Contents
For the purposes of the DPDP Act 2023 and, where applicable, the GDPR, the Data Fiduciary (Controller) is Cyber Commandos, a division of Venu & Vinay, a registered partnership firm of Chartered Accountants registered with the Institute of Chartered Accountants of India.
Cyber Commandos / a division of Venu & Vinay
Address: No. 1, 4th Floor, Ashoka Pillar, 1st Block, 3rd Cross, Jayanagar, Bengaluru 560011, Karnataka, India
Privacy queries: hello@cybercommandos.in
Website: cybercommandos.in
When you submit a contact form, gap analysis, service inquiry, or communicate with us, you may provide:
| Data Type | Why We Collect It | Required? |
|---|---|---|
| Name | Identify and address you correctly | Yes |
| Email address | Deliver reports; respond to inquiries; service communication | Yes |
| Phone number | Consultation scheduling; urgent notifications | Yes |
| Company name | Scope gap analysis; tailor service recommendations | Optional |
| Job title / role | Confirm authority to engage services | Optional |
| Revenue / company size | Recommend the appropriate service tier | Optional |
| Industry and target markets | Identify applicable compliance frameworks | Optional |
| Free-text responses and messages | Respond to your inquiry accurately | As submitted |
When you visit our website, the following may be collected automatically:
We do not collect payment card data directly. If payment processing is introduced, it will be handled by a PCI DSS-compliant processor. We will not store raw payment data on our systems.
We use your data only for purposes you would reasonably expect given the context in which it was collected:
We do not use your data for automated decision-making that produces legal or similarly significant effects without human review.
We process your personal data on the following lawful bases under the DPDP Act 2023 and, where applicable, the GDPR:
We do not sell your personal data. We do not share it with third parties for advertising purposes.
Our primary data storage is within India. Where cloud service providers used by us maintain infrastructure outside India, we ensure appropriate safeguards are in place consistent with DPDP Act requirements. This section will be updated if our data residency practices change materially.
This website may be served via GoDaddy, Netlify, Google, and Cloudflare infrastructure, among others. Each of these platforms maintain their own privacy policy governing data processed through their network. By using this website, you acknowledge that data may transit these platform's infrastructure subject to their terms, privacy policies, disclaimers, and other conditions/ legal requirements.
You may request deletion of your personal data at any time by emailing hello@cybercommandos.in. We will respond within 30 days and complete deletion promptly, except where retention is required by law or legitimate professional obligation, in which case we will inform you of the basis for continued retention.
Compliance documentation and policies created during your engagement belong to you and are stored on your own systems. Deletion of your personal data from our records does not affect your ownership of those deliverables.
As a compliance delivery firm, our own data security practices are held to the standard we implement for clients. Measures in place include:
No method of internet transmission is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authority as required by the DPDP Act and applicable law.
This website is designed to minimise unnecessary tracking.
| Type | Purpose | Required? |
|---|---|---|
| Essential | Security, DDoS protection, CDN performance | Yes - required for site function |
| Analytics | Privacy-first aggregate usage statistics. No personal identifiers. | Optional |
| Session / preference | Remember UI state or form progress within a session | Optional |
We do not use advertising cookies, retargeting pixels, or third-party marketing cookies.
You can control cookies through your browser settings. Blocking essential cookies may affect website functionality. Disabling non-essential cookies will not affect access to core content or services.
Under the DPDP Act 2023 and, where applicable, the GDPR, you have the following rights:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data, subject to legal retention obligations.
Withdraw marketing consent at any time without penalty.
Under the DPDP Act, nominate another person to exercise rights on your behalf.
Raise a complaint with us or with the Data Protection Board of India.
Email hello@cybercommandos.in with your name, company name, and a description of the right you wish to exercise. We will respond within 30 days as required by the DPDP Act. There is no charge for reasonable requests.
If you are unsatisfied with our response, you may escalate to the Data Protection Board of India constituted under the DPDP Act 2023.
Our services are intended for businesses and for individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us at hello@cybercommandos.in and we will delete that data promptly.
We may update this Privacy Policy to reflect changes in our practices, services, or applicable law. Updated versions will be posted on this page with a revised "Last Updated" date (see the top of the page).
Where changes materially affect how we process your personal data, we will notify you by email (where we hold your contact details) or by a prominent notice on this website, and will obtain fresh consent where required by law.
For any privacy queries, rights requests, or data concerns:
Email: hello@cybercommandos.in
Address: No. 1, 4th Floor, Ashoka Pillar, 1st Block, 3rd Cross, Jayanagar, Bengaluru 560011, Karnataka, India
Website: cybercommandos.in
We respond to all privacy requests within 30 days as required by the DPDP Act 2023.
