OceanScale Consulting Pvt. Ltd.
Effective Date: 1 June 2026 | Last Updated: 1 June 2026
OceanScale Consulting Pvt. Ltd. (hereinafter referred to as “OceanScale”, “we”, “us”, or “our”) is a company incorporated under the Companies Act, 2013, having its registered office in India. We are committed to protecting the privacy and personal data of every individual who interacts with us — whether as a visitor to our website, a prospective client, an existing client, a business contact, or a job applicant.
This Privacy Policy (“Policy”) describes how we collect, use, store, disclose, and protect Personal Data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDPA”), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and all other applicable laws of India. Where we process data of individuals in the European Economic Area (EEA), the General Data Protection Regulation (EU GDPR) 2016/679 also applies.
1. Scope and Applicability
This Policy applies to Personal Data processed through:
- Our website located at www.oceanscaleconsulting.com and any subdomains thereof;
- Enquiry forms, contact pages, and newsletter subscriptions on our website;
- Email, telephone, and other communications you initiate with us;
- Business development activities, proposals, and client engagements;
- Recruitment and talent acquisition processes;
- LinkedIn, Twitter/X, and other social media platforms where we operate official accounts.
This Policy does not apply to third-party websites that may be linked from our website. We encourage you to review the privacy policies of those third parties separately.
2. Data Controller / Data Fiduciary
For the purposes of applicable data protection laws, OceanScale Consulting Pvt. Ltd. acts as the Data Fiduciary (under DPDPA) and/or Data Controller (under GDPR). Our contact details are:
Company Name: OceanScale Consulting Pvt. Ltd.
Website: www.oceanscaleconsulting.com
Email: info@oceanscaleconsulting.com
LinkedIn: linkedin.com/company/oceanscale-consulting-pvt-ltd
3. Personal Data We Collect
We collect the following categories of Personal Data:
3.1 Data You Provide Directly
- Identity data: full name, job title, designation, company name;
- Contact data: email address, phone number, business address;
- Communication data: content of messages, enquiries, or correspondence sent to us;
- Recruitment data: CV/résumé, educational qualifications, work experience, professional references;
- Financial / commercial data: billing details necessary for invoicing (where applicable).
3.2 Data Collected Automatically
When you visit our website, we or our service providers may automatically collect:
- Technical data: IP address, browser type and version, operating system, device identifiers;
- Usage data: pages visited, time spent on pages, referring URLs, clickstream data;
- Cookie data: preferences and session information stored via cookies and similar technologies (see Section 9).
3.3 Data from Third-Party Sources
We may receive Personal Data about you from LinkedIn, professional referrals, industry events, or publicly available business directories, solely for legitimate business development and engagement purposes.
4. Purposes and Legal Basis for Processing
We process Personal Data for the following purposes, each supported by a lawful basis under DPDPA and, where applicable, GDPR:
- Responding to enquiries and providing information: To respond to contact form submissions, emails, or calls you initiate. Basis: Consent / Legitimate interest.
- Client engagement and service delivery: To manage client relationships, deliver consulting projects, and communicate regarding ongoing engagements. Basis: Contract / Legitimate interest.
- Business development and marketing: To send relevant thought leadership content, service updates, or event invitations where you have expressed interest or provided consent. Basis: Consent / Legitimate interest.
- Recruitment: To evaluate job applications, conduct interviews, and assess suitability for roles. Basis: Consent.
- Website analytics and improvement: To understand how visitors use our website and improve user experience. Basis: Legitimate interest / Consent (for cookies).
- Legal and regulatory compliance: To comply with applicable Indian laws, regulatory requirements, court orders, or government directives. Basis: Legal obligation.
- Security and fraud prevention: To protect our systems, data, and clients from unauthorised access, fraud, or other security threats. Basis: Legitimate interest.
5. Sharing and Disclosure of Personal Data
OceanScale does not sell, rent, or trade Personal Data. We may share data in the following limited circumstances:
- Service providers and processors: Trusted third-party vendors (e.g., website hosting, CRM, email, analytics) who process data solely on our instructions under appropriate data processing agreements.
- Professional advisors: Lawyers, auditors, insurers, and financial advisors bound by confidentiality obligations.
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or governmental directive.
- Business transfers: In connection with any merger, acquisition, restructuring, or sale of assets, subject to standard confidentiality undertakings.
- With your consent: For any other purpose disclosed to you at the time of collection, with your explicit consent.
6. Cross-Border Data Transfers
Given our operations spanning India and Europe, Personal Data may be transferred to and processed in countries outside India. Where such transfers occur, we ensure an adequate level of protection through standard contractual clauses, adequacy decisions, or other mechanisms recognised under applicable law, including the DPDPA and GDPR. By providing your Personal Data, you acknowledge and consent to such transfers.
7. Data Retention
We retain Personal Data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Indicative retention periods:
- Client engagement records: 7 years from the end of the engagement (as required under Indian tax and contract law);
- Recruitment records (unsuccessful applicants): 12 months from the date of application;
- Website enquiries and general correspondence: 3 years from the date of last contact;
- Marketing consent records: Until consent is withdrawn plus 1 year;
- Website analytics data: 26 months from collection.
Upon expiry of the applicable retention period, Personal Data will be securely deleted or anonymised.
8. Your Rights as a Data Principal
Subject to applicable law, you have the following rights in relation to your Personal Data:
- Right to access: Obtain information about what Personal Data we hold about you and how it is processed.
- Right to correction: Request correction of inaccurate or incomplete Personal Data.
- Right to erasure: Request deletion of your Personal Data where it is no longer necessary for the purpose collected or where you withdraw consent (subject to legal obligations).
- Right to grievance redressal: Lodge a complaint or grievance with our designated contact regarding processing of your Personal Data.
- Right to nominate: Under the DPDPA, nominate another individual to exercise your rights in case of death or incapacity.
- Right to object / withdraw consent: Withdraw consent for marketing communications at any time without affecting the lawfulness of prior processing.
- Right of data portability (GDPR): Where applicable, receive your Personal Data in a structured, machine-readable format.
To exercise any of the above rights, please write to us at info@oceanscaleconsulting.com. We will respond within the timelines prescribed under applicable law (generally 30 days). We may require identity verification before processing requests.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyse website traffic, and support marketing activities. Cookies used include:
- Strictly necessary cookies: Essential for website functionality and cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with the website (e.g., Google Analytics). These are set only with your consent.
- Preference cookies: Remember your settings and preferences across visits.
- Marketing cookies: Used to deliver relevant content and track the effectiveness of our communications.
You may manage cookie preferences through your browser settings or our cookie consent tool on the website. Disabling certain cookies may affect website functionality.
10. Data Security
OceanScale implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encryption of data in transit and at rest, access controls and authentication protocols, regular security assessments, and employee training on data protection. While we apply industry-standard safeguards, no method of transmission over the internet or electronic storage is completely secure. In the event of a Personal Data breach that is likely to result in harm to you, we will notify you and the relevant authority as required under applicable law.
11. Children’s Privacy
Our website and services are intended for business professionals and are not directed at children under the age of 18. We do not knowingly collect Personal Data from individuals below 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately at info@oceanscaleconsulting.com and we will take prompt steps to delete it.
12. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or external content. OceanScale is not responsible for the privacy practices or content of such third-party sites. We encourage you to review their respective privacy policies before providing any Personal Data.
13. Grievance Officer
In accordance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the DPDPA, 2023, a Grievance Officer has been designated to address complaints regarding processing of Personal Data:
Name: Grievance Officer — OceanScale Consulting Pvt. Ltd.
Email: info@oceanscaleconsulting.com
Website: www.oceanscaleconsulting.com/contact-us
Complaints will be acknowledged within 48 hours and resolved within 30 days of receipt. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India constituted under the DPDPA, 2023, once operational.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Any material changes will be posted on this page with a revised effective date. We encourage you to review this Policy periodically. Your continued use of our website or services following a material update constitutes acceptance of the revised Policy.
15. Governing Law and Jurisdiction
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts located in India.
Contact Us About Your Privacy
OceanScale Consulting Pvt. Ltd.
Email: info@oceanscaleconsulting.com
Website: www.oceanscaleconsulting.com
LinkedIn: linkedin.com/company/oceanscale-consulting-pvt-ltd