Skip to content
Chokmah

Privacy policy

Privacy policy

Last updated: [TO BE COMPLETED: effective date of this policy]

This policy explains what personal data Chokmah collects through this website, why, how long it is kept, and the rights you have under India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (MeitY data protection framework). It is written to describe what the site actually does, not a boilerplate that describes tracking we do not run.

Who is responsible for your data

The data fiduciary for this website is Chokmah ([TO BE COMPLETED: registered legal entity name]), an AI adoption practice based in Bengaluru, Karnataka, India, registered office at [TO BE COMPLETED: registered office address in Bengaluru].

For any question about this policy, or to exercise a right described below, contact admin@chokmah.in. The person responsible for answering data-protection questions and handling grievances is [TO BE COMPLETED: name of the grievance/contact officer], reachable at the same address.

What we collect, and only when you send it

We do not collect personal data from you unless you submit the contact form or email us. There is no account system, no login, and no profiling. When you submit the contact form, we store:

  • your name;
  • your work email address;
  • your company;
  • your role and team size (chosen from fixed options, used only to route your enquiry);
  • your area of interest (which service you are asking about);
  • your message;
  • the fact that you gave consent to be contacted;
  • the page path you submitted the form from.

For security and spam control only, we also store a salted, one-way SHA-256 hash of your IP address, your browser user-agent string, and the date and time of submission. Your raw IP address is never written to our database: only the irreversible hash, which we cannot turn back into an address.

Why we hold it, and the legal basis

We process this data for one purpose: to read and reply to your enquiry, and to keep a record of that correspondence. The legal basis under the DPDP Act, 2023 is your consent, given when you tick the consent box and submit the form. The salted IP hash, user-agent and timestamp are processed to protect the form against automated abuse.

What we do not do

  • We do not send marketing email. There is no newsletter and no automated drip sequence.
  • No email marketing provider receives your submission. It goes into our own database and nowhere else.
  • We use no third-party analytics, no advertising pixels, and no tracking cookies. See the cookie policy.
  • We do not sell, rent or share your personal data with any third party for their own purposes.

Who can see it

Submissions are readable only by authenticated Chokmah staff through a password-protected admin area. They are not exposed on any public page or public API. We may use a hosting or infrastructure provider to run the website and store its database ([TO BE COMPLETED: hosting provider and data-centre region]), which processes the data only on our instructions and only to keep the service running.

Cross-border processing

If our hosting or infrastructure provider stores data outside India, that transfer is made in line with the DPDP Act, 2023, which permits transfer of personal data except to countries restricted by the Central Government. We will update this section to name the processing location once hosting is finalised: [TO BE COMPLETED: hosting provider and data-centre region].

How long we keep it

We retain contact-form submissions for 24 months from the date of submission, after which the record is manually anonymised or deleted. We keep records only as long as needed to handle your enquiry and any follow-up, consistent with the storage-limitation principle of the DPDP Act, 2023. There is no automated deletion job in this version of the site; anonymisation is done by hand on the retention schedule above.

Your rights under the DPDP Act, 2023

As a data principal, you have the right to:

  • access a summary of the personal data we hold about you and how we are processing it;
  • correct, complete or update inaccurate or outdated data;
  • erase your data where it is no longer needed for the purpose you gave it;
  • withdraw consent at any time: this does not affect processing already carried out;
  • nominate another person to exercise your rights in the event of death or incapacity;
  • grievance redressal: raise a concern with us and receive a response.

To exercise any of these, email admin@chokmah.in. We will respond to a grievance within the timeline required by the DPDP Rules, 2025, and in any case within 90 days. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

Security

The admin area is behind authentication. IP addresses are stored only as salted hashes. Our server-side logs record the outcome of a form submission and a short prefix of the salted hash for abuse monitoring: never your message, your email address or your raw IP. We apply standard transport and header protections to the site.

Children

This is a business-to-business site intended for professionals. We do not knowingly collect data from children. If you believe a child has submitted data, contact us and we will delete it.

Changes to this policy

We may update this policy as the site or the law changes. The effective date at the top reflects the current version. Material changes will be reflected here; there is no mailing list to notify because we do not keep one.

Contact

Questions, requests and grievances: admin@chokmah.in. See also our terms of use and cookie policy.