Privacy notice

Who we are

This microsite, privacy.npvglobal.net, is operated by NPV Group for its Privacy & DPDP Services (NPV Group Privacy & DPDP Services, referred to here as “NPV Group”, “we” or “us”). For any question about this notice or how your personal data is handled, write to dpdp.privacy@npvca.in.

What we collect

When you use a diagnostic tool, request a resource or use the contact form, we collect:

• Your email address (mandatory on every form).
• Where you choose to provide them: your name, designation, organisation, mobile number and city.
• Your answers to the diagnostic tool questions, and the indicative result and report generated from them.
• Any message or comments you type into a form.
• Your cookie consent choice and, only if you accept, standard analytics data from Google Analytics and Microsoft Clarity (such as pages viewed and general device and location information).

Why we collect it

We use your details to prepare and send your diagnostic report, to respond to your enquiry or resource request, and, only if you separately tick that box, to send you occasional DPDP updates from NPV Group. We do not use your data for any other marketing without your consent.

Cookies and analytics

Google Analytics and Microsoft Clarity load only after you choose Accept in the cookie banner. If you choose Decline, no analytics scripts load. If you choose Decline after accepting, the analytics cookies already set by this site are deleted. You can change your choice at any time using the Cookie settings link in the footer. Your choice is stored in your browser. Fonts are self-hosted on this site and are not served from a third-party font service.

Where your data is stored and who can access it

Submitted information is stored on NPV Group’s hosting infrastructure with restricted, password-protected admin access limited to authorised NPV Group personnel. Report PDFs are generated in your browser and stored outside the public web folder. Email notifications and copies of your report are sent through NPV Group’s Microsoft 365 mailbox. We do not sell or rent your personal data to any third party.

How long we keep it

We keep enquiries, tool submissions and reports only for as long as they are needed for the purposes described in this notice, or as required by law. After that, they are erased. You can ask us to erase your data earlier by writing to dpdp.privacy@npvca.in.

Your rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access the personal data we hold about you and how it has been processed.
• Ask us to correct or update inaccurate or incomplete personal data.
• Ask us to erase personal data that is no longer needed for the purpose it was collected.
• Withdraw consent at any time, including consent to receive occasional DPDP updates.
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Register a grievance if you are not satisfied with how your request has been handled.

To exercise any of these rights, write to dpdp.privacy@npvca.in with your name and email address, and describe what you would like us to do. We will respond within a reasonable time.

Grievance redressal

If you have a concern about how your personal data has been handled on this microsite, write to dpdp.privacy@npvca.in. We will acknowledge and review your grievance and respond with the outcome.

Changes to this notice

We may update this notice from time to time. The version number and date at the top of this page will change when we do. Material changes will be reflected here before they take effect.