Privacy Policy

1. Definitions

1. “Personal Data” shall mean any data or information which, either directly or indirectly, identifies or is capable of identifying a natural person, including but not limited to name, contact details, identification numbers, or any factor specific to the identity of such person.
2. “Usage Data” shall mean data automatically collected in connection with the access or use of the Website or services, including, inter alia, IP addresses, browser types and versions, device identifiers, operating system details, timestamps, navigation paths, and interaction logs.
3. “Data Controller” shall mean Orane Consulting Pvt. Ltd., which independently determines the purposes for which and the means by which Personal Data is processed.
4. “Data Processor” shall mean any third party engaged by Orane for processing Personal Data on its behalf under binding contractual obligations imposing confidentiality and data protection safeguards.

2. Categories of Data Collected

1. Information Provided by You. Orane may collect Personal Data voluntarily provided by you, including but not limited to your name, professional designation, company details, email address, telephone number, postal or billing address, and any information supplied through online forms, requests for proposals, surveys, feedback mechanisms, or correspondence.
2. Information Collected Automatically. Orane may, by virtue of your access to the Website, automatically collect Usage Data through cookies, log files, pixels, and similar technologies, for the purpose of diagnostics, analytics, and enhancement of services.
3. Information Obtained from Third Parties. Orane may also obtain Personal Data from legitimate third-party sources, including but not limited to analytics providers, advertising networks (where applicable), and publicly available databases or directories.

3. Purpose and Legal Basis of Processing

1. Orane shall process Personal Data strictly for purposes that are lawful, specific, and legitimate, including but not limited to: (i) the provision, operation, and administration of services; (ii) the establishment, performance, and enforcement of contractual obligations; (iii) responding to queries, communications, or requests; (iv) dissemination of transactional or policy-related notices; (v) marketing or promotional outreach based on prior consent; (vi) monitoring, evaluation, and continuous improvement of services; and (vii) compliance with applicable legal, regulatory, and security obligations, including fraud detection and prevention.
2. Where applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”), requires a lawful basis for processing, Orane shall rely on one or more of the following: (i) consent voluntarily and expressly provided; (ii) necessity for the performance of a contract or pre-contractual steps at your request; (iii) compliance with legal obligations imposed upon Orane; and (iv) legitimate interests pursued by Orane, provided such interests are not overridden by your fundamental rights and freedoms.

4. Sensitive Personal Data

1. Orane does not intentionally collect or process “sensitive personal data” or “special categories of personal data” as defined under applicable law (including health information, biometric identifiers, or political/religious beliefs), save where such collection is mandated by law, contractually required, or undertaken with the explicit and informed consent of the data subject.

5. Cookies and Tracking Technologies

1. Orane employs cookies and functionally equivalent technologies for session authentication, user preference management, performance analytics, and—where prior consent has been obtained—marketing or retargeting.
2. You may disable or manage cookies via browser settings; however, you acknowledge that certain functionalities of the Website may be impaired as a result.
3. A separate Cookie Policy, which forms part of this Policy by reference, is published and updated by Orane.

6. Disclosure of Data

1. Orane shall not sell, rent, or otherwise commercially exploit your Personal Data.
2. Subject to the foregoing, Personal Data may be disclosed:
   1. to service providers or Data Processors, under written agreements incorporating confidentiality and security obligations.
   2. to governmental, regulatory, or judicial authorities, where disclosure is required by applicable law, regulation, or order of competent jurisdiction.
   3. to affiliates and group companies of Orane, for purposes consistent with this Policy.
   4. in connection with any merger, acquisition, restructuring, or transfer of assets, provided the successor entity is bound by terms no less protective of your Personal Data.
   5. in anonymised or aggregated form incapable of identifying any individual.

7. International Transfers

1. Personal Data may be transferred to and processed in jurisdictions outside your country of residence.
2. Orane shall implement appropriate legal safeguards, including but not limited to Standard Contractual Clauses, binding corporate rules, or equivalent lawful mechanisms, to ensure that any such cross-border transfers are effected in compliance with applicable data protection legislation.

8. Data Retention

1. Personal Data shall be retained only for such duration as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by statutory or regulatory obligations.
2. Upon expiry of the applicable retention period, Orane shall ensure the secure erasure or irreversible anonymisation of such data.

9. Data Subject Rights

1. Subject to applicable law, you shall have the right to request: (i) access to your Personal Data; (ii) rectification of inaccuracies; (iii) erasure of Personal Data (“right to be forgotten”); (iv) restriction of processing; (v) objection to processing, including for direct marketing; and (vi) portability of your Personal Data in a structured, commonly used, and machine-readable format.
2. Where processing is based on consent, you shall have the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.
3. You shall also have the right to lodge a complaint with the relevant supervisory authority (in India, the Data Protection Board of India, under the DPDP Act).
4. All such requests must be submitted to privacy@oraneconsulting.com, and Orane may require reasonable verification of identity prior to acting on any request.

10. Automated Processing

1. Orane does not engage in automated decision-making, including profiling, which produces legal effects concerning you or otherwise significantly affects you.
2. Should such processing be introduced in the future, Orane shall provide explicit notice and obtain consent where required by law.

11. Security Measures

1. Orane implements appropriate technical, organisational, and administrative safeguards designed to ensure the confidentiality, integrity, and availability of Personal Data, including encryption, role-based access controls, vulnerability assessments, and contractual confidentiality undertakings.
2. Notwithstanding the foregoing, you acknowledge that no method of transmission over the internet or electronic storage can be guaranteed to be absolutely secure.

12. Breach Notification

1. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of natural persons, Orane shall, without undue delay and in accordance with applicable law, notify the relevant supervisory authority and, where legally required, the affected data subjects, specifying the nature of the breach, its likely consequences, and remedial measures undertaken.

13. Children’s Privacy

1. The Website and services are not directed to children under the age of thirteen (13), or such higher threshold as may be prescribed under applicable local law.
2. Orane does not knowingly collect Personal Data from such individuals, and if such collection is discovered, it shall be erased without undue delay.

14. Third-Party Links

1. The Website may contain hyperlinks to external websites operated by third parties.
2. Orane disclaims any responsibility or liability for the content, practices, or policies of such external websites, and you are advised to review their respective privacy policies before engagement.

15. Amendments

1. Orane reserves the right to amend, modify, or update this Policy at any time.
2. Any such amendment shall take effect upon publication of the revised Policy on the Website, as indicated by the “Last Updated” date, and material changes may also be communicated by email or on-site notification.

16. Governing Law and Jurisdiction

1. This Policy shall be governed by, and construed in accordance with, the laws of Union of India, without regard to conflict of laws principles.
2. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts of New Delhi, India.

17. Contact Us

For all queries, complaints, or to exercise your rights under this Policy, please contact: