1) Scope
This Privacy Policy explains how INGALA EARTH LLP (“Ingala”, “we”, “us”) collects and uses personal information from visitors to our website and from people who contact us. We serve users worldwide.
This policy does not cover client data we process under a separate services agreement; see Our Role.
2) Our Role (Controller vs. Processor)
- Controller (website & inquiries): For information you submit on our site (e.g., contact forms, emails), Ingala acts as the data controller.
- Processor (client projects): When clients provide personal data for project work, we act as a data processor and process such data only on the client’s instructions.
3) Data We Collect
Information you provide
- Contact details (name, email, phone) and the content of your message.
- Any information you include when contacting us.
Information collected automatically
- Server/hosting logs (IP address, timestamps, pages viewed, basic device/browser).
- Essential cookies required to run the site. We do not use advertising cookies.
4) How We Use Data
- Respond to inquiries and communicate with you.
- Operate, secure, and troubleshoot the website (e.g., server logs).
We do not sell personal information and we do not share it for marketing.
5) Legal Bases (GDPR/UK GDPR)
- Legitimate interests (running the site; responding to your requests).
- Consent where required (e.g., any future optional cookies or newsletters).
7) International Transfers
Our primary operations and hosting are in India. If you access the site from outside India (including the EEA/UK/US), your data may be transferred to and processed in India. Where required, we use appropriate safeguards and contractual commitments.
8) Data Retention
- Inquiry emails and related correspondence are kept only as long as needed to respond and manage our relationship, then archived or deleted unless a longer period is required by law or to establish/defend legal claims.
- Server logs are retained for a limited period for security and diagnostics.
9) Security
We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure; please take care with the information you send us.
11) Your Rights — India (DPDP 2023)
Under the Digital Personal Data Protection Act, 2023, Indian users (Data Principals) may have rights to:
- Access your personal data processed by us.
- Correction/Erasure of inaccurate or unnecessary personal data.
- Grievance Redressal with our Grievance Officer and, if unresolved, escalation to the Data Protection Board as per applicable rules.
- Nominate an individual to exercise your rights in case of death or incapacity (where notified).
To exercise your rights, see Contact. We may request information to verify your identity and will respond within timelines required by law.
12) Your Rights — EEA/UK (GDPR)
- Access – get a copy of your personal data we hold.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion (“right to be forgotten”).
- Restriction – ask us to limit certain processing.
- Objection – object to processing based on legitimate interests.
- Portability – receive your data in a portable format.
- Withdraw consent – where processing is based on consent.
- Complain – with your local data protection authority (DPA) if you believe your rights have been infringed.
To exercise these rights, see Contact. We will respond within the timelines required by GDPR/UK GDPR.
13) Children
Our website and services are not intended for children under 16 (or the age defined by applicable law). We do not knowingly collect personal information from children.
14) Changes to This Policy
We may update this policy from time to time. The “Last updated” date shows the most recent revision. Material changes will be posted on this page.
15) Contact
For privacy requests or questions (including DPDP grievances & GDPR requests):
Grievance Officer (India): Privacy Team, INGALA EARTH LLP (reachus@ingala.earth)