Privacy Policy

The Site currently uses Google Analytics to collect usage and device data. We may also deploy advertising pixels (such as Meta Pixel or LinkedIn Insight Tag) from time to time; where we do so, our Cookie Policy will be updated to reflect the specific tools in use and the controls available to you. We do not currently use any CRM, email marketing, or marketing automation platform in connection with the Site.

We process personal data for the following purposes:

• To respond to enquiries and provide requested information about our services
• To deliver, manage, and communicate about a client engagement
• To send newsletters or marketing communications, where you have opted in (or, for existing business contacts, where permitted under applicable law, with an opt-out in every communication)
• To operate, secure, and improve the Site
• To evaluate job applications
• To comply with our legal and regulatory obligations

Under the DPDP Act, our basis for processing is primarily your consent (for marketing communications and non-essential cookies) or legitimate/certain specified uses, such as responding to a request you have voluntarily made.

We do not sell personal data. We may share personal data with:

• Service providers/sub-processors who support our website, communications, or service delivery (e.g., hosting, analytics, email, CRM, and productivity tools) — bound by contractual confidentiality and data protection obligations
• Professional advisors (legal, accounting) where necessary
• Regulators, courts, or government authorities, where required by law
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent protections

Current website-level sub-processors:

This list reflects tools active on the Site as of the effective date of this Policy. We will update this section, or publish a standalone sub-processor notice, when additional tools are onboarded.

We retain personal data only as long as necessary for the purposes described in Section 3, or as required by applicable law. Specifically:

Because Noisiv Consulting serves clients based in the European Union (including Germany), the United Kingdom, the United States, and Japan, we structure our data handling to align with the following frameworks where they apply to you:

• GDPR (EU) and UK GDPR — including recognition of data subject rights such as access, rectification, erasure, restriction, portability, and objection
• Applicable US state privacy laws (e.g., CCPA/CPRA and comparable state statutes) — including rights to know, delete, correct, and opt out of sale/sharing of personal information
• Japan's Act on the Protection of Personal Information (APPI) — including rights to disclosure, correction, and suspension of use

Rather than reproduce each framework's full text here, we confirm our commitment to compliance with each, and will provide the specific supporting documentation relevant to your jurisdiction — such as a Data Processing Agreement, EU Standard Contractual Clauses, a UK International Data Transfer Addendum, or a jurisdiction-specific rider — as part of your Service Agreement, upon request.

Noisiv Consulting is based in India, and personal data we collect or process may be transferred to, stored in, or accessed from locations outside your home country, including India and countries where our service providers operate their infrastructure.

Transfers from India

Under Section 16 of the DPDP Act, 2023, the Company may transfer personal data outside India except to countries or territories specifically restricted by notification of the Central Government. As of the effective date of this Policy, no such restriction affects our processing activities.

Transfers of EU/UK personal data to India

Where we process personal data originating in the EU or UK, and India does not benefit from an applicable adequacy decision, we rely on appropriate safeguards — including the EU Standard Contractual Clauses (and, where applicable, the UK International Data Transfer Addendum) executed with the relevant client or data exporter — supplemented by contractual, technical, and organisational measures.

Transfers involving our sub-processors

Where our service providers process personal data in a country other than India, we take reasonable steps to ensure a comparable level of protection through contractual commitments with those providers.

Your engagement-specific transfer terms

Where your Service Agreement includes its own data transfer or localisation terms, those terms govern in addition to this clause.

Subject to applicable law, you may have the right to:

• Obtain confirmation of, and access to, personal data we hold about you
• Request correction or completion of inaccurate or incomplete personal data
• Request erasure of personal data that is no longer necessary for the purpose it was collected
• Withdraw consent at any time, where processing is based on consent (without affecting the lawfulness of processing before withdrawal)
• Nominate another individual to exercise your rights in the event of death or incapacity (a right specific to the DPDP Act)
• Register a grievance regarding the handling of your personal data
• Where applicable under GDPR/UK GDPR/CCPA/APPI, exercise the additional rights described in Section 8

To exercise any of these rights, contact us using the details in Section 13.

In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

General enquiries:

Please also see our Terms of Use and Cookie Policy.