01Who we are
Dock Consulting ("Dock", "we", "us", "our") is a consulting firm based in Hyderabad, Telangana, India. We provide strategy, technology and research consulting to businesses, institutions and public-sector clients. For the purposes of the DPDP Act, Dock Consulting is the Data Fiduciary for personal data collected through dockconsulting.in and our related forms and services.
02Data we collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email, phone number, organisation, designation, city | You, via contact forms, Google Forms, email or calls |
| Engagement data | Project briefs, documents, requirements and feedback you share with us | You and your organisation |
| Application data | CV, education, work history and portfolio for internships or roles | Applicants |
| Billing data | Billing name and address, GSTIN, invoice and payment records | Clients |
| Technical data | IP address, browser type, device, pages visited, referring URL | Automatically, through cookies and server logs |
We do not intentionally collect sensitive personal data such as health, biometric or financial account details unless an engagement specifically requires it. If it does, we will ask for your explicit consent first.
03How we use your data
- To respond to enquiries and send proposals you ask for.
- To deliver, manage and invoice consulting engagements.
- To review applications for internships and roles.
- To run surveys, research studies and events you choose to take part in.
- To send updates, insights or newsletters, only where you have opted in. You can unsubscribe at any time.
- To keep our website secure, fix errors and understand how it is used.
- To meet legal, tax, accounting and regulatory obligations.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
04Legal basis and consent
We process personal data on the basis of your consent, which you give when you submit a form, sign an engagement or contact us. We also process data for legitimate uses permitted by Section 7 of the DPDP Act, such as complying with law or performing a contract you have asked us to enter.
You may withdraw consent at any time by writing to us. Withdrawal does not affect processing already carried out, and we may need to stop providing a service that depends on that data.
05Who we share it with
We share personal data only as needed, and only with:
- Service providers acting on our instructions, such as cloud hosting, email, Google Workspace, form tools, payment and accounting services. They are bound by contract to protect your data.
- Partner consultants or experts working on your engagement, under confidentiality obligations.
- Authorities where required by law, court order or a lawful request from a government agency.
- A successor entity in a merger, acquisition or restructuring, subject to this policy.
06Cookies and analytics
Our website uses essential cookies to work properly, and may use analytics cookies to understand traffic in aggregate. You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.
07How long we keep it
We keep personal data only as long as the purpose requires, or as the law requires:
- Enquiries that do not become engagements: up to 24 months.
- Client engagement and billing records: 8 years, in line with Indian tax and accounting law.
- Unsuccessful applications: up to 12 months, unless you ask us to keep them longer.
- Website logs: up to 12 months.
After that, we delete or anonymise the data.
08Security
We use reasonable security practices as required by Rule 8 of the SPDI Rules, including access controls, encrypted connections (HTTPS), two-factor authentication on company accounts and restricted access to client files. No system is completely secure. If a personal data breach occurs, we will notify affected people and the Data Protection Board of India as the DPDP Act requires.
09Your rights
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we hold about you and how we process it.
- Correct, complete or update data that is inaccurate or out of date.
- Erase data that is no longer needed, unless the law requires us to keep it.
- Withdraw consent at any time.
- Nominate another person to exercise your rights if you die or become incapacitated.
- Seek grievance redressal from us, and then from the Data Protection Board of India.
Send requests to the contact below. We will respond within 30 days.
10Children
Our services are meant for adults and organisations. We do not knowingly collect data from anyone under 18 without verifiable consent from a parent or lawful guardian. Where a project involves students or minors, for example in education research, we obtain that consent before collecting any data. If you believe we hold a child's data without consent, contact us and we will delete it.
11Transfers outside India
Some of our service providers store data on servers outside India. We transfer data only to countries not restricted by the Government of India under Section 16 of the DPDP Act, and with safeguards in place.
12Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed. For significant changes, we will notify you by email or a notice on our website.
13Contact and grievances
For questions, requests or complaints about your personal data, contact our Grievance Officer: