Privacy Policy
Last updated: 2 August 2026 · Governed by the Digital Personal Data Protection Act, 2023 (India)
This Privacy Policy explains how Palo Santo Consulting Private Limited (“Palo Santo”, “we”, “us”) collects, uses, and protects personal data when you use palosantoconsulting.com and our services.
1. Who we are (Data Fiduciary)
Palo Santo Consulting Private Limited is the Data Fiduciary responsible for personal data collected through this website. Registered office: Shilpa Ananya Tech Park, 1st Floor, Electronic City Phase 1, Bengaluru 560100, Karnataka, India.
2. What we collect
| Data | When | Purpose |
|---|---|---|
| Name, email, phone, subject, message (and optional organisation / student name) | When you submit a contact form | To respond to your enquiry and provide the service you requested |
| Name, email, phone, billing details | When you purchase (e.g. the HR Toolkit) | To process the order and deliver the product. Card/UPI details are handled by Razorpay — we never see or store them. |
| Email address | If you subscribe to a lead magnet or newsletter | To send you the requested content and, with consent, occasional updates |
| Device / usage data (IP, browser, pages viewed, referrer) | Automatically, via cookies | Analytics and site security (see our Cookie Policy) |
3. How we use it
- To respond to enquiries and deliver requested services and products.
- To process payments and issue order confirmations and receipts.
- To operate, secure, and improve the website (including spam prevention).
- To send transactional emails (e.g. an acknowledgement that we received your message).
- With your consent, to send marketing or educational updates you can opt out of at any time.
4. Legal basis & consent
We process personal data on the basis of your consent and to fulfil the services you request. Where we rely on consent (for example, marketing emails), you may withdraw it at any time by emailing info@palosantoconsulting.com or using the unsubscribe link in our emails.
5. Who we share data with
We do not sell your personal data. We share it only with service providers who help us run the website and business, under appropriate safeguards:
| Provider | Role |
|---|---|
| Razorpay | Payment processing |
| Google (Analytics 4, Tag Manager) | Website analytics |
| Meta (Pixel) | Advertising measurement |
| Cloudflare (Turnstile) | Spam / bot protection on forms |
| Brevo | Email delivery & marketing |
| Hostinger | Website hosting |
6. Retention
We keep personal data only as long as needed for the purposes above or as required by law. Enquiry records are retained for up to 24 months unless you ask us to delete them sooner. Transaction records are retained as required by Indian tax and accounting law.
7. Your rights
Under the Digital Personal Data Protection Act, 2023, you may:
- Access a summary of the personal data we hold about you;
- Request correction, completion, or updating of your data;
- Request erasure of your data, subject to legal retention requirements;
- Withdraw consent; and
- Nominate another individual to exercise your rights in the event of death or incapacity.
To exercise any of these, email info@palosantoconsulting.com.
8. Grievance redressal
If you have a complaint about how your data is handled, contact our Grievance Officer at Palo Santo Consulting Private Limited: info@palosantoconsulting.com, +91 99000 07586. We will acknowledge and respond within the timelines required by law.
9. Security & children
We use reasonable technical and organisational measures (including HTTPS and access controls) to protect personal data. Our services are intended for adults and for parents/guardians acting on behalf of students; we do not knowingly collect data directly from children without appropriate consent.
10. Changes
We may update this policy from time to time. The “last updated” date above reflects the current version.