1. Who we are
This website is operated by Forensic Analyst & Sage Advisors ("FASA", "we", "us"). For the purposes of the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it, FASA is the Data Fiduciary for the personal data described in this policy. You can contact us about privacy at advisory.fasa@gmail.com or on +91 79906 66277.
2. The personal data we collect
Information you send us
- Enquiries. When you contact us by email, phone or LinkedIn, we receive your name, contact details, organisation and whatever you choose to tell us about your matter.
- Career applications. When you apply for a role, we receive your CV, cover letter, certificates and any work samples, which typically include your education, employment history and contact details.
Information collected automatically
- Server logs. Our hosting provider records technical information such as IP address, browser type, the pages requested and the time of the request, which is used to deliver the website and protect it against misuse.
- Visitor statistics. We may use a privacy-focused analytics service that counts page views and referring sites in aggregate. It does not use cookies, does not build a profile of you and does not track you across other websites.
Cookies. This website does not set cookies.
Please do not send us sensitive details about an investigation, or personal data about other people, until we have agreed the terms of an engagement with you. See our Disclaimer.
3. Why we use your data
| Purpose | Data used | Basis |
|---|---|---|
| Responding to your enquiry and assessing whether we can assist, including conflict checks | Enquiry details | Your voluntary provision of the data for this purpose, and your consent |
| Assessing applications and contacting candidates | Career application details | Your voluntary provision of the data for this purpose, and your consent |
| Operating, securing and improving the website | Server logs and aggregate statistics | Legitimate uses permitted under the DPDP Act, including security |
| Meeting legal, regulatory and professional obligations | Any of the above, as required | Compliance with applicable law |
We do not sell personal data, and we do not use it for advertising.
4. Who we share it with
We share personal data only with service providers who process it on our behalf and under our instructions, and only as far as needed:
- Our website hosting provider (Netlify)
- Our email provider (Google)
- Our analytics provider, if enabled (Cloudflare Web Analytics)
- Professional networking platforms you choose to contact us through, such as LinkedIn, which are governed by their own privacy policies
We may also disclose personal data where required by law, or to a court, regulator or law-enforcement authority acting within its powers.
Some of these providers process data outside India. Any such transfer is subject to the conditions and restrictions notified by the Government of India under the DPDP Act.
5. How long we keep it
- Enquiries that do not lead to an engagement: up to 12 months after our last communication.
- Career applications: up to 12 months after the application is received, so that we can consider you for other suitable openings. You may ask us to delete your application sooner.
- Engagement records: for the period required by the terms of the engagement and by applicable legal and professional record-keeping obligations.
- Server logs: for the period set by our hosting provider, and no longer than needed for security purposes.
When personal data is no longer needed for these purposes, we delete it or render it anonymous.
6. How we protect it
We use reasonable security safeguards appropriate to the nature of the data, including restricted access on a need-to-know basis, secure systems and confidentiality obligations on everyone who handles it. No method of transmission over the internet is completely secure; please consider this before sending sensitive information by email.
7. Your rights
Subject to the DPDP Act and the rules made under it, you have the right to:
- Access information about the personal data we hold about you and how it is being processed
- Correct, complete or update your personal data
- Erase personal data that is no longer needed, unless we must keep it by law
- Withdraw consent at any time, as easily as you gave it; this does not affect processing already carried out
- Nominate another person to exercise your rights in the event of your death or incapacity
- Have your grievances addressed by us
To exercise any of these rights, write to us at advisory.fasa@gmail.com with the subject line "Data Protection Request". We may need to verify your identity before acting on a request.
8. Grievances
If you have a concern about how we handle your personal data, please contact our Grievance Officer at advisory.fasa@gmail.com. We will respond as quickly as we can, and in any case within the period prescribed under the DPDP Rules. If you are not satisfied with our response, you may approach the Data Protection Board of India.
9. Children
This website and our services are not directed at children, and we do not knowingly collect personal data from anyone under 18 years of age.
10. Client confidentiality
Information we receive in the course of a professional engagement is also protected by the confidentiality terms of that engagement and by our professional obligations. This policy does not reduce those protections.
11. Changes to this policy
We may update this policy from time to time, for example as the remaining provisions of the DPDP Rules come into force. The date at the top of this page shows when it was last updated.