Privacy Policy
Ekatrya collects only what it needs to answer an enquiry and keep this site running, holds it no longer than that requires, and treats the responsibility with the same discipline it brings to every other part of its work.
Effective 26 July 2026
Who this policy covers
This policy applies to ekatrya.com and to the enquiries submitted through it. Ekatrya Group Inc. ("Ekatrya", "we") is the controller of the personal data described here.
It does not cover the separate, contract-governed handling of data inside client engagements. Where we process data on behalf of a client, that client is the controller and the terms of the engagement govern.
What we collect
When you submit the enquiry form, we receive the information you enter:
- Your name
- Your organization
- Your business email address
- The area of interest you select
- The message you write
- Your phone number and country, if you choose to provide them — both are optional
What we collect automatically
Your IP address is read when a form is submitted and held briefly in memory to limit how many submissions can arrive from one source in a minute. It is not written to a database and is not used to identify you.
This site bundles no analytics vendor and sets no advertising or tracking technologies. We do not build profiles, and we do not track you across other websites.
Why we use it, and on what basis
Enquiry details are used to read, route and answer your enquiry, and to continue the conversation if it leads somewhere. Where the General Data Protection Regulation applies, our basis is legitimate interest in responding to business enquiries directed at us — or, where you have asked us to contact you, your consent.
Technical rate-limiting data is processed on the basis of our legitimate interest in keeping the site available and free of automated abuse.
We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
Who else sees it
Enquiries are delivered to Ekatrya by email through Resend, our email delivery provider, and are then handled inside our own systems by the team best placed to answer.
We share personal data with service providers only where it is necessary to operate the site, and only under contracts that require them to protect it. We may also disclose data where the law requires it, or to establish or defend legal claims.
Where it goes
Ekatrya operates from India and works with clients in other regions, so personal data may be transferred to and processed in countries other than your own. Where such a transfer is subject to the GDPR or the UK GDPR, we rely on an adequacy decision or on Standard Contractual Clauses together with any additional measures the transfer requires.
How long we keep it
Enquiries are retained for up to 24 months from the last contact, so that we can pick up a conversation where it left off. Enquiries that become client engagements are retained under the terms of that engagement. Rate-limiting data is discarded within minutes and is never persisted.
Your rights
Subject to the law that applies to you, you may request access to the personal data we hold about you, ask us to correct or erase it, ask us to restrict how we use it, object to our use of it, or request a copy in a portable form. Where we rely on consent, you may withdraw it at any time.
Write to privacy@ekatrya.com and we will respond within the period the applicable law allows — one month under the GDPR. If you believe we have handled your data badly, you may also complain to your local supervisory authority.
How we protect it
This site is served over HTTPS with a strict Content Security Policy, HSTS, frame protection and a restrictive referrer policy. Enquiries are validated on the server, protected against automated submission, and rate-limited. Access to enquiry data inside Ekatrya is limited to the people who need it to respond.
No system is perfect, and we do not claim otherwise. We do commit to acting quickly and telling you honestly if something goes wrong.
Children
This is a business site and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to privacy@ekatrya.com and we will delete it.
Changes to this policy
When this policy changes materially we will update the effective date above and, where the change affects how we use data you have already given us, tell you directly.
Contact
Questions about this policy, or about the data we hold: privacy@ekatrya.com. General enquiries are best sent through the contact page.