Privacy Policy

Sri Tulasi Tech Labs LLP
Effective Date: 19 October 2026, V 1.0
Contact: hello@sritulasitechlabs.com
Website: https://www.sritulasitechlabs.com

1. Introduction

Sri Tulasi Tech Labs LLP (“STTL”, “we”, “our” or “us”) respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, store, protect and share information when you use our websites, DPDP Readiness Assessment application and related services.

2. Information We Collect

Depending on how you use our services, we may collect:

  • Account information: Name, business email address, phone number, organisation name and login-related information.
  • Assessment information: Responses, comments, readiness assessment results, gap analysis information and related records entered into the application.
  • Organisation information: Business processes, policies, practices and other information provided by an organisation during an assessment.
  • Technical information: Log records, device or browser information, access times and basic usage information required to operate and secure the service.
  • Support communications: Information you provide when contacting us for assistance.

Please avoid uploading unnecessary personal data, passwords, identity documents or sensitive information into assessment responses or evidence fields.

3. How We Use Information

We use information to:

  • Create and manage user accounts.
  • Provide and operate the assessment application.
  • Record assessment responses and generate readiness indicators, gap analysis and reports.
  • Manage organisation access and collaboration.
  • Respond to support requests.
  • Maintain application security, troubleshoot issues and prevent misuse.
  • Communicate service-related updates.
  • Meet applicable legal obligations.

We will not use personal data for unrelated purposes without an appropriate legal basis.

4. Customer Assessment Data

Organisations using the assessment application may enter information about their business processes, policies and data protection practices.

The customer organisation is responsible for ensuring that it has the appropriate authority to provide any personal data it enters into the application.

Where STTL processes personal data on behalf of a customer to provide the service, STTL will handle that information for the agreed service purposes and in accordance with applicable contractual and legal requirements.

Customers should not enter unnecessary personal data relating to employees, customers, vendors or other individuals into assessment responses.

5. Sharing of Information

We do not sell personal data.

We may share information with authorised service providers who help us host, operate, maintain or secure our services. Such providers may access information only as needed for their assigned services and subject to appropriate safeguards.

We may also disclose information when required by law or to protect the rights, security and integrity of our services.

6. Data Storage and Security

We use reasonable technical and organisational measures to protect information against unauthorised access, disclosure, alteration, loss or misuse.

Access to information is restricted based on operational requirements and authorised user roles.

No online service can guarantee absolute security. We continually seek to maintain appropriate safeguards for the information we handle.

7. Data Retention

We retain information for as long as reasonably necessary to provide our services, maintain relevant records, meet legal obligations and resolve disputes.

Retention of customer assessment data may also depend on the customer’s subscription, contractual arrangements and account settings.

When information is no longer required, we will take appropriate steps to delete it or otherwise handle it in accordance with applicable requirements, subject to lawful retention obligations.

8. Your Rights and Requests

Subject to applicable law, you may request access to information concerning you, correction or updating of inaccurate information, deletion where applicable, withdrawal of consent where processing is based on consent, or assistance with privacy-related concerns.

You may submit a request to hello@sritulasitechlabs.com. We may need to verify your identity before responding.

If your personal data was entered into the application by a customer organisation, we may direct your request to that organisation where it is responsible for the relevant processing.

9. Cookies and Technical Data

Our websites or application may use essential cookies, session technologies and technical logs required for functionality, security and service operation. If additional analytics or tracking technologies are introduced, relevant information and choices will be provided where required.

Website Analytics (Google Analytics)

Help us improve this website

May we use Google Analytics to see which pages you visit and how you found this website, to improve it? This section explains what is collected, who receives it, how long it is kept and how you can say no. It applies to our public website and application pages; it does not change how we handle customer assessment data (see section 4).

What is collected, and by whom

Only if you accept, we use Google Analytics, loaded through Google Tag Manager, a service of Google LLC and its affiliates ("Google"). Google then receives the pages you visit and their titles, the website or link that brought you here (when your browser shares it), campaign tags in the link (UTM parameters), your browser, operating system, device type and screen size, your IP address and approximate location, identifiers stored in Google cookies, and events such as sign-in, registration, checkout, purchases and downloads. Google uses this to give us statistics about the use of the website, acting as our service provider, under its own terms and Google's Privacy Policy. Google may process this data on servers outside India.

  • We never send passwords, payment details or what you type into forms. Sensitive values in web addresses (such as password-reset links) are removed before a page is reported.
  • Advertising features, ad personalisation and the sharing of data for Google advertising are switched off.
  • We do not sell this information or use it to identify you on other websites.

Cookies and similar technologies

  • Your choice (trk.consent, browser storage): remembers whether you accepted or declined analytics, so we do not ask again. Kept until you clear your browser data.
  • Google Analytics cookies (_ga and _ga_<ID>): set by Google only after you accept, to distinguish visitors and visits; they normally expire after up to 2 years. See how Google uses information from sites that use its services.
  • Sign-in (app.token, browser storage): keeps you signed in to the application. This is necessary for the service and is not used for analytics.

How long it is kept

Google Analytics data is kept for the retention period set in our Google Analytics account, which is no longer than 14 months, after which Google deletes it.

Your choices and rights

  • Analytics is optional. If you decline or opt out, or your browser sends a Global Privacy Control signal, nothing is sent to Google, and the website works the same.
  • You can change your choice at any time below. Withdrawing consent stops further collection at once; it does not affect what was collected before.
  • You can also block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on.
  • Under the Digital Personal Data Protection Act, 2023 you may ask us about, or ask us to correct or erase, data collected about you, and raise a grievance. Write to hello@sritulasitechlabs.com (see sections 8 and 12). If you are not satisfied with our response, you may approach the Data Protection Board of India.

This section was last updated on 12 November 2026.

10. Children's Information

Our services are intended for business and professional use and are not designed for children. Please do not provide children's personal data unless it is necessary for an authorised use of the service and the applicable legal requirements have been met.

11. Changes to This Policy

We may update this Privacy Policy when our services, data practices or legal requirements change. The latest version will be published on our website or application with the revised effective date.

12. Contact Us

For privacy-related questions, requests or complaints, contact:

Sri Tulasi Tech Labs LLP
Email: hello@sritulasitechlabs.com
Website: https://www.sritulasitechlabs.com

This Privacy Policy should be read alongside the Terms and Conditions applicable to the service you use.