Privacy Policy

Effective Date: 11 October 2026

Introduction

This Privacy Policy describes how Ambar Defence ("Ambar Defence", "we", "us" or "our") collects, uses, retains and protects personal data obtained through ambardefence.com (the "Website"). It is issued in accordance with the Digital Personal Data Protection Act, 2023 (the "Act") and the Digital Personal Data Protection Rules, 2025 (the "Rules").

Data Fiduciary

Ambar Defence is the Data Fiduciary in respect of personal data processed through the Website. Queries regarding this Policy or the processing of personal data may be addressed to the Privacy and Grievance Officer at team@ambardefence.com.

Scope

This Policy applies to personal data collected through the Website. Personal data processed in the course of providing consulting or platform services to clients is governed by the terms of the relevant client agreement.

Personal Data We Collect

Enquiry Data: First name, last name, work email address, company name, telephone number (optional), area of interest and the content of your message, provided through the contact form.

Consent Records: Your work email address and the date and time at which you consented to receive communications from us.

Technical Data: IP address, browser type, device information and pages accessed, collected automatically by our hosting provider.

Purposes of Processing

Enquiry Data is processed solely to respond to your enquiry and to communicate with you regarding our services. As this data is provided voluntarily for that specified purpose, it is processed as a legitimate use under Section 7(a) of the Act.

Consent Records are processed to send periodic communications about our services and platform, on the basis of your consent. Consent is optional and is not a condition of submitting an enquiry.

Technical Data is processed to maintain the security, integrity and performance of the Website.

We do not sell personal data, and we do not process it for any purpose other than those stated above.

Withdrawal of Consent

You may withdraw your consent to receive communications at any time by using the unsubscribe link in any communication from us or by writing to team@ambardefence.com. Withdrawal does not affect the lawfulness of processing carried out before it.

Data Processors

We engage carefully selected service providers, including website hosting and business email providers, to process personal data on our behalf. Such providers process personal data only on our documented instructions and under contractual obligations of confidentiality and security. We may disclose personal data where required to do so by applicable law or by a lawful order of a competent authority.

Cross-Border Transfers

Personal data may be processed outside India by our service providers. Any such transfer is made in accordance with Section 16 of the Act.

Retention

Enquiry Data is retained for up to twelve months from the date of last communication, unless a client relationship is established, in which case retention is governed by the relevant client agreement.

Consent Records are retained until consent is withdrawn, and thereafter only for as long as necessary to demonstrate compliance.

Technical Data and security logs are retained for one year, as required under the Rules.

Personal data is erased once the purpose of processing has been fulfilled and retention is no longer required by law.

Security

We implement reasonable security safeguards appropriate to the nature of the personal data we process, including encryption in transit, role-based access control, and logging and monitoring of access.

Your Rights

Subject to the Act, you have the right to:

Obtain a summary of the personal data we process about you and the processing activities undertaken;
Request correction, completion, updating or erasure of your personal data;
Withdraw consent previously given;
Nominate another individual to exercise your rights in the event of your death or incapacity; and
Access readily available means of grievance redressal.

Requests may be submitted to team@ambardefence.com. We may request information reasonably necessary to verify your identity before acting on a request.

Grievance Redressal

Grievances relating to the processing of personal data may be submitted to the Privacy and Grievance Officer at team@ambardefence.com. We will respond within thirty days and, in any event, within the period prescribed under the Rules. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

Children's Data

The Website and our services are directed at businesses and are not intended for individuals under the age of eighteen. We do not knowingly process personal data of children.

The Website uses only those cookies that are strictly necessary for its secure operation. Any non-essential cookies will be used only with your prior consent, which may be given or refused through the cookie banner.

Changes to This Policy

We may amend this Policy from time to time. The revised Policy will be published on this page with an updated effective date.

Contact

Privacy and Grievance Officer
Ambar Defence
team@ambardefence.com