Privacy Policy

Effective Date: 19 August 2026
Last Updated: 19 August 2026

NEOSTRATEGY CONSULTING LLP (“NeoStrategy“, “we“, “us” or “our“) respects your privacy and is committed to protecting personal information.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you visit www.neostrategy.in, submit an enquiry, interact with our content, register for a service, communicate with us or otherwise interact with us online.

1. Who We Are

This Policy is intended to operate across jurisdictions. Where the law of your jurisdiction provides stronger privacy rights or protections, those rights will continue to apply.

The Website is operated by:

NEOSTRATEGY CONSULTING LLP
Hyderabad, Telangana, India
Email: [email protected]

Depending on the applicable jurisdiction and nature of processing, NeoStrategy may act as a Data Fiduciary, Data Controller, Business, Service Provider, Processor or equivalent entity.

2. Scope

This Policy applies to personal information collected through:

the Website;
contact forms;
strategy-session requests;
email communications;
downloads and resource requests;
registrations;
newsletters;
professional enquiries;
applications;
events;
social-media interactions;
other online interactions with NeoStrategy; and
other communications that expressly reference this Policy.

This Policy does not necessarily apply to information processed solely on behalf of a NeoStrategy client where NeoStrategy acts as a processor or service provider under a separate agreement.

3. Information We Collect

Depending on your interaction with us, we may collect the following categories of information.

Information You Provide

This may include:

name;
email address;
telephone number;
company or organisation;
job title;
business information;
enquiry details;
information provided during consultations;
information contained in communications;
billing information where relevant; and
other information you voluntarily provide.

Information Collected Automatically

When you access the Website, certain technical information may be collected, including:

IP address;
browser type;
device type;
operating system;
language preferences;
approximate location derived from technical information;
pages visited;
referring pages;
timestamps;
interaction data;
Website performance information; and
cookie and similar technology identifiers.

The precise information collected depends on the technologies enabled on the Website.

4. Information We Do Not Intentionally Seek

Unless expressly necessary for a lawful purpose, please do not submit:

government identification numbers;
financial-account credentials;
passwords;
health information;
biometric information;
precise geolocation;
information concerning children; or
other sensitive or special-category information

through general Website forms.

If you voluntarily provide such information, we will process it only where permitted or required by applicable law.

5. Purposes of Processing

We may process personal information to:

respond to enquiries;
arrange consultations or strategy sessions;
provide requested services;
communicate with existing and prospective clients;
administer programmes, resources and events;
send requested materials;
manage commercial relationships;
process transactions where applicable;
maintain Website security;
detect fraud, abuse or malicious activity;
analyse Website performance;
improve our Website and services;
personalise experiences where permitted;
send marketing communications where legally permitted;
comply with legal and regulatory obligations;
establish, exercise or defend legal claims;
protect our rights, property and systems; and
perform other purposes disclosed to you at or before collection.

We will not use personal information for materially incompatible purposes without providing appropriate notice or obtaining consent where required.

6. Legal Bases for Processing

Where GDPR or substantially equivalent legislation applies, we may rely on one or more of the following legal bases:

Consent

Where required, we will obtain freely given, specific, informed and unambiguous consent.

You may withdraw consent at any time.

Withdrawal does not affect processing carried out before withdrawal.

Contract

We may process information where necessary to enter into or perform a contract with you.

Legitimate Interests

We may process information where necessary for legitimate interests, provided those interests are not overridden by your rights and freedoms.

These interests may include Website security, fraud prevention, service improvement, business administration and legally permissible direct marketing.

Legal Obligation

We may process information where necessary to comply with applicable law.

Vital Interests or Public Interest

Where recognised by applicable law, we may process information to protect vital interests or perform a task carried out in the public interest.

7. India — Digital Personal Data Protection

For individuals to whom India’s Digital Personal Data Protection Act 2023 (“DPDP Act“) applies, NeoStrategy intends to process Digital Personal Data in accordance with the DPDP Act and applicable rules and regulations.

Where consent is required, our notices and consent mechanisms will clearly communicate relevant information regarding:

the personal data being collected;
the purpose of processing;
the services or uses enabled by processing;
methods for withdrawing consent;
methods for exercising applicable rights; and
methods for submitting complaints.

8. European Economic Area

Where EU GDPR applies, you may have rights including:

access;
rectification;
erasure;
restriction of processing;
objection;
data portability;
withdrawal of consent; and
rights relating to certain automated decision-making.

You also have the right to lodge a complaint with your relevant data-protection supervisory authority.

9. United Kingdom

Where UK data-protection law applies, NeoStrategy will process personal data in accordance with applicable UK GDPR and privacy/electronic-communications requirements.

You may have rights including access, rectification, erasure, restriction, objection, portability and rights concerning automated decision-making, subject to statutory exceptions.

10. California Privacy Rights

If the California Consumer Privacy Act, as amended (“CCPA/CPRA“), applies to our processing, California residents may have rights including, where applicable:

the right to know/access;
the right to correct;
the right to delete;
the right to opt out of sale or sharing;
the right to limit certain uses of sensitive personal information; and
the right to non-discrimination.

NeoStrategy does not intend to sell personal information for monetary consideration.

If our activities constitute “selling” or “sharing” under applicable California law, appropriate opt-out mechanisms will be provided.

11. Other Jurisdictions

Depending on your location and our activities, additional rights may arise under applicable privacy legislation, including laws in Brazil, Canada, Australia, Singapore, South Africa, the UAE, the United States and other jurisdictions.

Where mandatory local requirements apply, NeoStrategy will comply with those requirements to the extent applicable.

12. Marketing Communications

Where permitted by law, we may send information about NeoStrategy, our services, resources, events or related offerings.

Where consent is legally required, we will obtain it before sending marketing communications.

You may unsubscribe at any time using the unsubscribe mechanism provided in the communication or by contacting us.

Transactional, administrative and service-related communications may continue where legally permitted.

13. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy.

Certain technologies may be strictly necessary for the Website to operate.

Non-essential analytics, advertising, personalisation or similar technologies will be used in accordance with applicable consent requirements.

14. Third-Party Service Providers

We may use third-party service providers to support:

Website hosting;
security;
analytics;
email;
customer relationship management;
scheduling;
payment processing;
communications;
cloud storage;
forms;
marketing;
Website performance; and
other business operations.

Such providers may process personal information on our behalf.

We seek to use appropriate contractual, organisational and technical safeguards.

15. Third-Party Links

The Website may contain links to third-party websites.

Their privacy practices are governed by their own policies.

NeoStrategy is not responsible for third-party privacy practices.

You should review the privacy notice of any third-party service before providing information.

16. International Transfers

NeoStrategy may use service providers or infrastructure located outside India or your country of residence.

Where personal information is transferred internationally, we will use appropriate safeguards required by applicable law, which may include contractual safeguards, adequacy mechanisms, approved contractual clauses, consent where legally permissible or other recognised transfer mechanisms.

17. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

provide services;
maintain business records;
comply with legal obligations;
resolve disputes;
enforce agreements; and
protect our legitimate interests.

Where information is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable legal or regulatory retention requirements.

18. Security

We use reasonable technical and organisational measures appropriate to the risks associated with processing personal information.

These may include access controls, authentication mechanisms, secure communications, backups, monitoring, vendor controls, data minimisation and administrative safeguards.

However, no online system can be guaranteed to be completely secure.

19. Personal Data Breaches

Where applicable law requires notification of a personal-data breach, NeoStrategy will notify relevant individuals, regulators or other authorities within the timeframes and in the manner required by law.

20. Children’s Privacy

The Website is not intentionally directed toward children.

We do not knowingly collect children’s personal data except where legally permitted and where appropriate consent or another lawful basis has been obtained.

Where applicable law requires parental consent, age assurance or additional safeguards, those requirements will apply.

21. Automated Decision-Making and Profiling

NeoStrategy does not intend to make decisions producing legal or similarly significant effects solely through automated processing of Website users’ personal information.

Where applicable law grants rights concerning automated decision-making or profiling, those rights will apply.

22. Your Privacy Rights

Depending on applicable law, you may have the right to:

access your personal information;
correct inaccurate information;
delete information;
restrict processing;
object to processing;
withdraw consent;
receive a portable copy;
opt out of certain marketing or tracking;
opt out of sale or sharing where applicable;
request information about processing;
lodge a complaint; and
exercise other statutory rights.

We may need to verify your identity before fulfilling certain requests.

We will not discriminate against you for exercising privacy rights where prohibited by law.

23. Exercising Your Rights

You may submit a privacy request by contacting:

[email protected]

Please include:

your name;
the email address associated with your interaction with NeoStrategy;
the nature of your request; and
information reasonably necessary to identify the relevant records.

We will respond within the period required by applicable law.

24. Complaints

If you have concerns regarding our handling of personal information, please contact us first: