How we handle personal data.

Who we are

Maatara Consulting is a technology consultancy with teams in Bengaluru, India and Concord, California, USA. We design, build and run software, cloud and security work for clients in India and in other countries.

For questions about personal data, write to info@maatara-consulting.com. That address is also the contact for access, correction and grievance requests.

What we collect

If you use the contact form, or email or call us, we receive the details you choose to send. That is typically your name, work email, phone number, company and a description of the work you have in mind.

During an engagement we also hold the project material you give us: requirements, access that the statement of work names, and correspondence about the work. We do not ask for payment card numbers on this website.

Server logs may record the IP address, browser type and pages requested, so we can keep the site available and investigate abuse. This site does not run advertising or analytics cookies.

Why we use it

We use this information to answer enquiries, to prepare and perform a statement of work, to invoice for agreed work, and to keep our systems secure. We do not sell personal data, and we do not use it for third-party advertising.

Where the Digital Personal Data Protection Act, 2023 applies, we rely on your consent for an enquiry you send us, and on a lawful use for performing a contract and for security. The Information Technology Act, 2000 and the rules under it also frame how we hold personal information in India.

Where it is processed

Work is delivered from India and the United States. Personal data you send us may be stored or accessed in either place, and by the engineers assigned to your engagement. If your organisation is in the European Economic Area, the United Kingdom or California, we handle the data in line with the contract we sign with you, including GDPR, UK GDPR or the CCPA where that engagement requires it.

Who we share it with

We share personal data with a supplier only when that supplier needs it to host email, store project files or provide a tool named in the statement of work, and only under a duty to protect it. We also disclose it when the law requires us to. We do not pass your enquiry list to other consultancies.

How long we keep it

Enquiry records are kept for as long as the conversation is active and for a short period afterwards so we can pick it up if you write again. Project records are kept for the life of the engagement and for the period the statement of work or applicable law requires after it ends. Server logs are kept only as long as they are useful for security.

Your choices

You may ask us what personal data we hold about you, ask us to correct it, or ask us to erase it when we no longer need it for the engagement or for a legal duty. You may withdraw consent for an enquiry at any time; that does not undo work already done under a signed statement of work.

If you are in the EEA or the United Kingdom, you may also object to certain processing, ask for a copy in a portable form, and complain to your local supervisory authority. If you are a California resident, you may ask us not to sell or share personal information; we do not sell or share it as those terms are used in the CCPA.

Security

Access to client and enquiry data is limited to people who need it for the work. We use access control and encryption in transit for the channels we operate. No method of transmission or storage is perfect, and we will tell you if a breach of your personal data requires notice under the law that applies.

Children

This website and our services are for businesses and adult professionals. We do not knowingly collect personal data from children.

Changes

If we change this policy, we will update the date at the top of this page. A change that affects an active engagement is also covered in the statement of work or by a note to the contact we have for that work.