Privacy Statement

Alpheric Consultants Private Limited ("Alpheric", "we", "us", "our") operates alpheric.com. This notice explains what personal data the website collects, why, how long it is kept, and what you can require us to do with it.

Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for this data and you are the Data Principal. In plain terms: we decide why and how it is processed, and the rights set out below are yours to exercise, free of charge and without giving a reason.

This notice covers the website. Work performed for a client under a signed agreement is governed by that agreement, and where the two differ, the agreement governs the engagement and this notice governs the website.

Personal data reaches us at three points on this website and nowhere else. Every field is listed here.

Enquiries. The contact, pilot and new-business forms collect your name, email address, phone number and country dialling code, and your organisation. Depending on the form you may also provide your industry, company size, city, a description of what you want built, your budget stage, a timeline and how you heard about us, and you may attach a document. Only the fields marked required are required.

Job and internship applications. These collect your name, email address, phone number and country dialling code, your country, your preferred area of work, years of experience, a link to your portfolio or LinkedIn profile, an optional note, and your CV as an attachment.

Support requests. These collect your name, email address, a subject and a description of the problem.

In each case we also record the IP address the submission came from. It is used to investigate abuse of the forms and for nothing else.

We do not ask for financial information, government identifiers or any of the categories the Act treats as requiring special care. Please do not send them. If you do, we will delete them.

You give consent by submitting a form, having been shown this notice. Consent is specific to the purpose the form serves: an enquiry is not consent to be marketed to, and an application is not consent to be contacted about services.

You may withdraw consent at any time by writing to hello@alpheric.com. Withdrawal takes effect for the future, not the past — it does not undo processing that was lawful when it happened. Where we no longer have a lawful basis to hold something after you withdraw, we delete it.

Where we rely on a legitimate interest rather than consent, that is stated in section 3 and you may object to it on the same terms.

Enquiries are held to reply to you, to prepare a proposal if you ask for one, and to keep a record of what was discussed. This is necessary to take steps you have requested.

Applications are held to assess you for the role you applied to and, unless you tell us otherwise, to consider you for others that open during the retention period.

Support requests are held to resolve the issue and to see whether the same problem recurs.

We also have a legitimate interest in keeping the website secure and in understanding, in aggregate, how it is used. That interest does not extend to profiling you or to automated decision-making, and we do neither.

The site uses Google Analytics 4. It sets cookies in your browser and reports to Google. We read it in aggregate: pages viewed, referrer, approximate location, device and browser.

We do not use it to identify you, we have not enabled advertising features on the property, and we do not join analytics data to anything you submit through a form.

Declining analytics cookies, or using a browser setting or extension that blocks them, has no effect on how the site works. The cookie policy lists what is set and how to refuse it.

Enquiries that do not lead to an engagement: two years from your last contact with us.

Enquiries that do lead to an engagement: for the duration of the engagement and seven years afterwards, which is the period our tax, accounting and contractual obligations require.

Applications: one year from the hiring decision. Ask us and we will keep you on file for longer, or delete you sooner.

Support requests: two years from resolution.

Analytics: fourteen months, the retention setting on our Google Analytics property.

At the end of a period the record is deleted. An earlier deletion request is honoured unless a law requires us to keep the record, in which case we will tell you which.

We do not sell personal data, we do not trade it, and we do not disclose it for anyone else's marketing.

It is handled by our own staff on a need-to-know basis; by Google, for analytics; by our email provider, so that we can reply to you; and by our hosting and infrastructure providers, who store it on our instructions and have no independent right to use it.

Our systems are hosted in India. Google Analytics processes data outside India under Google's own terms, which we do not control.

We will disclose data where a law, a court or a lawful authority requires it. Where we are permitted to tell you that this has happened, we will.

You have the right to ask us for a summary of the personal data we hold about you and what we do with it; to have inaccurate or incomplete data corrected, and to have it updated or completed; to have your data erased where we no longer need it or where you withdraw consent; to nominate another person to exercise these rights if you die or become incapacitated; and to have a grievance addressed before you take it further.

Write to hello@alpheric.com. We will acknowledge within seven working days and respond substantively within thirty days. There is no charge.

We may ask you to confirm your identity before we act, because acting on an impersonated request would itself be a breach.

If you are unhappy with how we have handled your data or your request, raise it with our Grievance Officer:

Grievance Officer, Alpheric Consultants Private Limited

Magnus Tower, Sector 73, Noida, Uttar Pradesh, India

hello@alpheric.com

+91 8010880109

We will acknowledge within seven working days and resolve within thirty days.

If the outcome does not satisfy you, you may complain to the Data Protection Board of India. You do not have to come to us first, though it is usually quicker.

The website is served over HTTPS only, with HSTS and a content security policy. Submissions are stored in systems we operate rather than a third-party form service. Access is limited to the people who need it for the purposes above.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data we will notify you and the Data Protection Board of India as the Act requires, describing what happened, what data was involved and what we are doing about it.

This website is intended for businesses and for people applying to work with us. We do not knowingly collect the personal data of anyone under eighteen, and we do not direct any part of the site at children.

If you believe a child has submitted personal data to us, write to hello@alpheric.com and we will delete it.

When this notice changes we update the effective date shown above.

Where a change materially affects how we use data you have already given us, we will say so plainly rather than rely on the date, and where the Act requires fresh consent we will ask for it.