Legal
Privacy Notice
Last updated: 25 October 2026, written to align with India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025.
1. What personal data we collect
When you use our discovery form or data-rights request form, we collect what you type in directly: your name, email address, business scale, and the content of your message, plus your WhatsApp number on the discovery form. We don't collect anything beyond what you actively submit: no background profiling, no data bought from third parties.
2. Why we collect it (purpose)
Strictly to respond to your inquiry, schedule a call, or process a data-rights request. We don't use contact-form data for marketing unless you separately opt in somewhere that says so explicitly. This notice doesn't cover a purpose we haven't asked your consent for.
3. Consent
We process your data on the basis of your explicit, opt-in consent, given via an unticked checkbox at the point of collection. You can withdraw consent at any time: see §6. Withdrawing consent doesn't affect the lawfulness of anything we did with your data before the withdrawal.
4. Third parties
Calendly (call scheduling): only loads after you accept cookies, since it sets its own cookies to run. Google Analytics, same: consent-gated, and only active at all if we've configured it. WhatsApp/Meta: if you click a WhatsApp link, it hands you off to WhatsApp directly; we don't see that conversation. When you submit the discovery form, we send one confirmation message to the WhatsApp number you gave us through Meta's WhatsApp Business Platform, which processes that number to deliver it. Our hosting provider processes data as needed to run the site (infrastructure only, not a marketing or analytics use).
Concretely, this site stores a small piece of browser storage called zenith_cookie_consent to remember your accept/reject choice; you can change that choice anytime from "Cookie Preferences" in the footer. If you log into the admin panel (staff only), a cookie called zenith_admin_session keeps you signed in. Neither is used to track you across other sites.
5. Retention
Discovery-form submissions and consent records are kept for as long as needed to respond to your inquiry and, if you become a client, for the duration of the engagement plus any period required by applicable record-keeping law. Data-rights requests and their resolution are kept as an audit trail even after the underlying data is deleted, since we need to be able to show a request was actually handled.
6. Your rights
Under the DPDP Act, you can:
- • Access: ask what data we hold about you.
- • Correct: ask us to fix inaccurate or incomplete data.
- • Erase: ask us to delete data we no longer need to keep.
- • Withdraw consent: at any time, as easily as you gave it.
- • Nominate: name someone to exercise these rights on your behalf if you become unable to (e.g. due to death or incapacity).
- • Grievance redressal: raise a complaint about how we've handled your data (see §7).
7. Grievance officer
For questions, complaints, or grievances about how your data is handled: hello@zenithdynamics.in. We aim to respond promptly. (Placeholder: replace with a named Grievance Officer and a stated response-time SLA before launch; a role inbox without a named contact is a common gap flagged in DPDP gap-assessments.)
8. Where we're based
Gobra, Dankuni, West Bengal, India