How we use the details you give us
We'd rather show than tell, so this notice follows the structure the DPDP Rules ask for: what we collect, why, for how long, and how you can change your mind.
Mirav Labs, New Delhi 110088 · Last updated 13 November 2026
What we collect, and why
| Personal data | Purpose | Kept for |
|---|---|---|
| Name, company, work email, mobile number | To contact you about the enquiry you submitted and to send a proposal | 12 months after our last conversation, unless you become a client |
| Role, organisation size, service of interest, your message | To prepare for the scoping call | Same as above |
| Where you first arrived from (the referring site or campaign tag, your first page on this site and the date of that visit), stored in your browser's local storage; plus the page you sent the form from and the page that linked to it | To know which pages and channels bring enquiries. Sent to us only with the form | In your browser until you clear it; with us, same as your enquiry details |
| Readiness check overall score (only if you submit the form) | To focus the scoping call on your gaps | Same as above |
| Server logs (IP address, pages requested, browser) | Security, abuse prevention and troubleshooting | One year, in line with the DPDP Rules, unless we need them longer to investigate an incident |
We do not use analytics or advertising trackers on this site, and the site sets no cookies. Your individual readiness-check answers stay in your browser; only the overall score is sent, and only if you submit the contact form. Your browser also remembers which guide view you prefer; that is never sent to us.
Your consent and how to withdraw it
We process your enquiry details on the basis of the consent you give when you tick the box on the form. You can withdraw it at any time by emailing support@d2c.in or sending a WhatsApp message to +91 96502 10909. We will stop contacting you and erase your details, except anything we are legally required to keep.
The record of where you first arrived from stays in your own browser and reaches us only if you submit the form, under the same consent. Server logs are kept to keep this site secure and to meet the log-retention expectations of the DPDP Rules; they are not used for marketing or to build a profile of you.
Who else sees it
The form sends your details to servers we operate. Our primary hosting is in Germany, with a standby copy in Mumbai, India. Storing data outside India is permitted by the DPDP Act unless the government restricts a country. Our team receives a notification of each new enquiry through Telegram, which processes that message under its own terms. This site loads its fonts from Google Fonts, so your browser connects to Google, which receives your IP address and browser details under Google's own privacy policy. If you message us on WhatsApp, that message is also handled under WhatsApp's own terms. We do not sell your data or share it for anyone else's marketing.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask us for a summary of the personal data we hold about you, how we use it and who we have shared it with. You can also ask us to correct, complete, update or erase it, and nominate someone to exercise these rights if you die or become unable to. These rights apply in law from 13 May 2027; we already honour them. We will verify your identity before acting, and we aim to respond within 30 days.
Questions and grievances
Contact us at support@d2c.in or +91 96502 10909, Mirav Labs, New Delhi 110088. We respond to grievances within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India once its complaint process applies, from 13 May 2027.