Legal
Privacy Notice
Last updated: 27 August 2026 — written to align with India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025.
1. What personal data we collect
When you use our discovery form or data-rights request form, we collect what you type in directly: your name, email address, business scale, and the content of your message. We don't collect anything beyond what you actively submit — no background profiling, no data bought from third parties.
2. Why we collect it (purpose)
Strictly to respond to your inquiry, schedule a call, or process a data-rights request. We don't use contact-form data for marketing unless you separately opt in somewhere that says so explicitly — this notice doesn't cover a purpose we haven't asked your consent for.
3. Consent
We process your data on the basis of your explicit, opt-in consent, given via an unticked checkbox at the point of collection. You can withdraw consent at any time — see §6. Withdrawing consent doesn't affect the lawfulness of anything we did with your data before the withdrawal.
4. Third parties
Calendly (call scheduling) — only loads after you accept cookies, since it sets its own cookies to run. Google Analytics — same: consent-gated, and only active at all if we've configured it. WhatsApp/Meta — only if you click a WhatsApp link, which hands you off to WhatsApp directly; we don't see that conversation. Our hosting provider processes data as needed to run the site (infrastructure only, not a marketing or analytics use).
5. Retention
Discovery-form submissions and consent records are kept for as long as needed to respond to your inquiry and, if you become a client, for the duration of the engagement plus any period required by applicable record-keeping law. Data-rights requests and their resolution are kept as an audit trail even after the underlying data is deleted, since we need to be able to show a request was actually handled.
6. Your rights
Under the DPDP Act, you can:
- • Access — ask what data we hold about you.
- • Correct — ask us to fix inaccurate or incomplete data.
- • Erase — ask us to delete data we no longer need to keep.
- • Withdraw consent — at any time, as easily as you gave it.
- • Nominate — name someone to exercise these rights on your behalf if you become unable to (e.g. due to death or incapacity).
- • Grievance redressal — raise a complaint about how we've handled your data (see §7).
7. Grievance officer
For questions, complaints, or grievances about how your data is handled: hello@zenithdynamics.in. We aim to respond promptly. (Placeholder — replace with a named Grievance Officer and a stated response-time SLA before launch; a role inbox without a named contact is a common gap flagged in DPDP gap-assessments.)
8. Where we're based
Gobra, Dankuni, West Bengal, India
