indriyosense

Legal

Privacy Policy

Draft: not legal advice, not yet reviewed

This page is drafted structure, not settled wording. It sets out the sections Indriyosense must address and fills in only what is verifiable from how this website actually works. Every block marked below must be completed by the company and reviewed by a qualified lawyer before this page is published. The page carries noindex until that happens.

Last updated: not yet published · Version: draft

1. Who we are

Indriyosense Private Limited (“Indriyosense”, “we”, “us”) operates this website. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described below, and you are the Data Principal.

Legal name
Indriyosense Private Limited
Location
Kolkata, West Bengal, India

Section 5 of the DPDP Act requires the Data Fiduciary to be identifiable. The following are not stated anywhere on this site and must be supplied:

  • Corporate Identity Number (CIN) as issued on incorporation.
  • Registered office address in full, including PIN code.
  • Confirm the exact legal name as it appears on the incorporation certificate; the review flagged that several spellings of the brand were in circulation.

2. What personal data we collect

We collect only what you type into the enquiry form on our contact section, and only when you choose to submit it:

  • Name: so we can address a reply to you.
  • Email address: so we can reply, and so we can send you an automatic confirmation that your enquiry arrived.
  • Organisation: optional; you may leave it blank.
  • Enquiry type: the category you select, so your message reaches the right person.
  • Message: the free text you write.

We do not use advertising trackers, and we do not run third-party analytics on this site. The site stores one item in your browser’s local storage: your choice of light or dark theme. That value never leaves your device and is not personal data.

Confirm before publication, because each answer changes this section:

  • Will analytics ever be added? If so, name the provider, what it collects, and whether it is consent-gated.
  • Does the web host write access logs containing IP addresses? IP addresses are personal data. State the retention period if so.
  • Confirm no other cookies are set by the host or CDN.

3. Why we process it, and on what basis

We process the data above for one purpose: to read and respond to the enquiry you sent us, and to confirm to you that we received it. We do not use it to market unrelated products, we do not sell it, and we do not share it for advertising.

Our basis is your consent, given by ticking the consent box on the form before you submit it. You are not required to contact us, and you may instead email or telephone us using the details in the footer.

4. Who else can see it

To be completed once the form back end is deployed. Name every processor in the chain and what each one can see:

  • The hosting provider for the form endpoint, and the country its servers are in.
  • The email provider that carries the enquiry and the autoresponder. The published contact address is currently a Gmail address, which means Google processes the content of every enquiry, and this must be disclosed, or the company should move to a mailbox on its own domain.
  • Whether any data is transferred outside India, which the DPDP Act permits except to countries the Central Government restricts.
  • Confirm a written processing agreement is in place with each, as section 8(2) requires.

5. How long we keep it

State a definite retention period. The DPDP Act requires erasure once the purpose is served and consent is withdrawn. Decide and record: how long an enquiry stays in the inbox, when it is deleted, and who is responsible for deleting it.

6. Your rights

Under the DPDP Act you have the right to:

  • Access: obtain a summary of the personal data we hold about you and how we have processed it.
  • Correction and completion: have inaccurate or incomplete data corrected, completed or updated.
  • Erasure: have your data deleted where we no longer need it for the purpose you consented to.
  • Grievance redressal: complain to us first, using the contact below, about how we have handled your data or your rights.
  • Nomination: nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

You may withdraw your consent at any time, and doing so must be as easy as giving it was. Withdrawal does not affect processing already carried out lawfully before you withdrew.

Specify the actual mechanism for each right. An email address is acceptable, but it must be named here, and someone must be accountable for acting on requests within the timelines the DPDP Rules set.

7. Grievance Officer

If you are unhappy with how we have handled your personal data, contact our Grievance Officer. We will acknowledge your complaint and respond to it.

The DPDP Act requires a named Grievance Officer whose contact details are published. This is mandatory and there is currently no such person identified anywhere. Supply:

  • Full name of the Grievance Officer.
  • A dedicated email address for grievances.
  • A postal address for written complaints.
  • The response timeline the company commits to.

If we do not resolve your complaint, you may escalate it to the Data Protection Board of India.

8. Children

The DPDP Act requires verifiable parental consent before processing a child’s data and prohibits tracking or targeted advertising directed at children. This site is aimed at clinicians, researchers and investors, not children. Counsel to confirm the appropriate wording, particularly because patients and carers are an invited audience.

9. Changes to this notice

If we change how we handle personal data, we will update this page and change the version and date at the top of it.

10. Contact

Write to us using the email address in the footer of this page. For anything concerning your personal data or this notice, address it to the Grievance Officer named in section 7.