Privacy Policy

This policy explains how Extant Consulting (“Extant”, “we”, “us”) handles personal information collected through this consulting website and through enquiries made on it.

It does not cover Extant Labs products or other applications, which may have their own privacy notices.

Who this applies to

This policy applies to people who visit the website and people who contact us about our consulting services through the contact form.

Extant is based in India. We handle personal information in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) as those instruments come into force.

On 13 November 2025 the Central Government notified both the DPDP Rules (G.S.R. 846(E)) and the phased commencement of the DPDP Act (G.S.R. 843(E)). Under that timetable: Board and related machinery provisions took effect on notification; Consent Manager registration (Rule 4) and matching Act provisions take effect one year later (13 November 2026); and the main notice, security, rights and related obligations (including Rules 3, 5 to 16, 22 and 23) take effect eighteen months after notification (13 May 2027). We will update this policy as further obligations become operative.

Information we collect

Information you give us

When you submit the contact form, we collect:

• your name
• your email address
• your company, if you provide it
• your message

Please avoid sending sensitive information unless it is necessary for your enquiry.

Technical information

When you browse the site, ordinary website hosting may process technical details such as IP address, browser type, pages viewed and the time of your visit. We do not run a separate marketing analytics product on this website.

How we collect it

We collect personal information:

• directly from you when you send an enquiry
• automatically through normal website operation

This website does not offer newsletter sign-ups, online booking or account registration.

Why we use it

We use personal information for the purpose for which you provide it: to receive and respond to consulting enquiries, understand whether we can help, operate and secure the website, and meet legal obligations where they apply.

Submitting the contact form is a clear, voluntary request for us to process the details you enter so we can reply. If you no longer want us to continue that processing for an open enquiry, tell us through the contact form.

We do not sell personal information.

Who we share it with

We may share personal information with service providers who help us run this website and respond to enquiries. We may also disclose information where required or authorised by law.

Contact form submissions are delivered by email through Resend, our email delivery provider. The website also loads fonts through Google Fonts. Our website host may process technical information needed to serve the site. Those providers process information under their own terms when you use the form or load the site.

Third-party websites linked from this site are not covered by this policy.

Processing outside India

Resend, Google Fonts and related infrastructure may process information on systems outside India. Under the DPDP Act, personal data may be transferred outside India except to a country or territory that the Central Government notifies as restricted. We do not control where those providers store their data. If further restrictions are notified, we will review our arrangements.

Security and retention

We take reasonable steps to protect personal information from misuse, loss and unauthorised access. No method of transmission over the internet is completely secure.

We keep enquiry information for as long as we need it to respond and maintain ordinary business records, then delete or de-identify it when it is no longer required for that purpose, unless the law requires otherwise.

Your choices and requests

You can ask us about the personal information we hold about you in connection with this website, ask us to correct it if it is wrong or out of date, or ask us to erase it where we no longer need it for the purpose you contacted us about and retention is not required by law.

As further DPDP Act and DPDP Rules provisions take effect, additional rights and notice requirements may apply. Where those rights apply, we will honour them. For privacy questions or requests, use our contact form and note that your message relates to privacy. We will respond through the contact details you provide.

If you are not satisfied with our response, you may have remedies under applicable law, including—once the relevant provisions are in force—making a complaint to the Data Protection Board of India in the manner prescribed.

Changes

We may update this policy from time to time, including as Indian data protection requirements commence or change. The effective date above will change when we do.

Contact

For privacy questions, access or correction requests, or complaints about this website, use our contact form and note that your message relates to privacy.