This policy explains how Zehaava and Concordia use and protect the information you give us when you use zehaava.com: what we collect, why, who we share it with, how long we keep it and what your rights are. It follows India’s Digital Personal Data Protection Act, 2023.
We are committed to protecting your privacy. If we ask you for information that can identify you when you use this website, we’ll use it only as this policy describes.
Who we are
This website is run by ZEHAAVA CONSULTANCY, a sole proprietorship owned by Mridul Khanna (GSTIN 36JGOPK3854F1ZX), at Dhrumatarus, Kondapur, Serilingampally, Rangareddy, Hyderabad, Telangana 500084, India. Concordia is a brand of Zehaava Consultancy, not a separate company. In this policy, “we”, “us” and “our” mean Zehaava Consultancy, including Concordia.
What we collect
When you send an enquiry (on the Contact page): your name, email address, phone number (optional), your message, and whether it is for Zehaava or Concordia.
When you request a session (on the Book Now page): your name, email address, phone number (optional), the session you want, your preferred day and time of day, and anything you add in the message.
Other details you choose to give us: we may also collect your job title, demographic details such as your postcode, preferences and interests, and your answers to customer surveys or offers.
To stop spam and abuse: when you submit either form, we keep a scrambled code made from your IP address (a one-way hash). We don’t keep the IP address itself. The code lets us limit how many messages one device can send in an hour.
How you use the website, if you agree: if you choose Accept on the cookie banner, Google Analytics records which pages you visit and how you got there, along with your approximate location and device type (see Cookies).
We don’t ask for sensitive details, such as financial, health or identity documents, through this website. Please don’t include them in your message.
Why we use it
We use this information to understand your needs and give you a better service, in particular:
- to reply to your enquiry and to arrange the session you asked for;
- to send you an email confirming we received your message;
- to keep the forms safe from spam and misuse;
- for our internal records;
- to improve our services and this website.
Marketing: if you agree to it, we may occasionally email you about new services, special offers or other information we think you’ll find interesting, and contact you by email, phone or post for market research. Contacting us doesn’t add you to a mailing list on its own. You can stop these messages at any time (see Controlling your information).
Your consent
We collect these details because you agree to it when you tick the consent box on the form. You can withdraw your consent at any time by writing to us (see Your rights). After that we stop using your details and delete them, unless the law requires us to keep them. Withdrawing consent doesn’t affect anything we did before you withdrew it.
Controlling your information
If you’ve agreed to receive marketing from us, you can change your mind at any time. Email connect@zehaava.com for Zehaava or concordia@zehaava.com for Concordia, and we’ll stop.
Who we share it with
We won’t sell, distribute or lease your personal information to third parties unless you give us permission or the law requires it. We’ll send you promotional information about third parties only if you tell us you want it.
We use these service providers to run the website, and they handle data only on our instructions:
- Supabase: stores form submissions. The data is kept in Mumbai, India.
- Resend: sends the confirmation and notification emails.
- Microsoft 365: hosts our email inboxes, where your messages reach our team.
- Netlify: hosts the website. Like any web host, it processes technical data such as your IP address to serve pages.
- Google Fonts: supplies the typefaces on the site. Your browser connects to Google to load them, which shares your IP address with Google.
- Google Analytics: measures how the website is used, only if you accept analytics cookies (see Cookies).
Some of these providers may process data outside India. We only use providers that protect personal data, and we don’t send data to any country the Government of India has restricted.
We may also disclose personal data if the law or a lawful order requires it.
How long we keep it
We keep enquiries and session requests, including the scrambled IP code, for 24 months from when you send them, and then delete them. Copies in our email inboxes are deleted on the same schedule.
Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask what personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to delete it;
- withdraw your consent;
- nominate someone to exercise these rights for you if you die or can no longer act yourself;
- raise a grievance with us about how we handle your data.
If you think any information we hold about you is wrong or incomplete, tell us as soon as possible and we’ll promptly correct it.
To use any of these rights, email us from the address you used on the form, or tell us how to confirm it’s you:
- about Concordia: concordia@zehaava.com
- about Zehaava, or anything else: connect@zehaava.com
We’ll reply within 24 business hours. If you aren’t satisfied with our answer, write to our Grievance Officer. If you’re still not satisfied, you can complain to the Data Protection Board of India.
Grievance Officer
If you have a complaint about how we handle your personal data, or about this website or our services, contact the Grievance Officer for the brand it concerns:
- Concordia: Sravya Talluri, Ops Leader, sravya@zehaava.com
- Zehaava: Mridul Khanna, Founder, mridul@zehaava.com
You can also write to either of them at the address under Contact. We’ll reply within 24 business hours.
Cookies
A cookie is a small file that a website places on your device. Cookies can help a website measure its traffic or remember your preferences, so it can respond to you as an individual. A cookie doesn’t give us access to your computer or to any information about you beyond what you choose to share with us.
We don’t use advertising cookies. We use one analytics tool, and only if you agree to it:
- Google Analytics (only if you choose Accept): shows us how many people visit, which pages they read, which files they download, roughly where they are (city and country) and what kind of device they use. We use it only for statistics, to improve the website, and not for advertising. It sets two cookies,
_gaand_ga_<ID>, which tell repeat visits apart and last up to 2 years. Google doesn’t store your IP address in these reports, and we keep the reports for 14 months. If you choose Reject, Google Analytics never loads. - Your cookie choice: when you choose Accept or Reject on the cookie banner, the website saves that choice in your browser’s storage so it doesn’t ask again. The choice stays in your browser and isn’t sent to us. We ask again after 12 months.
- Staff sign-in: our admin area sets cookies to keep our own staff signed in. They’re never set for visitors.
You can change your choice at any time using Cookie settings at the bottom of every page. If you change Accept to Reject, Google Analytics stops at once and its cookies are deleted. You can also clear your browser’s storage and cookies for this website.
Most browsers accept cookies automatically, but you can usually change your browser settings to decline them. If you do, some parts of the website may not work fully.
Children
Our services are for adults and organisations. We don’t knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we’ll delete them.
Security
We are committed to keeping your information secure, and we have put suitable measures in place to prevent unauthorised access or disclosure. Form submissions are sent over an encrypted connection and stored in a database only our team can access. No system is completely secure, but we take reasonable steps to protect your data and will act promptly if something goes wrong.
Changes to this policy
We may change this policy from time to time by updating this page, so please check it now and then. The “Last updated” date at the top shows when it last changed. If we make a significant change, we’ll say so clearly on this page.
Contact
ZEHAAVA CONSULTANCY, Dhrumatarus, Kondapur, Serilingampally, Rangareddy, Hyderabad, Telangana 500084
Email: connect@zehaava.com (Zehaava) · concordia@zehaava.com (Concordia)
Phone: +91 80198 64400 (Zehaava) · +91 77020 89900 (Concordia)