1. Introduction

VCH & CO (“VCH”, “we”, “our”, or “us”) is committed to protecting the privacy and security of personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

This Privacy Policy explains how VCH & CO collects, uses, stores, and protects personal data through its website and related digital platforms.

This website is intended for professional and consultancy-related interactions concerning DPDP implementation, compliance advisory, governance assessments, and related consultancy services.

VCH & CO does not sell personal data and does not share personal data with unrelated external third parties except where required under applicable law.

2. Information We Collect

3. Purpose of Processing

Personal data may be processed for the following purposes:

• Responding to enquiries and consultation requests
• Providing DPDP implementation and advisory services
• Managing professional communication and client relationships
• Improving website functionality and security
• Maintaining compliance and audit records
• Meeting legal and regulatory obligations

4. Data Sharing

VCH & CO maintains a strict non-disclosure approach toward personal data.

We do not sell, rent, trade, or commercially disclose personal data.

Personal data may only be disclosed:

• Where legally required under applicable law
• To authorised government or regulatory authorities
• To internal authorised personnel on a need-to-know basis
• To technology providers supporting website infrastructure under confidentiality obligations

5. Cookies & Website Technologies

The website may use essential and analytics-related cookies to improve user experience, website functionality, and security monitoring.

VCH & CO does not use behavioural advertising or profiling technologies.

Users may manage cookie preferences through browser settings.

6. Data Retention

Personal data is retained only for as long as necessary for the specified purpose of processing or as required under applicable law.

Upon completion of the relevant purpose or valid withdrawal requests, personal data may be securely deleted or anonymised unless legal retention obligations apply.

7. Security Safeguards

VCH & CO implements reasonable technical and organisational safeguards to protect personal data against unauthorised access, misuse, loss, destruction, or alteration.

Security measures may include controlled access, secure hosting infrastructure, encryption where appropriate, and restricted internal access protocols.

8. User Rights

Under applicable law, users may exercise rights relating to:

• Access to personal data
• Correction or updating of personal data
• Withdrawal of consent
• Erasure requests where applicable
• Grievance redressal

Requests may be submitted to:

Email: Vanika@vchco.in

9. Withdrawal of Consent

Where processing is based on consent, users may withdraw consent at any time by contacting:

Email: Vanika@vchco.in

Withdrawal shall not affect processing conducted prior to such withdrawal.

10. Children’s Data

The VCH & CO website and services are not directed toward children under 18 years of age.

VCH & CO does not knowingly collect personal data from children.

11. Grievance Redressal

For grievances, complaints, or privacy-related concerns:

Email: Vanika@vchco.in

Response Timeline: Within 30 days

12. Consent Statement

By using the VCH & CO website, submitting forms, or voluntarily providing personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data for the specified purposes described herein.

Where required, consent shall be obtained through a clear affirmative action and may be withdrawn at any time.