and how it is processed. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) that makes us the Data Fiduciary. Under the EU and UK General Data Protection Regulation (GDPR), where it applies, it makes us the data controller.

Personal data we collect

We keep this to a minimum. We collect only what you choose to send us, plus a small amount of technical data needed to keep the website secure.

• Enquiry details you submit through our contact form: your name, your business email address and your message. Your phone number and company name are optional.
• The services of interest you select on the form.
• Technical data: the IP address a form submission comes from, which we use only to rate-limit the form and block spam.
• Website usage data collected by Google Analytics: the pages you visit, how you arrived at the site, and general information about your browser, device and approximate location. This is described under “Cookies and analytics” below.

Sensitive information

We do not ask for sensitive personal information through this website, and we ask that you do not send it to us through the contact form. That includes health, financial and government identifier data. If you need to share something sensitive, contact us first and we will agree a secure channel with you.

Why we process it

We do not sell or rent your personal data, we do not use it for advertising, and we do not use it to build profiles about you.

• To read and respond to your enquiry and to discuss your requirements with you.
• To keep an internal record of enquiries and the correspondence that follows.
• To protect the contact form from spam and automated abuse, using a hidden honeypot field, a captcha and IP-based rate limiting.
• To measure, in aggregate, how the website is used so that we can improve its content and structure.

Our lawful basis

Under the DPDP Act, we process your enquiry on the basis of the personal data you voluntarily provide to us for the specified purpose of responding to that enquiry, and on your consent where consent is required.

Where the GDPR applies, for example if you contact us from the EEA or the UK, our lawful bases are your consent when you submit the form, and our legitimate interest in responding to business enquiries and keeping our website secure.

Who we share it with

We share your personal data only where it is necessary to deliver and answer your enquiry, and our providers may process it only on our instructions.

• Resend, our email delivery provider, which delivers your enquiry to contact@conformiteassist.com.
• Our website hosting provider, which operates the servers this website runs on.
• Google, which provides the analytics measurement described under “Cookies and analytics” below. Google receives website usage data, not the contents of your enquiry.

Other disclosures

We do not share your personal data with any other third party, unless you ask us to, or unless we are required to do so by law or by a competent authority.

International transfers

Our hosting, email and analytics providers may store or process data on servers located outside India. Where personal data protected by the GDPR is transferred outside the EEA or the UK, we rely on the safeguards those providers put in place, such as standard contractual clauses.

How long we keep it

We keep enquiry data only for as long as we need it to respond to you and to keep a reasonable record of our correspondence. Once that purpose has been served, and where we have no legal reason to keep it, we delete it. The IP address used for rate limiting is held only briefly and is not kept as part of your enquiry record.

How we protect it

If a personal data breach occurs, we will act on it and notify the affected individuals and the relevant authority, including the Data Protection Board of India, where the law requires us to.

• This website is served over an encrypted HTTPS connection.
• Access to enquiries is limited to the people at Conformite Assist who need it in order to respond to you.
• The contact form is protected by a captcha, a honeypot field and IP-based rate limiting.

Cookies and analytics

This website does not use advertising cookies and we do not track you across other websites. The captcha and spam protection on the contact form work without setting tracking cookies.

We use Google Analytics 4 to understand, in aggregate, how the website is used, which pages are read and which are not. It sets first-party cookies on your device and sends Google a limited set of measurement data, including a truncated IP address, the pages you view, and general information about your browser, device and approximate location.

We use this only to improve the website. Advertising features, remarketing and ad personalisation are switched off, we do not share this data with advertising networks, and it is not used to build a marketing profile of you or linked to the enquiry you send us through the contact form.

You can opt out at any time by installing Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies for this site in your browser settings. Blocking analytics does not affect any part of the website.

Your rights

You have rights over the personal data we hold about you. To exercise any of them, email contact@conformiteassist.com and we will respond within a reasonable time. We may need to confirm your identity before we act on a request.

• Access: obtain a summary of the personal data we process about you and the identities of the third parties we have shared it with.
• Correction: have inaccurate or incomplete data corrected, completed or updated.
• Erasure: have your data deleted once the purpose it was collected for has been served, or where you withdraw your consent.
• Withdraw consent: withdraw your consent at any time. This does not affect processing already carried out before you withdrew it.
• Grievance redressal: raise a complaint with us about how we have handled your personal data.
• Nomination: nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

Additional rights under the GDPR

Where the GDPR applies to you, you also have the right to restrict processing, the right to object to processing carried out on the basis of our legitimate interests, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

Grievance redressal

If you are unhappy with how we have handled your personal data, contact us first at contact@conformiteassist.com, setting out your concern, and we will look into it and respond to you.

If you are in India and you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India under the DPDP Act.

Children

This website is intended for businesses and the professionals who work in them. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of 18.

Changes to this policy

We may update this policy as our services, our providers or the law change. The current version is always published on this page, with the date it was last updated shown at the top.

Contact us

Conformite Assist, Hyderabad, India. For any question about this policy, or about the personal data we hold about you, email contact@conformiteassist.com.