Privacy Policy
Cosmy Consulting and Marketing LLP
Effective Date: 19 May 2026
Last Updated: 19 May 2026
This Privacy Policy explains how Cosmy Consulting and Marketing LLP (referred to as "Cosmy Consulting", "we", "us", or "our") collects, uses, stores, and protects personal data when you visit cosmyconsulting.com or interact with our services. This policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
1. Data Fiduciary
The Data Fiduciary responsible for your personal data is:
Cosmy Consulting and Marketing LLP
AECS Layout, Singasandra, Bengaluru 560068, Karnataka, India
Email: info@cosmyconsulting.com
Website: www.cosmyconsulting.com
2. Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
Newsletter signup: Your name and email address. This data is stored in Odoo CRM.
Discovery call booking: When you book a consultation via our Google Calendar link, Google collects your name, email address, and any information you provide in the booking form. This data is processed by Google under their own Privacy Policy and is not stored on our website.
Contact enquiries: If you email us directly, we receive your name, email address, and the contents of your message.
2.2 Data Collected Automatically
When you visit cosmyconsulting.com, we automatically collect anonymised technical and behavioural data through the following tools:
Google Analytics 4 (GA4): Collects anonymised data including pages visited, time on site, device type, browser type, and approximate geographic region. No personally identifiable information is collected through GA4. Data retention is set to the GA4 default of 14 months.
Google Tag Manager (GTM): Used to manage analytics tags on the website. GTM itself does not collect personal data. It deploys tools such as GA4 that collect anonymised behavioural data.
3. Purpose of Data Collection
We collect and process your personal data only for the following defined purposes:
To send you our newsletter and updates about Cosmy Consulting services, where you have explicitly signed up.
To facilitate discovery call bookings and respond to consultation enquiries.
To analyse website performance and improve user experience using anonymised data.
To comply with applicable laws and regulations.
4. Legal Basis for Processing
Under the DPDP Act 2023, we process your personal data on the following legal bases:
Consent: Newsletter signups are based on your explicit consent. You may withdraw consent at any time by clicking the unsubscribe link in any newsletter or by emailing info@cosmyconsulting.com.
Legitimate Interest: Website analytics using anonymised data to improve our services.
Contractual Necessity: Processing data to fulfil a consultation or engagement you have requested.
5. Data Retention
Newsletter and contact enquiry data: Retained for 30 days from the date of collection, after which it is permanently deleted from our systems.
Active client engagement data: Retained for the duration of the engagement and deleted within 30 days of engagement closure unless required by law.
Anonymised analytics data: Retained as per Google Analytics 4 default settings (14 months), after which it is automatically deleted by Google.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to any third party.
We share data only with the following service providers who process data on our behalf:
Google LLC: For GA4 analytics, GTM tag management, and Google Calendar booking. Google processes data under their own Privacy Policy and Data Processing Terms.
Odoo S.A.: For CRM and newsletter management. Data is stored within the Odoo platform under their Data Processing Agreement.
We may disclose personal data if required by law, court order, or government authority.
7. Your Rights Under the DPDP Act 2023
As a Data Principal under the DPDP Act 2023, you have the following rights:
Right to Access: You may request confirmation of whether we hold your personal data and obtain a summary of such data.
Right to Correction: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Grievance Redressal: You have the right to have your grievances addressed in a timely manner.
Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, contact our Grievance Officer (details in Section 9).
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. Access to personal data is restricted to authorised personnel only. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
9. Grievance Officer
In accordance with the DPDP Act 2023, the following person has been designated as the Grievance Officer:
Name: Rajani Kumar
Email: info@cosmyconsulting.com
Phone: +91-7975102363
Address: Cosmy Consulting and Marketing LLP, AECS Layout, Singasandra, Bengaluru 560068
Grievances will be acknowledged within 48 hours and resolved within 30 days of receipt.
10. Changes to This Policy
We may update this Privacy Policy from time to time as our services evolve or as required by applicable law. Any material changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.
11. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact:
Email: info@cosmyconsulting.com
Address: Cosmy Consulting and Marketing LLP, AECS Layout, Singasandra, Bengaluru 560068, Karnataka, India