Privacy Policy

For the purposes of the DPDP Act, Opulus is the Data Fiduciary that determines the purpose and means of processing your personal data. By submitting your personal data to us, you are the Data Principal to whom that data relates.

1. Personal data we collect

We collect only the personal data we need to respond to you and to provide our services. This may include:

• Identity and contact details such as your name, company name, email address and phone number.
• Enquiry and booking details, including the message you send us, the service you are interested in and any discovery call slot you request.
• Technical and usage data, such as your IP address, browser type and pages visited, which our hosting and analytics providers may record automatically.
• Any other information you choose to share with us during an engagement.

2. How we collect it

We collect personal data directly from you when you complete a form, request a discovery call, email or call us. Some technical data is collected automatically through cookies and server logs when you use the website.

3. Purposes and lawful basis for processing

We process your personal data to respond to your enquiries, schedule and conduct discovery calls, provide and administer our advisory services, manage our relationship with you, improve our website, and comply with applicable laws.

We process your personal data on the basis of the consent you provide when you share it with us, and for the legitimate uses permitted under the DPDP Act. We will request your consent through a clear notice at the point of collection.

4. Consent and how to withdraw it

You may withdraw your consent at any time by writing to us at the contact details below. Withdrawing consent is as easy as giving it. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal, and it may limit our ability to respond to you or provide certain services.

5. Sharing and disclosure

We do not sell your personal data. We may share it with:

• Service providers acting as Data Processors on our behalf, such as hosting, email, scheduling and analytics providers, under appropriate contractual safeguards.
• Professional advisers, including legal and accounting advisers, where reasonably necessary.
• Government authorities, regulators or courts where disclosure is required by law.

6. Data retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or for as long as required to meet legal, regulatory or contractual obligations. When data is no longer needed, we will erase it or anonymise it, unless retention is required by law.

7. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration and loss. While we work to safeguard your data, no method of transmission or storage is completely secure.

8. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

• Access a summary of the personal data we hold about you and how we process it.
• Request correction, completion or updating of inaccurate or incomplete data.
• Request erasure of your personal data where it is no longer required.
• Nominate another individual to exercise your rights in the event of your death or incapacity.
• Raise a grievance regarding our handling of your personal data.

To exercise any of these rights, please contact our Grievance Officer using the details below. We may need to verify your identity before acting on a request.

9. Grievance redressal

If you have any questions, concerns or complaints about how we handle your personal data, you may contact our Grievance Officer. We will respond within the timelines prescribed under the DPDP Act. If you are not satisfied with our response, you may have the right to escalate the matter to the Data Protection Board of India.

10. Children's data

Our website and services are intended for businesses and adults. We do not knowingly collect personal data of children (individuals below 18 years of age) without verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children.

11. Cross-border processing

Some of our service providers may store or process personal data on servers located outside India. Where this happens, we take steps to ensure your data is handled in accordance with this policy and applicable law.

12. Cookies

Our website uses a limited number of cookies and similar technologies that are necessary for the site to function and to understand how it is used. You can control cookies through your browser settings. Disabling some cookies may affect how the site works.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the revised date shown above. We encourage you to review it periodically.

14. Contact us

For any privacy related queries, please reach us at: