Privacy Policy

Last updated: 17 October 2026

This policy explains what personal data Clariva GRC Consulting (the "Practice", "we", "us") collects through this website, why we collect it, and what rights you have. It is written to meet the Digital Personal Data Protection (DPDP) Act, 2023 and its rules.

1. Who we are

Clariva GRC Consulting is an independent governance, risk and compliance practice operated by M Mehrotra, based in Navi Mumbai, India. For the purposes of the DPDP Act, the Practice is the Data Fiduciary for personal data collected through this website.

Contact for privacy matters: contact@itecproserv.com

Grievance Officer: Parth Mehrotra, Data Protection Officer, reachable at the same address.

2. Personal data we collect

We collect only what you choose to send us through the enquiry form:

• Your name and work email address
• Your company or organisation name, if provided
• The area of interest you select
• Any message you write about your requirement

We do not use cookies for tracking, advertising or analytics. We do not knowingly collect personal data from children under 18.

Our web host may keep standard server logs (such as IP address, browser type and access time) for security and fault diagnosis. These logs are managed by the host and are not used by us to identify you.

3. Why we use your data and the legal basis

We use the details you submit only to respond to your enquiry, prepare a scope and effort estimate, and, where you agree, arrange a discovery call. We rely on your consent, given when you tick the consent box and submit the form. You may withdraw consent at any time, as described in section 8, without affecting the lawfulness of earlier processing.

If you become a client, we will process further personal data under a separate engagement agreement, which sets out its own terms.

4. Who we share data with

We do not sell personal data and we do not share it for marketing by third parties. Your enquiry is handled through the following service providers, who process data only on our instructions:

• Formspree, which receives and forwards form submissions to our inbox.
• Email service and hosting providers, which store the enquiry and host this website.
• Google Fonts, which serves the typefaces used on this site. Your browser connects to Google when the page loads.

We may disclose data where required by law or a lawful order from a competent authority.

5. Where data is stored

Enquiries are stored in our email account and in the systems of the service providers listed above. Some providers may process data outside India. Where this happens, we choose providers that offer appropriate safeguards and we remain responsible for the data.

6. How long we keep data

Enquiries that do not lead to an engagement are deleted within 12 months of the last contact. Enquiries that lead to an engagement are kept for the duration of the engagement and for the period required by our professional and tax obligations.

7. How we protect data

The website is served over HTTPS. Access to enquiries is limited to the practice owner. We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, so please avoid sending sensitive personal information, such as government identity numbers, financial account details or health records, through the form.

8. Your rights

Under the DPDP Act you have the right to:

• Ask what personal data we hold about you and how it is processed
• Ask us to correct or update inaccurate or incomplete data
• Ask us to erase data that is no longer needed or for which you have withdrawn consent
• Withdraw your consent at any time
• Raise a grievance with our Grievance Officer, and if unresolved, escalate to the Data Protection Board of India
• Nominate another person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, email contact@itecproserv.com with the subject line "Privacy request". We will respond within the timelines set by the DPDP Act and its rules. We may ask you to verify your identity before acting on a request.

9. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be notified on this website before they take effect.

10. Contact us

If you have questions about this policy, contact contact@itecproserv.com, or write to us at Navi Mumbai, Maharashtra, India.