Privacy notice
How we collect and use personal data, the basis for each use, and how to exercise your rights.
This notice applies to consult-ds.com and to personal data DS Consulting handles in the course of its business. It is a standalone document and does not form part of our terms of service. Last updated 11 September 2026.
Who we are
DS Consulting is the data fiduciary, and the data controller where EU or UK data protection law applies. We decide the purposes for which personal data is used and are accountable for it.
For any question about this notice, or to exercise a right, contact privacy@consult-ds.com.
What we collect and why
We collect personal data only for the purposes set out below, and use only the data listed against each purpose.
Responding to an enquiry
- Data
- Name, email address, company, your message, and the source you selected
- Basis
- Consent
- Retention
- 24 months from last contact
Arranging and holding a meeting
- Data
- Name, email address, time zone, and any detail you provide when booking
- Basis
- Consent
- Retention
- 24 months
Sending a report, checklist or assessment result you requested
- Data
- Email address, and where applicable the responses you submitted and the result generated
- Basis
- Consent
- Retention
- 24 months from last interaction
Handling a data rights request or grievance
- Data
- Name, email address, the nature of the request, and any detail you provide
- Basis
- Legal obligation
- Retention
- 36 months after closure
Providing services to clients
- Data
- Contact details, engagement records, correspondence and deliverables
- Basis
- Performance of a contract
- Retention
- 8 years from the end of the engagement
Measuring website usage
- Data
- Pages viewed, referrer, approximate location, device and browser, as pseudonymous identifiers
- Basis
- Consent, given through the cookie banner
- Retention
- 14 months
Website security and prevention of abuse
- Data
- Technical data, including IP address and request metadata
- Basis
- Legitimate interests
- Retention
- As set by our service providers
Providing personal data is voluntary. If you choose not to, we may be unable to respond to your enquiry or provide the material you requested.
What we do not do
- We do not sell, rent or trade personal data.
- We do not disclose personal data to advertising networks, and this site carries no advertising trackers.
- We do not use personal data to train artificial intelligence models.
- We do not acquire contact data from list brokers or by scraping.
- We do not make decisions about you by automated means alone.
Who we share it with
We use service providers who process personal data on our instructions and for no purpose of their own. They fall into the following categories.
- Website hosting and content delivery
- Email, calendar and productivity services
- Website analytics
- Security and abuse prevention
A named list of our service providers is available on request from privacy@consult-ds.com.
We also disclose personal data where required by law, or in connection with professional advice, insurance or a corporate transaction.
International transfers
Our service providers operate internationally. Personal data may therefore be processed outside India and outside the European Economic Area, including in the United States. Where required, such transfers are made under appropriate safeguards.
Security
We apply technical and organisational measures appropriate to the nature of the data we hold, including access control, encryption in transit and restricted administrative access.
In the event of a personal data breach we will notify affected individuals and the relevant authority as required.
Your rights
Exercising a right is free of charge and you do not need to give a reason. We acknowledge each request with a reference and aim to respond within 30 days.
Complaints
Data protection queries, rights requests and grievances are handled by Tejas Dhabalia, Co-founder, at privacy@consult-ds.com.
If you are not satisfied with our response, you may complain to the Data Protection Board of India. Where EU or UK data protection law applies, you may instead complain to your local supervisory authority.
Children
Our services are directed at businesses and we do not knowingly collect personal data from anyone under 18. We do not direct advertising or behavioural tracking at children.
If you believe a child has provided us with personal data, contact privacy@consult-ds.com and we will delete it.
Changes to this notice
We update this notice when our practices change and record the date of the most recent revision above. Where a change materially affects how we use personal data already provided to us, we will notify affected individuals directly.
Our terms of service and cookie policy are separate documents.
Common questions
Does DS Consulting sell personal data?
No. We do not sell, rent or trade personal data, we do not disclose it to advertising networks, and we do not use it to train artificial intelligence models.
How do I request a copy of my data or ask for it to be deleted?
Use the form at consult-ds.com/privacy/request or email privacy@consult-ds.com. You do not need to give a reason. We acknowledge each request with a reference number and aim to complete within 30 days.
Is my data transferred outside my country?
Our service providers operate internationally, so personal data may be processed outside India and outside the European Economic Area, including in the United States. Where required, transfers are made under appropriate safeguards.
What happens if I decline cookies?
The website functions normally and no analytics cookies are set. Analytics is declined by default and is only enabled if you accept it.