Privacy Policy

Last updated: 20 October 2026

Darisham Consulting & Allied Services (“Darisham”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains what personal data we collect through our website darisham.in (the “Website”), why we collect it, how we use and protect it, and the rights available to you, including under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it.

1. Who we are

Darisham Consulting & Allied Services is a consulting and IT services firm based at TDI City, Sector 117, Mohali, Punjab, India. For personal data collected through this Website, we act as the “Data Fiduciary” within the meaning of the DPDP Act.

This policy covers personal data collected through the Website and through enquiries you send us by email or phone. Personal data we process while delivering services to our clients is governed by the agreements we have with those clients.

2. Personal data we collect

Information you give us

• Contact form: your name, email address, phone number, subject and message when you submit the form on our Contact page.
• Emails and calls: any information you include when you write to us or call us, such as your organisation, designation and details of your requirement.
• Job applications: your resume and the information in it (such as education, work history and contact details) when you apply through our Careers page or by email.

Information collected automatically

• Technical data: when you visit the Website, our hosting provider’s servers automatically record standard log information such as your IP address, browser type, device information, pages visited, and the date and time of your visit. This is used for security, troubleshooting and keeping the Website running.

The DPDP readiness self-assessment on our DPDP Compliance page runs entirely in your browser. Your answers are not sent to us or stored by us.

We do not use analytics, advertising or tracking cookies on this Website, and we do not knowingly collect sensitive information such as financial details, health data or government identifiers through it. Please do not send such information through the contact form.

3. How we use your data

• To respond to your enquiries and requests for consultations, proposals or information.
• To communicate with you about our services where you have asked us to.
• To assess job applications and contact candidates.
• To operate, maintain and secure the Website, and to detect and prevent misuse.
• To comply with applicable laws, regulations and lawful requests from authorities.

We do not sell your personal data, and we do not use it for any purpose that is not compatible with the purposes listed above.

4. Basis for processing

We process personal data you submit to us on the basis of your consent, which you give when you voluntarily submit the contact form, send us an email or share your resume. You may withdraw your consent at any time by writing to us at the address in Section 13; withdrawal will not affect processing already carried out before it. We may also process personal data for legitimate uses permitted under the DPDP Act, such as complying with a legal obligation.

5. Sharing of data

We share personal data only where necessary, and only with:

• Service providers who help us run our business, such as our website hosting and email providers, who process data on our behalf and under our instructions.
• Government or regulatory authorities, courts or law-enforcement agencies, where required by law or to protect our legal rights.

Some of our service providers may store or process data on servers located outside India. Where this happens, we do so in accordance with the DPDP Act and any restrictions notified by the Government of India.

6. Cookies and third-party services

Our own Website does not set analytics or advertising cookies. However, the Website uses a few third-party services that may receive basic technical information (such as your IP address) when a page loads:

• Google Fonts, used to display the fonts on our pages.
• Google Maps, embedded on our Contact page to show our location. Google may set its own cookies when the map loads.
• LinkedIn, if you follow the link to our LinkedIn page.

These services are governed by their own privacy policies. You can block or delete cookies through your browser settings.

7. Data retention

We keep personal data only for as long as needed for the purpose for which it was collected, or as required by law. Enquiry details are generally retained for as long as needed to respond to and follow up on your enquiry; job applications are retained for a reasonable period in case a suitable role opens up, unless you ask us to delete them sooner. After that, we delete the data or make it anonymous.

8. Data security

As a cybersecurity firm, we take data protection seriously. We use reasonable technical and organisational safeguards, including encrypted (HTTPS) connections, access controls and secure handling practices, to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure, but if a personal data breach occurs, we will take prompt action and notify affected individuals and the Data Protection Board of India as required by law.

9. Your rights

Subject to applicable law, you have the right to:

• Access information about the personal data we hold about you and how we process it.
• Correction and erasure — ask us to correct, complete or update inaccurate data, or to erase data we no longer need.
• Withdraw consent at any time, as easily as you gave it.
• Grievance redressal — raise a complaint with our Grievance Officer about how we handle your data.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us using the details in Section 13. We may need to verify your identity before acting on your request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Children’s data

This Website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has shared personal data with us, please contact us and we will delete it.

11. Links to other websites

The Website may contain links to third-party websites, such as news articles and social media. We are not responsible for the content or privacy practices of those websites, and we encourage you to read their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your attention.

13. Contact & Grievance Officer

For questions about this policy, to exercise your rights, or to raise a grievance, please contact:

We will acknowledge your request promptly and respond within the time prescribed under applicable law.