Privacy Policy

This Privacy Policy explains how Zeolite Consulting ("Zeolite," "we," "us," or "our") collects, uses, discloses, and protects information in connection with this website and the business advisory services we offer, and describes the choices and rights available to you.

This policy is written to comply with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), each as applicable to a business of our size and nature. By using this website or submitting information to us through it, you acknowledge that you have read and understood this policy.

This website is a business-to-business advisory and lead-generation site. It does not sell goods online, does not process payments, and does not require visitors to create an account.

Zeolite Consulting is a business advisory practice. For the purposes of the DPDP Act, Zeolite is the "Data Fiduciary" for personal data collected through this website - the entity that determines the purpose and means of processing that data.

You can reach us at contact@zeoliteconsulting.com for any question about this policy or how your information is handled.

We collect two categories of information.

Information you give us: when you submit our contact form, we collect your full name, work email address, the category that best describes your need, and your message. Company name and phone number are optional fields you may choose to leave blank. We do not require you to create an account, and we do not collect payment or financial information anywhere on this site.

Information collected automatically: when you submit the contact form, our server automatically records your IP address, browser and device information (from your browser's user-agent string), the page that referred you, your browser's language setting, and a set of automated security signals (such as whether a spam-detection check passed) used to detect and block spam and abusive submissions. We do not run this kind of automated collection on pages you simply browse without submitting a form - it is tied to the act of submitting the contact form.

We do not use third-party analytics, advertising, or social-media tracking scripts anywhere on this website. There is no advertising pixel, analytics tag, or cross-site tracker embedded in this site's pages.

This website sets exactly one cookie: a session cookie used to keep your form submission secure (it supports CSRF protection, a standard safeguard against forged form submissions) and to temporarily preserve form values if a submission needs correction. This cookie does not identify you personally, is not used for advertising or analytics, is not shared with any third party, and expires when your browser session ends.

We do not use tracking cookies, advertising cookies, or any third-party cookie of any kind.

We use the information described above only to: respond to your inquiry and correspond with you; evaluate and discuss a potential advisory engagement; maintain a record of business correspondence; detect, investigate, and prevent spam, fraud, or misuse of our contact form; and comply with applicable legal obligations.

We do not use your information for automated decision-making that produces legal or similarly significant effects on you, we do not use it for advertising or marketing profiling, and we do not sell, rent, or trade your information to any third party for their own marketing purposes.

Under the DPDP Act, we process your personal data on the following bases: your consent, given freely and specifically when you choose to complete and submit our contact form after this policy has been made available to you (Sections 4 to 6 of the DPDP Act); and, where applicable, the "certain legitimate uses" ground in Section 7(a) of the DPDP Act, which covers personal data you voluntarily provide to us for a specified purpose, where you have not indicated that you do not consent to that use.

You may withdraw your consent at any time by contacting us using the details in the "Grievance Redressal and Contact" section below. Withdrawing consent does not affect the lawfulness of anything we did with your information before the withdrawal, and does not retract a message or reply we have already sent.

We apply reasonable security practices and procedures consistent with the SPDI Rules and Section 8(5) of the DPDP Act, including restricting access to stored inquiries to authorized personnel, using an encrypted connection (HTTPS) for this website, and applying technical safeguards such as cross-site request forgery protection and a strict content security policy on every page.

No method of transmission over the internet, and no method of electronic storage, can be guaranteed to be 100% secure. While we work to protect your information using practices appropriate to a business of our size, we cannot and do not guarantee its absolute security, and we make no warranty of any kind, express or implied, in that regard.

We retain contact form submissions and related correspondence for as long as reasonably necessary to respond to your inquiry, to maintain a record of our business correspondence, and to meet any legal, accounting, or reporting obligations that may apply. We do not keep your information for longer than is reasonably necessary for these purposes.

You may ask us to erase your information earlier - see "Your Rights" below.

We do not sell your information, and we do not share it with third parties for their own advertising or marketing purposes.

We share information only: with the hosting and email-delivery service providers we use to operate this website and deliver your message to us (currently Hostinger); where disclosure is required by applicable law, regulation, court order, or a valid request from a government or law enforcement authority; or where necessary to protect the rights, property, or safety of Zeolite, our visitors, or the public. We do not use any other third-party processor, CRM, analytics platform, or advertising network in connection with this website.

As a Data Principal under the DPDP Act, you have the right to: obtain a summary of the personal data we hold about you and how it has been processed; request correction or updating of inaccurate or incomplete personal data; request erasure of your personal data, unless we are required or permitted by law to keep it; withdraw your consent at any time; nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and seek redressal of any grievance by contacting us directly, with recourse to the Data Protection Board of India if your grievance is not resolved to your satisfaction.

If you are located outside India: while this policy is governed by Indian law, as a matter of good practice we will make reasonable efforts to honor comparable requests for access, correction, deletion, or objection to processing, consistent with widely recognized principles found in frameworks such as the EU General Data Protection Regulation, to the extent reasonably practicable for a business of our size.

This website and our services are directed at business professionals and organizations, not at children. We do not knowingly collect personal data from anyone below the age of 18. If we become aware that we have inadvertently collected personal data from a child without verifiable parental or guardian consent, as required under Section 9 of the DPDP Act, we will delete that data promptly.

This website may reference or link to third-party websites that are not operated by us. We are not responsible for the content, security, or privacy practices of any third-party website. We encourage you to review the privacy policy of any third-party site you visit.

We may update this policy from time to time to reflect changes in our practices or in applicable law. The effective date at the top of this page indicates when it was last revised. We encourage you to review this page periodically. Continued use of this website after a revision has been posted means you accept the updated policy.

If you have a question, want to exercise any of the rights described above, or have a complaint about how your information has been handled, contact us at contact@zeoliteconsulting.com. We will acknowledge and address genuine requests within a reasonable time.

A specific, individually named Grievance Officer has not yet been designated for the purposes of the SPDI Rules and the DPDP Act's grievance redressal requirements; until one is named, the contact address above is the designated channel for all privacy-related requests and complaints.

This policy, and any dispute or claim arising out of or in connection with it or its subject matter, is governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules made under it. The courts located in India shall have exclusive jurisdiction to settle any such dispute or claim, to the exclusion of the courts of any other country, regardless of where you access this website from.

This policy describes our practices in good faith and to the best of our current understanding of applicable law. It is provided for informational and transparency purposes and does not constitute legal advice to you. We make no warranty or guarantee of any kind, express or implied, that our practices will satisfy every requirement applicable to every visitor in every jurisdiction, or that any system, transmission, or storage method is completely secure. Nothing in this policy creates any right or obligation beyond what is required by applicable law.