This policy explains what personal data this website collects, why, and what happens to it. It is written to be read rather than to be impressive. Kalman Consultancy Services Private Limited is a proposed company; until incorporation is complete, the data described here is held by the founders, Om Pilaji and Sarvajeet Bajikar, personally.
What this website collects
Nothing. There is no contact form, no login, no newsletter signup and no analytics on this site. The contact links open your own email application. We receive your details only if you decide to write to us, and then only what you choose to put in the message.
Three things do happen automatically when you load a page, and you should know about them:
- Our hosting provider records server logs — your IP address, the page requested, the time, and your browser's user-agent string. This is standard for any website and is used for delivery and abuse prevention, not by us for tracking. We do not read these logs routinely.
- Fonts are loaded from Fontshare, so your browser makes a request to their servers, which reveals your IP address to them. That request is governed by Fontshare's own privacy policy, not ours.
- One item is stored on your device so the opening animation does not replay every time you navigate. It contains no personal data. See our cookie and storage policy.
What we collect when you contact us
When you email us, we hold your name, your email address, anything you tell us about your company, and the contents of your message. If you write about a job, we hold what you send with the application.
Why we hold it
To reply to you, and to prepare a proposal or assess an application. Nothing else. We do not send marketing email, and we do not build a mailing list.
Who else sees it
Our email provider, because that is how email works. Our website host, in the server logs described above. Nobody else — we do not sell, rent or share personal data. If a court or lawful authority requires disclosure we will comply, and we will tell you unless we are prohibited from doing so.
How long we keep it
Enquiries for as long as the conversation is live and up to two years afterwards, so we can pick up where we left off. Job applications for one year. You can ask us to delete either sooner and we will.
Your rights under the Digital Personal Data Protection Act, 2023
You can ask us to:
- tell you what personal data of yours we hold and who we have shared it with
- correct anything inaccurate or incomplete
- erase it
- withdraw consent you previously gave
- nominate another person to exercise these rights on your behalf if you are unable to
Write to the address below and we will act within a reasonable period, at no charge. If you are not satisfied with how we handle your request, you may raise a grievance with us first, and then complain to the Data Protection Board of India.
If you are outside India
We are based in India and our email and hosting providers may store data in other countries. If you write to us from the EEA, the United Kingdom, or a US state with its own privacy law, the rights below apply to you in addition to anything already described above, and we will honour them regardless of whether we are strictly required to.
Legal basis for holding your data (EEA / UK GDPR)
Where GDPR applies, we rely on legitimate interests — you contacted us about business, and replying to you is the obvious and expected use of what you sent. Where you apply for a role, we rely on steps taken at your request prior to entering a contract. We do not rely on consent for marketing because we do not send any.
Your GDPR rights
Access, rectification, erasure, restriction of processing, objection to processing, and data portability. You also have the right to complain to your national supervisory authority — in the UK, the Information Commissioner's Office.
International transfers
If you email us from the EEA or the UK, your message is stored on our email provider's infrastructure and read by us in India. India has not received an EU adequacy decision, so this is a transfer to a third country. We keep the amount of data involved to a minimum: an email address, a name, and whatever you chose to write. Do not send special-category or regulated data through this channel; if a project requires it, tell us first and we will put a proper agreement and a proper channel in place before anything is sent.
California and other US state laws
We do not sell or share personal information, and we do not use it for cross-context behavioural advertising. We have never done either. You may request disclosure, deletion or correction of what we hold, and we will not discriminate against you for asking.
Processors we use
Our email provider and our website host. That is the complete list — there is no CRM, no analytics platform, no marketing tool and no advertising network in the chain. If that changes, this section changes with it before the new service goes live.
Security
Correspondence is kept in an email account protected by a strong password and two-factor authentication. The website itself is static, serves no user data, and is delivered over HTTPS with a content security policy that blocks third-party scripts. We are two people and we do not run our own servers. We will not claim a level of security we cannot deliver: if you need to send something genuinely sensitive, tell us first and we will arrange a better channel than email.
Children
This site is intended for business contact and is not directed at children. We do not knowingly collect personal data from anyone under 18.
Changes
If this policy changes, the date at the top changes with it. Material changes will be described here rather than slipped in quietly.
Contact and grievances
For anything in this policy, including a request to see or delete your data, write to om@kalmanconsultancy.com with "Privacy" in the subject line. A named grievance officer and the registered office address will be published here after incorporation.