Schedule a Call
Legal

Privacy Policy

Last updated: July 2026 · DRAFT — pending legal review

Simitri HR Services (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what we collect, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and its Rules.

1. Who we are (Data Fiduciary)

For the purposes of the DPDP Act, Simitri HR Services is the Data Fiduciary that determines the purpose and means of processing your personal data.

Registered office:
102, Daffodils, Tata Glendale, Gladys Alvarys Road,
Off Pokharan Road No. 2, Thane West, Thane 400610

Grievance / privacy contact: privacy@simitrihr.com

2. The personal data we collect

We collect only what you choose to give us through our forms and communications:

  • Enquiry & discovery-call forms: your name, organization, designation, work email address, mobile number and any message you write.
  • Careers form: your name, email address, mobile number, message and any resume/CV file you upload.
  • Newsletter: your email address.
  • Technical data: limited, security-related information such as a salted, hashed record of your IP address at the time of submission (we do not store your raw IP address), and essential cookie data (see our Cookie Policy).

We do not knowingly collect the personal data of children, and we do not use your data for automated decision-making or profiling.

3. Why we process it (purposes)

  • To respond to your enquiry and provide the information or consultation you request.
  • To assess applications and expressions of interest in joining our consulting network.
  • To send you our newsletter, where you have separately opted in.
  • To protect our website and forms against spam and abuse.
  • To comply with applicable law.

4. The lawful basis: your consent

We process the personal data above on the basis of the consent you give when you submit a form — provided through a clear, un-pre-ticked checkbox with an itemized notice of purpose. We record the fact, time and version of that consent, along with the categories of data concerned, as required by the DPDP Act.

5. Your rights as a Data Principal

Under the DPDP Act you have the right to:

  • Access a summary of the personal data we hold about you and how we process it;
  • Correction, completion and updating of your personal data;
  • Erasure of your personal data where it is no longer needed for the purpose it was collected;
  • Withdraw your consent at any time, as easily as you gave it (withdrawal does not affect processing already carried out);
  • Nominate another individual to exercise your rights in the event of your death or incapacity;
  • Grievance redressal — to have your complaint addressed by us in the first instance.

To exercise any of these rights, contact us at privacy@simitrihr.com. We will respond within the timelines required under the Act.

6. Grievance redressal and the Data Protection Board

If you are not satisfied with how we handle your personal data or your request, please first write to our grievance contact at privacy@simitrihr.com. If your concern remains unresolved, you have the right to lodge a complaint with the Data Protection Board of India established under the DPDP Act.

7. How long we keep your data (retention)

We keep enquiry data only as long as needed for the purpose it was given. Enquiries that do not lead to an engagement are flagged for deletion 18 months after your last contact with us, unless a longer period is required by law or to establish, exercise or defend a legal claim. Newsletter data is kept until you unsubscribe.

8. How we protect your data

We apply reasonable security safeguards, including encryption in transit (TLS), parameterized database queries, access controls and data minimization (for example, hashing rather than storing raw IP addresses). In the event of a personal data breach, we are committed to notifying affected Data Principals and reporting to the Data Protection Board of India without undue delay, in line with the DPDP Rules.

9. Sharing your data

We do not sell your personal data. We share it only with service providers (Data Processors) who help us operate our website and communications under contractual confidentiality and data-protection obligations, and where required by law.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date above reflects the current version.