Policies

Applicable laws and compliance posture

Bajoria Consultancy operates this Site from India. We follow the Indian laws that apply to this Site and to personal data we collect here. We also align our processes early with duties that are already notified but not yet fully enforceable, so we stay on the safe side.

• Information Technology Act, 2000 (as amended), including unauthorised access, computer-related offences, and intermediary / service-provider duties where they apply. Section 43A (compensation for failure to protect sensitive personal data) remains in force until it is omitted under the DPDP Act, which is scheduled for 13 May 2027.
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”) — notice, consent, purpose limitation, access, grievance redress within one month, and reasonable security for sensitive personal data or information. These Rules remain in force until the same 13 May 2027 omission date.
• Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”, notified 13 November 2025 as G.S.R. 846(E)). The Board machinery is already in force. Registration of Consent Managers under Rule 4 is scheduled from 13 November 2026. The main operational duties — standalone notice, consent, security safeguards, breach intimation, retention, children’s data, Data Principal rights, Significant Data Fiduciary duties, and cross-border transfer rules — are scheduled from 13 May 2027. We already run this Site to those standards so we are ready when they bind.
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended (including October 2025 and the 10 February 2026 amendment on synthetically generated information, in force from 20 February 2026) — only to the limited extent any hosting or transmission on this Site attracts those duties. This Site is not a social media platform and is not a significant social media intermediary.
• Consumer Protection Act, 2019 and other mandatory Indian law (contract, tax, criminal procedure) that may apply to a specific engagement.

This Policy is not legal advice and does not create rights beyond those provided by law or by a separate written contract. Where a formal engagement has its own agreement, that agreement controls for that engagement if there is a conflict with these website Terms.

Our role under data law

For personal data collected through this Site (enquiry forms, join applications, blog subscription, email, phone, or WhatsApp initiated from Site contact details), Bajoria Consultancy is the organisation that decides why and how that data is processed — in DPDP terms, a Data Fiduciary (and under the SPDI Rules, the body corporate collecting the data). You, as an individual whose data we process, are a Data Principal (or “provider of information” under SPDI language).

We are not a Significant Data Fiduciary. We do not sell personal data. We do not use Site form data for targeted advertising. We are not a registered Consent Manager under DPDP Rule 4. When the law allows a Data Principal to act through a registered Consent Manager, you may use that route if you choose; we are not required to operate one.

We process personal data only for stated purposes and only for as long as needed for those purposes or as required by law.

Agreement to terms

By accessing or using bajoriaconsultancy.com (“Site”), you agree to be bound by these policies below (“Terms”). If you do not agree, you must not use the Site. The Site is operated by Bajoria Consultancy (“Company”, “we”, “us”, or “our”).

Access and user responsibilities

Anyone may browse this Site. Forms on this Site (enquiry, join, and blog subscription) are intended for persons aged 18 years or older. If you are under 18, do not submit personal data through the forms. You agree that all information you provide to us through the Site is accurate, complete, and kept up to date. Where a formal engagement or contract is needed, that will follow separate written terms as applicable under law.

Services and informational nature

The Site provides information about business consultancy and related services offered by Bajoria Consultancy. Content on the Site is for general informational purposes and does not provide professional, legal, financial, or tax advice. You should contact us before acting on any information.

No client–consultant relationship

Use of the Site or submission of an enquiry form does not by itself create a client–consultant relationship between you and Bajoria Consultancy. A formal engagement will only arise upon execution of a written agreement or explicit written confirmation from us.

Acceptable use

You agree not to:

• Use the Site for any unlawful, fraudulent, or harmful purpose
• Interfere with or disrupt the integrity or performance of the Site, including by introducing viruses, malware, or other harmful code
• Attempt to gain unauthorised access to any systems, networks, or data connected to the Site
• Use any automated means (such as bots or scrapers) to access or collect data from the Site without permission
• Infringe or violate any third-party rights, including intellectual property, privacy, or confidentiality rights

Accounts and security

If the Site allows you to create an account, you are responsible for maintaining the confidentiality of your login credentials and for all activities occurring under your account. You must notify us promptly of any unauthorised use or security breach. We reserve the right to disable or terminate accounts that violate these Terms.

Intellectual property

All content on the Site, including text, graphics, logos, icons, images, audio, video, software, and design, is owned by Bajoria Consultancy or its licensors and is protected by applicable copyright, trademark, and other intellectual property laws. You may view, download, and print content solely for your personal, non-commercial use, provided you do not remove any proprietary notices. You must not reproduce, distribute, modify, create derivative works of, publicly display, or exploit any part of the Site without our prior written consent.

User content

If you submit or upload any content to the Site (such as form text, a CV, feedback, or other materials), you grant us a non-exclusive, worldwide, royalty-free, sublicensable licence to use, reproduce, modify, adapt, publish, translate, and display such content for the purpose of operating, improving, and promoting the Site and our services. You represent that you have all necessary rights to submit such content and that it does not violate any law or third-party rights.

This Site does not offer a tool for visitors to create synthetically generated information (realistic AI-generated audio, images, or video). We do not host a public comment board or social feed. If we are required to act as an intermediary for user-submitted material, we will act on a court order or a reasoned written intimation from an authorised officer as the Intermediary Guidelines require, and we will not knowingly keep unlawful content on the Site.

Third-party links and resources

The Site may contain links to third-party websites or resources that are not owned or controlled by Bajoria Consultancy. These links are provided for convenience only, and we do not endorse or assume responsibility for any third-party content, products, or services. Accessing third-party sites is at your own risk and subject to their terms and policies.

Privacy notice

We process personal data under the Information Technology Act, 2000, the SPDI Rules, 2011, the DPDP Act, 2023, and the DPDP Rules, 2025 (as each applies on the date of processing). The next section is a standalone notice for Site forms. The rest of this Privacy group explains cookies, security, retention, sharing, and rights in more detail.

Our privacy and grievance contact is contact@bajoriaconsultancy.com.

Notice for personal data collected on this Site

This notice is meant to be read on its own. It applies when you submit a form on bajoriaconsultancy.com (enquiry, join application, or blog subscription). The same summary appears next to those forms.

Who we are. Bajoria Consultancy is the Data Fiduciary for this processing. Website: https://bajoriaconsultancy.com. Email: contact@bajoriaconsultancy.com. Phone: +91 94312 58083. Presence: Bihar and West Bengal, India. Services are delivered worldwide.

Personal data we process from Site forms (itemised):

• Enquiry form: first name, last name, phone, email, what you are looking for, budget currency and amount, company name, subject, message, and that you accepted this Policy
• Join form: the identity, contact, skills, interest, and application fields you complete, any CV file or CV link you provide, and that you accepted this Policy
• Blog subscription: email address, and that you accepted this Policy
• Security of the submission: time of submission and basic connection data needed to accept the form safely and to prevent spam or abuse

Specified purposes and the service or use enabled:

• Enquiry data — to understand your request and reply about our consultancy services
• Join data — to review your application and communicate about possible work with us
• Subscription data — to send a note when we publish on the blog
• Security logs — to operate the Site safely

Consent. Ticking the policy box and submitting the form is your free, specific, informed, unconditional, and unambiguous consent for these purposes. You may refuse by not submitting.

Withdraw consent. Email contact@bajoriaconsultancy.com from the same email (or with the same phone) you used. Sending that email is comparable in ease to ticking the box. Withdrawal does not undo processing already completed lawfully, and we may keep data where Indian law still requires it.

Your rights. You may request access to a summary of your personal data and processing, correction of inaccurate data, erasure where the data is no longer needed or where you withdraw consent and no other lawful ground applies, nomination of a person to exercise rights on your behalf in the event of death or incapacity (as the DPDP Act provides), and a grievance with us. Email contact@bajoriaconsultancy.com.

Complaint to the Board. You may complain to the Data Protection Board of India about our handling of your personal data, using the process the Board publishes.

What personal data we collect

Depending on how you use the Site, we may collect:

• Identity and contact details (name, email, phone, company name)
• Enquiry or application content (messages, skills, interest areas, portfolio or CV links)
• Files you choose to upload (such as a CV)
• Technical and security data needed to run the Site (such as browser type, device type, and IP-related logs for abuse prevention)
• Preference storage on your device (theme and language), as described under Cookies

Under the SPDI Rules, sensitive personal data or information can include passwords, financial information, health conditions, sexual orientation, medical records, biometric information, and certain other categories when collected. We do not intentionally collect sensitive personal data through this Site unless you choose to share it in free-text fields or we expressly request it for a formal engagement under separate notice. Please avoid sending passwords, Aadhaar or other government ID numbers, full bank details, or health data through website forms unless we specifically request them through a secure channel.

Purpose, notice, and consent

We process personal data only for the purposes in the standalone notice above and for:

• Responding to enquiries and providing information about our services
• Reviewing join applications and related recruitment communication
• Sending blog notes where you subscribed
• Operating, securing, and improving the Site (including fraud and abuse prevention)
• Meeting legal, regulatory, or contractual obligations

Under the SPDI Rules and the DPDP Act (including Rule 3 of the DPDP Rules, 2025, as it applies):

• We give an itemised notice of the data and purpose at the form, and this page explains the same in full
• Where consent is the lawful ground, we seek free, specific, informed, unconditional, and unambiguous consent by a clear affirmative act (ticking the box and submitting)
• We do not use personal data for a purpose that is incompatible with what you were told, without a fresh lawful ground
• You may withdraw consent for future processing by emailing us; withdrawal is as easy as giving consent

We may also process data where Indian law permits or requires it without fresh consent (for example, a court order, or employment-related records after you become an engaged team member under separate terms).

Children’s data

Our services are directed at organisations and adult professionals. Under the DPDP Act, a child is a person under 18 years of age. We do not knowingly process personal data of children through this Site, we do not track children, and we do not direct the Site at children. Because we do not process children’s data, we do not rely on verifiable parental consent for this Site. If you believe a child has submitted personal data to us, contact contact@bajoriaconsultancy.com and we will delete it where the law allows.

Your rights as a Data Principal

Subject to applicable law (the DPDP Act and DPDP Rules as they apply, and the SPDI Rules while they remain in force), you may request to:

• Access a summary of personal data we hold about you and the processing activities, where the law allows
• Correct incomplete or inaccurate personal data
• Erase personal data that is no longer necessary for the stated purpose, or where you withdraw consent and no other lawful ground applies
• Withdraw consent where processing is based on consent, with ease comparable to giving it
• Nominate a person to exercise rights on your behalf in the event of death or incapacity, as the DPDP Act provides
• Raise a grievance with us (see Grievance section) and, if you are not satisfied, complain to the Data Protection Board of India

To exercise these rights, email contact@bajoriaconsultancy.com with enough detail for us to verify your identity and respond. We will acknowledge promptly and aim to complete a verifiable request within one month, or any shorter period the law requires. We may refuse or limit a request only where the law allows (for example, a legal hold, overlapping rights of others, or inability to verify the requester).

Security safeguards and personal data breach

We use reasonable security practices and procedures appropriate to the nature of the data and our size of operations, consistent with the IT Act, the SPDI Rules, and DPDP security duties (including DPDP Rule 6 as it applies). Measures include access controls, careful handling of form submissions, encrypted transport (HTTPS), security-minded hosting, and internal need-to-know practices. We retain security and access logs as required by applicable Indian directions, including CERT-In directions where they apply to us.

No method of transmission over the internet is fully secure; you share information at your own residual risk.

If we become aware of a personal data breach, we will investigate and contain it. Once DPDP Rule 7 applies (scheduled from 13 May 2027), we will intimate each affected Data Principal and the Data Protection Board of India without delay, and we will give the Board the prescribed detailed information within seventy-two hours of becoming aware (or a longer period the Board allows on a written request). Until then, we will still notify affected people and any authority the law requires, including under the SPDI Rules and IT Act section 43A where they apply.

Sharing with service providers and disclosures

We do not sell personal information. We may share data with trusted service providers who help us run the Site or communicate with you (website hosting, form storage, and business email). Those parties act only as needed for those services, on our instructions, and as Data Processors under the DPDP framework. We currently use Cloudflare for hosting and form delivery, and a business email host for mailbox delivery.

We may also disclose information if required by Indian law, court order, government direction, or to protect rights, safety, or security of persons or systems.

Storage and cross-border transfers

Your information may be processed on systems located in India or in other countries where our service providers operate. Under the DPDP Act, transfer of personal data outside India is permitted except to a country or territory restricted by the Central Government. We will not transfer personal data to any country or territory that is prohibited by law or government notification. Where data is processed outside India, we take contractual and practical steps consistent with applicable Indian law for the purposes described in this Policy.

Cookies and similar technologies

The Site uses only what is needed to operate, stay secure, and remember your preferences. At the date of this Policy, third-party analytics and advertising tags are off. If we add them, we will update this Policy and, where the law requires, ask for consent.

• Essential storage: needed for basic function, security, and remembering theme or language on your device. If you choose a language other than English, a translation service may load to show the page in that language.
• Analytics / advertising: not in use on this Site at the date of this Policy.

You can control or delete cookies through your browser settings. Disabling certain storage may affect how some parts of the Site work (for example, theme choice).

How long we keep personal data

We keep personal data only as long as needed for the purposes described above (for example, responding to an enquiry, reviewing an application, or sending blog notes you asked for), or as required by law, dispute resolution, tax, or business record-keeping — including security logs for the period Indian directions require. This follows purpose-limitation and storage-limitation under the DPDP Act and good practice under the SPDI Rules. When data is no longer needed, we delete or anonymise it using reasonable methods.

No guarantees and disclaimers

The Site and its content are provided on an “as is” and “as available” basis, without warranties of any kind, whether express or implied. To the fullest extent permitted by law, we disclaim all warranties, including any implied warranties of accuracy, fitness for a particular purpose, merchantability, and non-infringement. We do not guarantee that the Site will be uninterrupted, secure, error-free, or free from viruses or other harmful components.

Limitation of liability

To the maximum extent permitted by applicable law, Bajoria Consultancy and its owners, partners, employees, and agents will not be liable for any indirect, incidental, consequential, special, or punitive damages, or for any loss of profits, revenues, data, or goodwill arising out of or in connection with your use of, or inability to use, the Site.

Indemnity

You agree to indemnify, defend, and hold harmless Bajoria Consultancy and its owners, partners, employees, and agents from and against any claims, demands, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with:

• Your use of the Site
• Your violation of these Terms
• Your violation of any law or third-party rights

Changes to the Site and to these Terms

We may update, modify, or discontinue any part of the Site at any time without notice. We may also revise these Terms periodically. The date at the end of this page is the current version. Continued use of the Site after changes are posted constitutes your acceptance of the revised Terms, except where a material change to personal-data processing requires a fresh notice or consent under Indian law.

Suspension and termination

We may suspend or terminate your access to the Site, in whole or in part, at any time and for any reason, including if we reasonably believe that you have violated these Terms or applicable law. Upon termination, any rights granted to you under these Terms will immediately cease, but provisions that by their nature should survive (such as intellectual property, limitation of liability, and dispute resolution) will continue to apply.

Governing law and jurisdiction

These Terms are governed by and construed in accordance with the laws of India, without regard to its conflict of law principles. You agree that the courts located in Bhagalpur, India, will have exclusive jurisdiction over any disputes arising out of or relating to the Site or these Terms, subject to any mandatory laws that may apply.

Dispute resolution

Before initiating court proceedings, you agree to first attempt to resolve any dispute informally by contacting us and allowing at least 30 days for discussion and resolution. If the dispute cannot be resolved amicably, it shall be submitted to the exclusive jurisdiction of the competent courts as set out above.

Severability

If any provision of these Terms is found to be invalid or unenforceable, that provision will be enforced to the maximum extent permitted by law, and the remaining provisions will continue in full force and effect.

Entire agreement

These Terms, together with any separate written agreements signed with you, constitute the entire agreement between you and Bajoria Consultancy regarding your use of the Site and supersede any prior agreements or understandings relating to the Site.

Grievance officer / data contact

If you have questions, concerns, or a grievance about these policies or your personal data (including under the SPDI Rules, the DPDP Act, and the DPDP Rules), please write to:

• Organisation / Grievance contact: Bajoria Consultancy
• Email: contact@bajoriaconsultancy.com
• Phone: +91 94312 58083
• Presence: Bihar and West Bengal, India. Services are delivered worldwide.

Please include your name, preferred contact details, and a clear description of the issue. We will acknowledge promptly and aim to redress a complete grievance within one month of receipt (the SPDI Rules timeline, which we also use as our working standard under the DPDP Act). If you are not satisfied after our response, you may pursue remedies available under Indian law, including a complaint to the Data Protection Board of India and, where they apply, consumer forums under the Consumer Protection Act, 2019.

Last updated

These policies were last updated on 8 November 2026 for the Bajoria Consultancy website, to reflect the DPDP Rules, 2025, the still-in-force SPDI Rules, and the Intermediary Guidelines as amended. We may revise them from time to time to reflect law, guidance, or operational changes. The version published on this page is the current one. Continued use of the Site after changes are posted means you accept the updated Terms, except where the law requires a different form of notice or consent for a material change to data processing.