Privacy Policy

1. Introduction

Drishtiva Franchising & Business Consulting Private Limited (”Drishtiva”, “we”, “our” or “us”) respects your privacy and is committed to protecting the Personal Data you share with us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you can make about your data when you interact with our websites, mobile applications, or any other products and services we own or operate (collectively, the “Services”).

This Policy is framed in accordance with:

• Section 43A of the Information Technology Act, 2000 (“IT Act”);

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”); and

• Digital Personal Data Protection Act, 2023 (“DPDPA”), together with any rules, regulations or guidelines issued thereunder, to the extent in force.

By accessing or using our Services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

2. Key Definitions

• Personal Data — any data about an individual who is identifiable by or in relation to such data.

• Sensitive Personal Data or Information (SPDI) — categories listed in Rule 3 of the SPDI Rules (for example, financial information, health data, biometric data).

• Data Principal — the individual to whom the Personal Data relates.

• Data Fiduciary — the person (Drishtiva) that determines the purpose and means of processing Personal Data.

• Data Processor — any person who processes Personal Data on behalf of a Data Fiduciary.

• Processing — any operation performed on Personal Data, such as collection, storage, use, disclosure, or erasure.

3. Scope

This Policy applies to all Personal Data collected or processed by Drishtiva about individuals in India, whether online (drishtiva.com and sub‑domains), through mobile applications, email, social media, or offline interactions such as events, phone calls, or meetings.

4. Information We Collect

4.1 Personal Data

• Identity data – full name, organisation, designation.

• Contact data – postal address, email address, telephone number, WhatsApp number.

• Professional or business data – industry, investment budget, franchise preferences, résumé or pitch‑deck details you voluntarily provide.

• Marketing preferences – your subscriptions, communication choices, and engagement history.

4.2 Sensitive Personal Data or Information (SPDI)

We collect SPDI only where necessary and with explicit consent. Examples include:

• Financial information – PAN, GST IN, bank or UPI details for invoicing or fee payment.

• Government identification – Aadhaar, passport, or similar documents for KYC/AML compliance when mandated by law.

4.3 Automatically Collected Data

When you visit our website, we automatically capture certain technical information—such as IP address, device type, browser type and version, time‑zone setting, referring URLs, and cookie identifiers—to diagnose server problems, administer the site, and improve user experience.

5. Purposes and Lawful Bases of Processing

• Responding to enquiries, generating leads, and connecting you with potential franchisors or investors — processed on the basis of your consent or Drishtiva’s legitimate use.

• Negotiating, concluding, and performing contracts, including invoicing — processed because it is necessary to fulfil a contract with you.

• Conducting KYC/AML checks and complying with legal obligations — processed to meet legal obligations.

• Sending marketing communications, newsletters, and event invites — processed with your explicit consent (opt‑in, with a simple opt‑out facility).

• Analysing usage, improving Services, and preventing fraud — processed for Drishtiva’s legitimate use (using aggregated or pseudonymised data wherever possible).

If consent is the lawful basis, you may withdraw it at any time without affecting processing that has already taken place.

6. Cookies and Similar Technologies

We use first‑party cookies and third‑party analytics tools (for example, Google Analytics) to:

• remember your preferences;

• understand how our Services are used; and

• enhance functionality and performance.

You can disable cookies through your browser settings; however, some features of our Services may not function properly without them.

7. Disclosure of Personal Data

We do not sell or rent Personal Data. We may share data only in the following circumstances:

1. Service providers — vetted vendors that host our infrastructure, manage customer relationships, deliver emails, or process payments. They act as Data Processors under strict confidentiality obligations.

2. At your direction — for example, when you ask us to introduce you to a franchisor or investor.

3. Regulators, courts, or law‑enforcement authorities — when required by law or to protect rights, property, or safety.

4. Corporate transactions — if Drishtiva is involved in a merger, acquisition, or restructuring, provided the recipient honours privacy commitments equivalent to this Policy.

8. International Transfers

Where Personal Data is transferred outside India (for example, to cloud servers located overseas), we ensure that such transfers are permitted by applicable law and protected through contractual safeguards or other lawful mechanisms that offer an adequate level of protection.

9. Data Retention

We retain Personal Data only for as long as necessary to fulfil the purposes described above or as required by tax, accounting, or other applicable laws. When retention is no longer required, we will securely delete or anonymise the data.

10. Security Measures

Drishtiva maintains industry‑standard security controls aligned with ISO/IEC 27001, including:

• encryption of data in transit and at rest;

• multi‑factor authentication and role‑based access controls;

• regular vulnerability assessments and penetration testing; and

• documented incident‑response and breach‑notification procedures.

11. Your Rights

Subject to verification of identity and applicable law, you have the right to:

1. Access — know what Personal Data we hold about you.

2. Correction — update or rectify inaccurate or incomplete data.

3. Erasure — request deletion of data that is no longer necessary or where consent is withdrawn.

4. Consent withdrawal or objection — stop processing for marketing or other purposes based on consent or legitimate use.

5. Data portability — receive your data in a structured, commonly used, machine‑readable format.

6. Grievance redressal — complain to us (see Section 14) and, if unsatisfied, escalate to the Data Protection Board of India once operational.

12. Managing Consent

• We obtain free, specific, informed, and unambiguous consent before collecting SPDI or sending marketing communications.

• You may opt out at any time via the unsubscribe link in our emails or by contacting us (see Section 15).

• Revocation of consent applies prospectively and does not affect lawful processing conducted before withdrawal.

13. Children’s Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from children. If you believe your child has provided data to us, contact us immediately so we can delete it.

14. Grievance Redressal

Grievance Officer

Name: Aman

Address: Faridabad, Haryana, 121008

Phone: +91 81789 25116

Email: hello@drishtiva.com

The Grievance Officer will acknowledge complaints within 24 hours and aim to resolve them within 15 days, as required under Rule 5(9) of the SPDI Rules.

15. Contact Us

For any questions, requests, or concerns regarding this Policy or our data practices, please write to:

Data Protection & Compliance Team

Drishtiva Pvt. Ltd.

Phone: +91‑ 88263 70248

Email: privacy@drishtiva.com

16. Updates to This Policy

We may revise this Policy periodically. When we do, we will update the “Last updated” date at the top and, where material changes are made, notify you via email or a prominent notice on our website. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

17. Governing Law and Jurisdiction

This Policy and any dispute arising from it are governed by the laws of India. The courts in [City, State], India shall have exclusive jurisdiction.

© 2025 Drishtiva