Privacy Policy

Draft for review by counsel.

This Privacy Policy explains how NARADism Solutions LLP ("NARADism", "we", "us") handles personal data collected through www.naradism.com (the "Site"). It applies to visitors to the Site and to people who contact us through it. It does not cover personal data we process in the course of client engagements, which is governed by the terms of the relevant engagement, nor the NARADism Verify portal at verify.naradism.com, which has its own notice.

Who we are

NARADism Solutions LLP is an intelligence, forensic and compliance advisory firm based in India. For the purposes of India's Digital Personal Data Protection Act 2023 (the "DPDP Act") we are the data fiduciary for personal data collected through the Site. For visitors in the European Union or European Economic Area, we act as the data controller under the General Data Protection Regulation (the "GDPR").

Questions about this policy or about your personal data can be sent to info@naradism.com.

What we collect

When you use the contact form on the Site we collect the information you choose to provide:

• your name;
• your organisation;
• your role (optional);
• your email address;
• your phone number (optional);
• the type of matter and its urgency; and
• the content of your message.

We also record the network address (IP address) from which the form was submitted, solely to prevent abuse of the form.

We also collect limited technical information automatically, such as the pages you visit and the approximate region you are visiting from, as described under "Cookies and analytics" below.

We do not ask you to submit sensitive personal data through the Site. If your message includes confidential information about a matter, please keep it brief; we will agree a secure channel with you before receiving anything substantive.

The website assistant

The Site includes an assistant that answers questions from our published material. When the AI-powered mode is enabled, the text you type is sent to Anthropic, PBC, a US-based provider, to generate the reply. Under Anthropic's API terms, that text is not used to train its models. We do not store assistant conversations on our servers. Please do not type confidential details of a live matter into the assistant; use the contact form and we will agree a secure channel.

Why we use it

We use the information from the contact form to respond to your enquiry, to assess whether we can assist, and to run conflict checks before accepting any engagement. Under the DPDP Act, we process this data on the basis of your consent, given when you submit the form. Under the GDPR, our lawful basis is our legitimate interest in responding to enquiries made to us, and, where an engagement follows, the steps necessary to enter into a contract with you.

We do not use your information for marketing unless you have asked to receive updates from us, and you may withdraw that request at any time.

How long we keep it

We keep contact form submissions for as long as needed to deal with your enquiry and, where relevant, to maintain a record of conflict checks. Enquiries that do not lead to an engagement are deleted or anonymised within 24 months of the last contact, unless we are required to keep them for longer by law. Our email delivery provider retains a copy of sent enquiry emails for a limited period under its own retention settings.

Who we share it with

We do not sell personal data. We share it only with:

• service providers who act on our behalf: Vercel, Inc. (hosting and cookieless site analytics), Resend, Inc. (delivery of contact form emails), Anthropic, PBC (the website assistant, when enabled) and Google LLC (Google Analytics, only if you accept analytics cookies), each under contracts that restrict their use of the data;
• professional advisers, where necessary to run conflict checks or obtain advice; and
• authorities, where required by law.

Some of these providers are located outside India. Where personal data is transferred outside India or the EEA, we take steps to ensure it remains protected in line with the DPDP Act and, for EU visitors, the GDPR.

Cookies and analytics

The Site uses cookieless analytics provided by our hosting provider that do not identify individual visitors, in order to understand which pages are read. With your consent, and only with your consent, the Site may also use Google Analytics, which sets cookies and processes usage data on Google's servers. Nothing from Google loads until you accept. You can decline or withdraw consent at any time using the "Cookie settings" link in the footer of every page, and you can block cookies through your browser.

Your rights

Under the DPDP Act you have the right to access a summary of the personal data we hold about you, to have it corrected, updated or erased, to withdraw consent, to nominate another person to exercise your rights, and to raise a grievance with us and, if unresolved, with the Data Protection Board of India.

If you are in the EU or EEA, the GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent, and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email info@naradism.com. We will respond within the time required by the applicable law.

Security

We apply technical and organisational measures appropriate to the sensitivity of the data we hold, including access controls, encryption in transit and need-to-know handling.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be signposted on the Site.