Navarnika Strategies LLP
Privacy Policy
Last updated: 12 December 2025
1. Who we are
This Privacy Policy explains how Navarnika Strategies LLP ("Navarnika", "we", "us") handles personal data collected through navarnika.com and through enquiries made to us. Navarnika Strategies LLP is a limited liability partnership incorporated in India under the Limited Liability Partnership Act, 2008 (LLPIN ACR-8784), with its registered office at 8-2-674/2/B/4/30, Road No. 13, Banjara Hills, Hyderabad 500034, Telangana, India.
For the purposes of India's Digital Personal Data Protection Act, 2023 we are the Data Fiduciary; under the EU and UK General Data Protection Regulations, Singapore's Personal Data Protection Act 2012 and the UAE's Federal Decree-Law No. 45 of 2021 we are the controller (or equivalent) of the personal data described here.
Contact for privacy matters and grievances: a.puljal@navarnika.com, or by post to the registered office above, marked "Privacy". This contact also acts as our Grievance Officer for India and our Data Protection Officer contact for Singapore.
2. What we collect
Information you give us. When you use our enquiry form or write to us, we collect your name, company or organisation, email address, mobile number, and anything you choose to share about your venture, including a document you upload or a link you provide. Please share only what is needed for an initial conversation.
Information collected automatically. When you visit the site, our hosting provider records technical information such as your IP address, browser type, device, pages requested and the time of the request, to deliver the site securely and to protect it from misuse. The site loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
Cookies. We do not use advertising or analytics cookies. Our hosting provider may set cookies that are strictly necessary for the site and its forms to work securely. If we introduce analytics or other non-essential cookies, we will ask for your consent first where the law requires it, and update this policy.
We do not knowingly collect sensitive or special-category data, and we ask you not to include it in an enquiry.
3. Why we use it, and on what basis
| Purpose | Basis |
|---|---|
| To read and respond to your enquiry and to assess a possible engagement or venture | Steps you have asked us to take before entering into a contract, and our legitimate interest in responding to business enquiries (GDPR and UK GDPR Art. 6(1)(b) and (f)); your consent, and a purpose for which you have voluntarily provided the data (DPDP Act ss. 6 and 7(a)); consent and deemed consent (PDPA); consent and contract (UAE PDPL) |
| To keep a record of our correspondence | Legitimate interests; compliance with legal obligations where records must be kept |
| To operate, secure and improve the website | Legitimate interests in running a secure website |
| To comply with law, enforce our terms and protect our rights | Legal obligation and legitimate interests |
We do not sell personal data, use it for automated decision-making that has legal or similarly significant effects, or send marketing without your consent.
4. Who we share it with
We share personal data only with service providers that process it on our behalf and under contract:
- Wix.com Ltd. and its affiliates, which host the website and store form submissions and uploaded files;
- Zoho Corporation and Microsoft Corporation (Microsoft 365 and Outlook), which provide our business email;
- Google LLC, for the delivery of web fonts.
We may also share information with our professional advisers, with a person you have asked us to introduce you to (only with your agreement), or where required by law, court order or a competent authority. If Navarnika is reorganised, data may pass to a successor bound by this policy.
5. International transfers
Our providers store and process data in several countries, which may include India, the United States, the European Economic Area, the United Kingdom and others. Where personal data from the EEA or UK is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum, as offered by our providers. Transfers from India are made in line with section 16 of the DPDP Act and any restrictions notified under it. Transfers from Singapore and the UAE are made only where the recipient is bound to protect the data to a comparable standard.
6. How long we keep it
We keep an enquiry, its attachments and related correspondence for as long as needed to respond and, if no engagement follows, for 24 months from our last contact, after which it is deleted. If an engagement follows, records are kept for the duration of the relationship and for as long as needed to meet legal, tax and accounting obligations. Technical logs are kept by our hosting provider for limited periods in line with its own policies.
7. How we protect it
We use providers with recognised security standards, encrypted connections (HTTPS) for the site and forms, and access restricted to those who need it. No method of transmission or storage is completely secure. If a personal data breach occurs that the law requires us to report, we will notify the relevant authority and affected individuals within the required timelines.
8. Your rights
Depending on where you are, you may have the right to:
- know what personal data we hold about you and obtain a copy;
- have inaccurate or incomplete data corrected, completed or updated;
- have your data erased;
- withdraw consent at any time, as easily as you gave it (this does not affect processing before withdrawal);
- object to or ask us to restrict certain processing;
- receive your data in a portable format;
- nominate another person to exercise your rights in the event of your death or incapacity (India);
- complain to us, and to a regulator.
To exercise any right, write to the privacy contact above. We may need to verify your identity. We will respond within one month (EU, UK and UAE), within 30 days where possible (Singapore), and in any case within the time limits set under the DPDP Rules (India).
Complaints. Please contact us first; we will acknowledge a complaint within 30 days and keep you informed until it is resolved. You may also complain to:
- India: the Data Protection Board of India, once you have used our grievance process;
- EU: the data protection authority in the member state where you live or work;
- UK: the Information Commissioner's Office (ico.org.uk);
- Singapore: the Personal Data Protection Commission (pdpc.gov.sg);
- UAE: the UAE Data Office.
9. Children
This website is intended for business users. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.
10. Links to other sites
Our site may link to social media and other third-party sites. Their privacy practices are their own and we are not responsible for them.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Where a change materially affects how we use personal data already collected, we will tell affected individuals where we can.