Privacy Policy

Who we are

Halverton & Co. (“the firm”, “we”) decides why and how personal data collected through this website is processed. Under the Digital Personal Data Protection Act, 2023 (“the DPDP Act”) and the rules made under it, the firm is the Data Fiduciary for that data.

Contact: office@halvertonandco.com. Grievance Officer: [ADD NAME AND CONTACT DETAILS].

What we collect

We do not use advertising cookies on this website. We use Google Analytics 4, a web analytics service provided by Google, to understand how many people visit, which pages they read and roughly where they come from. It records page views, the type of device and browser, the referring site and approximate location (country and city level). IP addresses are not logged or stored by Google Analytics 4, and we do not use it to identify you or combine it with the details you send us. Analytics cookies are set by Google to tell visits apart. You can stop this by using your browser’s privacy settings or by installing Google’s Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

The website also stores two small items in your browser: your acceptance of the disclaimer, kept for the browser session only, and your light or dark theme choice. Neither contains personal data.

• Contact form: your name, email address, organisation (if you give it), the topic you choose and the message you write.
• Email: whatever you send us, including attachments.
• Careers: a CV and any covering note you send.
• Server logs: the website’s host may record technical data such as IP address, browser type and the time of each request.

Why we use it

We use the personal data you send us only to:

• read and reply to your message;
• check whether we can act for you, including a conflict-of-interest check;
• consider an application for a role or internship;
• meet our legal and professional obligations.

Consent

You give personal data through the contact form voluntarily, and the form asks for your consent to our using it for the purposes above. You may withdraw consent at any time by writing to us. Withdrawal does not affect what we did before you withdrew, and we may keep what the law or our professional obligations require us to keep.

Who else sees it

We do not sell personal data. We share it only with service providers that help us run the website and receive messages, under written terms:

• the form service, [ADD: Web3Forms or Formspree], which passes your message to us and may process it outside India;
• our email provider, [ADD EMAIL PROVIDER];
• our website host, Hostinger.

How long we keep it

We keep personal data for as long as needed for the purpose it was given, and for any period the law or our professional obligations require. After that we erase it. [ADD RETENTION PERIODS, FOR EXAMPLE FOR ENQUIRIES THAT DO NOT BECOME MATTERS.]

Your rights

Under the DPDP Act you may ask us to:

• give you a summary of the personal data we process and how we process it;
• correct, complete or update it;
• erase it, where it is no longer needed for the purpose;
• respond to a grievance about how we handle it;
• act on your nomination of another person to exercise these rights if you die or become unable to do so.

How to use these rights

Write to office@halvertonandco.com, or to the Grievance Officer named above. If you are not satisfied with our response, you may complain to the Data Protection Board of India, as the DPDP Act provides.

Children

This website is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, tell us and we will delete it.

Security

We take reasonable security measures to protect personal data. No transmission over the internet is completely secure. Please do not send confidential or privileged information until we have confirmed in writing that we can act for you.

Changes

We may update this policy. The date at the top shows when it was last changed.