Legal

Privacy Policy

How we handle your data and protect your privacy.

iAastha Research & Consulting (“iAastha”, “we”, “us”, or “our”) is a technology consulting and advisory firm based in India. We respect your privacy and are committed to protecting the personal data you share with us. This policy explains what we collect, how we use it, who we share it with, and the rights available to you under applicable Indian law—including the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Information Technology Act, 2000 and its rules. By using iAastha’s website and services, you agree to the practices described here.

Information we collect

We collect only what we need to respond to you and deliver our services:

We do not knowingly collect sensitive personal data through this website. Please do not send confidential or sensitive information through unencrypted channels.

How we use your data

We use the data we collect to respond to your inquiries, provide and improve our consulting and advisory services, manage our client and business relationships, operate and secure our website, and—where you have consented—send you relevant updates. We process your data only for these specified, lawful purposes. We do not sell your personal data to anyone.

Consent and legal basis

Under the DPDP Act, we process your personal data on the basis of your consent or for legitimate uses permitted by law. Where we rely on consent, you may withdraw it at any time by contacting us; withdrawing consent will not affect processing already carried out. If you provide another person’s data to us, you confirm you are authorised to do so.

How we share your data

We may share personal data with trusted service providers (data processors) who help us operate—such as website hosting, email, and analytics providers—under contractual obligations to protect your data and use it only on our instructions. We may also disclose data where required by law, regulation, or valid legal process, or to protect our rights, users, and services. If our business is involved in a merger, acquisition, or restructuring, data may be transferred as part of that transaction, subject to this policy.

Cookies and analytics

We use cookies and similar technologies to run the site, remember preferences, and understand how visitors use our pages so we can improve them. You can control or disable cookies through your browser settings; some features may not work as intended if you do.

Data retention

We keep personal data only for as long as needed to fulfil the purposes described in this policy, to maintain our business relationship, or to meet legal, accounting, or reporting requirements. When data is no longer required, we delete or anonymise it.

Security

We maintain reasonable security safeguards—technical, administrative, and physical—designed to protect personal data against unauthorised access, disclosure, alteration, or loss, in line with applicable Indian law. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

We operate from India and work with clients and service providers in multiple countries. Where personal data is transferred to or accessed from outside India, we take steps to ensure it remains protected consistent with this policy and applicable law.

Your rights

Subject to applicable law, you have the right to access a summary of the personal data we hold about you, to seek correction or completion of inaccurate or incomplete data, to request erasure of your data, to nominate another person to exercise your rights in the event of incapacity or death, and to withdraw consent or raise a grievance. To exercise any of these rights, contact us at [email protected].

Grievance redressal

If you have a concern or complaint about how we handle your personal data, you may contact our Grievance Officer at [email protected]. We will acknowledge and address your request within the timelines required under applicable law.

Children’s privacy

Our website and services are intended for businesses and professionals and are not directed to children. We do not knowingly collect the personal data of children. If you believe a child has provided us data, please contact us so we can remove it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Continued use of iAastha’s website and services is subject to the current policy and our Terms of Service. We encourage you to review this page periodically.

Contact us

For any questions about this Privacy Policy or your personal data, contact us at [email protected].

Last updated: May 2026.