Privacy Policy

Version 2.1 · Last updated 7th November 2026

1. Introduction

East Consultancy Services Private Limited (“ECS”, “we”, “us”) respects your privacy and is committed to protecting your personal data. In this Policy, “Personal Data” means any data about an individual who is identifiable by or in relation to that data, such as name, email address, phone number or company details.

This Privacy Policy (“Policy”) explains how ECS collects, uses, discloses and safeguards Personal Data when you visit www.eastcs.com (the “Website”), contact us, or deal with us as a contact at one of our clients. We handle Personal Data in line with the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

Please read this Policy carefully. It tells you what personal data we collect, why we use it, who we share it with and how we protect it.

2. Purpose

The purpose of this Privacy Policy is to set out ECS’s commitment to protecting personal data, and the principles and practices we follow to handle it lawfully, securely and transparently.

3. Scope

This Policy applies to:

Personal Data of visitors to the Website
Personal Data you give us when you contact us, including demo requests and enquiries
Contact details of people at our clients and other business relationships

It does not cover personal data processed by our solutions. Our solutions are deployed on our clients’ own infrastructure, so that data stays in the client’s environment and is handled under the client’s controls, its own privacy notices and its agreements with us, including how long it is kept. Where ECS staff handle such data while implementing or supporting a solution, we do so only on the client’s instructions and under those agreements.

4. Policy Statement

Applicability

This Policy applies to all visitors to the Website and covers:

Information collected through the Website’s contact form and server logs
Communication with us by email or other online contact methods
Demo requests and enquiries about our solutions made through the Website

Important Note: We do not ask for Aadhaar numbers, biometric data or other sensitive personal data through this Website. Please do not include them in your message.

What Personal Data We Process?

The personal data we process depends on what you do on the Website and why we use it.

Browsing the Website

When you browse the Website, we process personal data to run and secure it, understand how it is used and improve it. We may also use it to co-operate with public authorities, courts and regulators, respond to legal requests, resolve disputes and enforce our policies. For this we collect:

Server logs: Your IP address, browser type, operating system, the pages you request, the page that linked you to us and the time of each request. Our hosting provider records these automatically.

The Website does not use cookies, analytics tools or advertising trackers (see Section 10).

Clients and Business Relationships

When you are a current client, or a contact at a client organisation, we process your personal data to deliver and support our solutions, manage our contract with you, issue invoices and keep billing records, and send you service communications such as updates and maintenance notices. We also use it to improve our solutions and services and develop new ones, to meet legal obligations, to co-operate with authorities, to resolve disputes, to manage risks and to enforce our policies. For this we collect:

Contact information: Your name, work email, phone number and the name of your organisation.
Contract and billing details: Your role, the agreements we hold with your organisation and the invoicing details needed to bill it.

Contacting Us

When you contact us through the Website, for example to request a demo, ask a question or raise a concern, we process the details you give us to respond to you, share the information you asked for and meet legal obligations. We may also use your details to co-operate with authorities, resolve disputes and enforce our policies. For this we collect the following, which you provide voluntarily:

Contact details: Your name, work email and company name.
Your enquiry: The solution you are interested in and any other information you add in your message, such as a phone number.

We send marketing emails about ECS solutions, news and events only if you separately agree to receive them. Using the contact form does not sign you up.

5. How We Use Your Information

To respond to your enquiries and demo requests
To share information about our solutions that you asked about
To deliver and support our solutions for our clients
To keep the Website secure and improve it
To meet legal and regulatory obligations

6. Who We Share It With

We share personal data only as set out in this Policy or as the law requires. We do not sell it.

Running our business: We may share it with our own employees and officers. They get only what they need, on a need-to-know basis, and are bound by confidentiality and information security obligations.
Service providers: Companies that run parts of our Website and email for us, including our hosting provider (BigRock) and our email provider (Microsoft 365). They act on our behalf, and ECS remains responsible for how they handle your data. Contact form messages reach us by email, and the Website itself keeps no copy.
Google Fonts: The Website’s fonts load from Google’s servers, so Google receives your IP address and browser details when a page loads. Google’s own privacy policy applies to this.
Professional advisers: We may share it with our lawyers, auditors and other advisers, who are bound by confidentiality.
Legal and regulatory requirements: We may disclose it if the law requires, or if our advisers tell us it is reasonably necessary to respond to a court order or other legal process, or to a request from law enforcement or a government agency with the legal power to ask for it.
Business changes: If ECS merges, is acquired or transfers its business, your personal data may pass to the new owner. We will require it to protect your data in line with this Policy.
With your consent: We may share it for other purposes if you ask us to or clearly agree.

Some of these providers may process Personal Data outside India, as Indian law permits.

Clients and partners who receive Personal Data in the course of our services are independent organisations and handle it under their own privacy policies. ECS does not control their privacy practices, and we recommend that you review their policies to understand how your information may be collected, used or disclosed.

7. How Long Do We Keep Your Personal Data?

ECS retains your Personal Data only as long as necessary to fulfil the purpose(s) for which it was collected, such as replying to your enquiry or running the Website.

ECS may further retain and use this Personal Data as necessary to comply with legal obligations, maintain accurate accounting, financial and other operational records, resolve disputes, and enforce agreements.

While ECS works to fulfil deletion requests, it may retain the same where required to fulfil:

Contractual obligations: Completing contractual obligations or addressing support queries.
Fraud prevention and legal claims: Preventing fraud, resolving complaints, and addressing inquiries, or exercising/defending legal claims.
Legal compliance: Meeting ongoing legal obligations, exercising rights, or resolving disputes.

ECS may use anonymised or aggregated data derived from your use of its services and Website for statistical purposes, service improvement, research, and other lawful uses. This aggregated data is not considered Personal Data.

Once no longer needed, ECS securely deletes or anonymises your data. Some data, such as logs, may be kept for longer where the law requires it.

8. Security

We protect your information through our information security management system (ISMS), which is certified to ISO/IEC 27001. Our safeguards include access limited to those who need it, encryption in transit (the Website uses HTTPS), and logging and monitoring of system activity. If a security incident affects personal data, we investigate it promptly and notify affected parties and the relevant authorities as the law and our contracts require.

9. Your Rights

You have the right to:

Access: Ask for a summary of the Personal Data we hold about you and how we use it, and for the identities of those we have shared it with.
Correct or erase: Ask us to correct, complete, update or delete your Personal Data.
Withdraw consent: Where we rely on your consent, withdraw it at any time, as easily as you gave it. This does not affect what we did before you withdrew it.
Raise a grievance: Complain to our Grievance Officer about how we have handled your Personal Data or your request.
Nominate: Name another person to exercise these rights for you in the event of your death or incapacity.

Write to the contact in Section 13 and we will respond within 30 days. We may need to confirm who you are first, and we may have to keep some data where the law requires it.

If your grievance is not resolved through this process, you can complain to the Data Protection Board of India.

10. Cookies

The Website does not set cookies and does not use analytics or advertising tools. If that changes, we will update this Policy first and ask for your consent where the law requires it.

11. Changes to This Policy

ECS may change this Policy from time to time. We will publish the new version on this page and update the version and date at the top. Please review it periodically to understand how ECS protects your Personal Data.

If you have any suggestions or questions, you may contact ECS’s Grievance Officer.

12. Children’s Policy

The Website is not intended for children under the age of 18. We do not knowingly collect Personal Data from minors. If you believe a child has sent us Personal Data, please tell our Grievance Officer and we will delete it.

13. Contact and Grievance

Grievance Officer: Amit Joshi
Email: hello@eastcs.com
Address: East Consultancy Services Private Limited, 320-1/1, Raheja Arcade, Koramangala Industrial Layout, Koramangala, Bengaluru, Karnataka, India – 560095.
Hours: Monday to Friday, 9 AM to 6 PM IST

14. Data Protection Officer

ECS has appointed a Data Protection Officer (DPO) responsible for overseeing the implementation of the organisation’s data protection framework and ensuring ongoing compliance with applicable data protection laws and regulations.

Details of ECS’s Data Protection Officer:
Name: Vinoth Kanna
Office Address: East Consultancy Services Private Limited, 320-1/1, Raheja Arcade, Koramangala Industrial Layout, Koramangala, Bengaluru, Karnataka, India – 560095.
Email Address: vinoth@eastcs.com