Privacy Policy

Last Updated: November 8, 2025

Introduction

Mundhra Consulting (“Mundhra Consulting”, “we”, “us”, or “our”) is committed to protecting your privacy and the confidentiality of your personal information. This Privacy Statement describe what personal information we collect, how we collect it, the purposes for which we use it, with whom we may share it, and how we protect it.

In this Privacy Statement, “Personal Information” refers to any information that identifies, relates to, describes, or can reasonably be linked, directly or indirectly, to an identifiable individual. “Processing” refers to the collection, storage, use, disclosure, or any other operation performed on such Personal Information.

Mundhra Consulting may collect Personal Information directly from individuals or indirectly through third parties in the course of providing professional, consulting, and advisory services. We may use such information for the purposes described in this statement or as otherwise communicated at the time of collection.

The use of this website and all associated terms, including this Privacy Statement, shall be governed by the laws of India

What Personal Information we collect

We may collect personal information from our clients, customers, employees, contractors, vendors, business associates, and other individuals in the course of our business operations. Such information is collected only when necessary for legitimate business purposes, to enable us to provide professional services, manage relationships, and comply with applicable legal and regulatory obligations.

Typically, the personal information we collect includes details such as names, addresses, telephone numbers, email addresses, and organizational roles or job titles. In the course of providing professional or advisory services, we may also collect more detailed personal or professional information, as required for the nature of the engagement.

Through our website, we collect personally identifiable information (PII) or personal sensitive information (PSI) only when it is specifically and voluntarily provided by visitors. This may include information such as your name, title, company name, postal address, email address, and telephone number. It is our policy to limit the collection of personal information to the minimum required to fulfill the purpose for which it is provided. Visitors may also send emails or submit forms through the website, and any information contained in those communications will be used solely to respond to the inquiry or request.

We may collect (or receive) your personal information through one or more of the following means:

• Directly from you: For example, through interactions on our website, during meetings, events, or while corresponding with us.
• From third parties: Such as clients, service providers, or publicly available sources.
• Automatically through digital interaction: When you visit our website or access our digital platforms, we may collect limited technical information such as IP address, device type, browser type, access time, and browsing behavior using cookies and other tracking technologies.

In certain cases, we may process sensitive personal information (such as health or demographic data) only when required for specific business or legal purposes, or with your explicit consent.

Children’s Privacy

Our services and website are not intended for or directed at individuals under the age of 18 (“Minors”). We do not knowingly collect Personal Information from Minors. If we become aware that we have inadvertently collected Personal Information from a Minor, we will take steps to delete such information from our records as soon as practicable.

Use of personal information

We use personal information only for legitimate business purposes and in accordance with applicable laws. The key purposes include:

• Providing professional, consulting, and advisory services;
• Responding to individual inquiries or requests;
• Managing client, supplier, and partner relationships;
• Sharing service updates, newsletters, and event information;
• Performing administrative, operational, and reporting functions;
• Recruiting and managing employees, consultants, and contractors; and
• Complying with legal, regulatory, and contractual obligations.

Information collected through our website or other platforms is used only for the stated purpose or those listed above. We may also use personal data to improve our services, maintain system security, prevent fraud, and fulfill compliance requirements.

For visitors to our offices or website, limited information may be collected for access management, analytics, or enhancing user experience.

Job applicant and employee data are processed strictly for recruitment and employment purposes in line with internal policies.
Information about clients, vendors, and partners is used for engagement management, communication, and contractual administration.

Where required by law, we will obtain your consent before sending marketing or promotional communications, and you may opt out at any time.

Disclosure of information to third Parties

We do not routinely disclose or transfer personal information to other organizations unless:

• We have the prior consent of the individual or the entity that provided the information;
• Such disclosure is permitted under this Privacy Statement;
• Disclosure is required by law, regulation, court order, or request from law enforcement or other competent authorities;
• It is necessary to provide the requested services or fulfill contractual obligations; or
• It is required to investigate or prevent unlawful activities, suspected fraud, or potential security threats.

Except as stated above or permitted by law, we do not sell, share, or rent personal information to any third party. If you wish to update, correct, or restrict the use of your personal information, you may contact us using the details provided in this statement.

We may engage third-party service providers, contractors, or professional advisors to support our operations and service delivery (for example, IT support, data hosting, payroll, or marketing assistance). These parties may have limited access to personal information and are required to maintain strict confidentiality, implement appropriate data security measures, and use such information only for authorized purposes in accordance with our instructions.

Information Retention

We retain personal information only for as long as necessary to fulfill the purpose for which it was collected or to meet legal, regulatory, and contractual obligations. We will hold your personal information for the longest of the following periods:

1. As long as it is required to carry out the relevant activity or provide the requested services;
2. Any retention period mandated by applicable law, regulation, or professional standards; or
3. The period during which any legal proceedings, investigations, or audits may arise in connection with the services provided, and for a reasonable time thereafter.

Where we process personal information as a data fiduciary, we will erase such data upon withdrawal of consent or once it is reasonable to assume that the specified purpose has been fulfilled – unless retention is required for compliance with applicable laws or ongoing legitimate business needs.

Individuals also have the right to request the deletion or correction of their personal information, subject to legal and regulatory requirements.

All personal information that is no longer required will be securely deleted, anonymized, or archived in accordance with our internal data retention and disposal policies.

Individuals’ rights and how to exercise them

You may have certain rights regarding your personal information under applicable data protection laws. These include the right to:

• Obtain confirmation of whether we are processing your personal information and request a copy of the Personal information we hold about you;
• Request correction, completion, or updating of any inaccurate or incomplete personal information;
• Request deletion of your personal information or restriction on its processing, subject to applicable legal and regulatory requirements;
• Withdraw consent for processing of your personal information, where processing is based on consent;
• Receive a copy of your personal information that you have provided to us, in a structured and commonly used format;
• Nominate another individual to exercise your rights in the event of your death or incapacity, in accordance with applicable law; and
• Raise any concerns or complaints regarding our handling of your personal information through the contact details provided in the Contact Us section below.

Please note that withdrawal of consent or objection to processing may affect our ability to provide certain services or respond to specific requests. Your requests will be addressed in accordance with applicable law and our legal, contractual, or regulatory obligations.

Information Security

We has implemented industry-accepted standards of technology and operational security to protect personal information from unauthorized access, loss, misuse, alteration, or destruction. Access to personal information is restricted to authorized personnel only, and such individuals are required to maintain the confidentiality and integrity of the information they handle.

While we strive to protect the personal information transmitted to or received by us, please note that transmission of data over the internet (including by email) is not completely secure. Accordingly, although we endeavor to protect your personal information through robust security measures, we cannot guarantee absolute security of data transmitted to us or by us electronically.

Third-Party Links

Our website may contain links to third-party websites or resources for your convenience and information. Please note that this Privacy Statement applies only to personal information collected by Mundhra Consulting through our own website and business interactions. We are not responsible for the privacy practices, content, or security of any third-party websites that you may access through links on our website. We encourage you to review the privacy policies of any such external sites before providing your personal information.

Limitation of Liability

To the maximum extent permitted by applicable law, Mundhra Consulting shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses, resulting from (a) your access to or use of, or inability to access or use, the website; or (b) any unauthorized access, use, or alteration of your personal information, even if Mundhra Consulting has been advised of the possibility of such damages.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Statement at any time. We will post any changes on this page and update the “Last Updated” date at the top of this policy. We encourage you to review this Privacy Statement periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Statement or our data processing practices, or if you wish to exercise your rights, please contact us.