Privacy Policy

1. Overview & Statutory Compliance

Wulven Consulting Services ("Wulven," "we," "us," or "our") respects your privacy and is committed to protecting digital personal data. This Privacy Policy governs our data collection, processing, and protection practices in compliance with applicable data protection legislation, including the Digital Personal Data Protection Act, 2023 ("DPDP Act") and relevant international business data standards.

Wulven operates strictly as a Business-to-Business (B2B) enterprise consulting firm. We collect and process personal data exclusively for specified, lawful business purposes, and we do not sell, rent, or trade personal data to third parties.

2. Roles Under the DPDP Act

Under the Digital Personal Data Protection Act, 2023:

• Data Fiduciary: Wulven Consulting Services acts as a Data Fiduciary in relation to digital personal data collected directly from site visitors, client corporate representatives, and prospective business contacts.
• Data Principal: You, as the individual user or corporate representative providing digital personal data, hold the status and rights of a Data Principal under the law.
• Data Processor: Any vetted technical infrastructure vendor engaged by Wulven to process digital personal data on our behalf pursuant to valid contracts.

3. Information We Collect

We collect digital personal data necessary for fulfilling corporate requests and delivering enterprise services:

4. Grounds for Processing Personal Data

In accordance with the DPDP Act, Wulven processes digital personal data based on:

• Consent: Explicit, affirmative consent provided by the Data Principal when submitting inquiry forms or requesting technical proposals.
• Legitimate Business Uses: Fulfilling contractual obligations, evaluating Statement of Work requirements, delivering requested operational services, and satisfying statutory or legal compliance requirements.

5. Data Principal Rights Under DPDP Act

As a Data Principal, you possess statutory rights regarding your personal data under the DPDP Act:

• Right to Access Information: Right to obtain a summary of digital personal data processed by Wulven and the identities of Data Processors with whom data has been shared.
• Right to Correction & Erasure: Right to request the correction of inaccurate data, completion of incomplete data, or erasure of personal data that is no longer necessary for the specified purpose.
• Right to Grievance Redressal: Right to readily available grievance redressal mechanisms regarding our obligations under the DPDP Act.
• Right to Nominate: Right to nominate another individual to exercise your Data Principal rights in the event of death or incapacity.
• Right to Withdraw Consent: Right to withdraw your consent at any time. Upon receipt of consent withdrawal notice, Wulven will cease processing your personal data within a reasonable timeframe.

6. Data Safeguards & Breach Notification

We implement reasonable security safeguards to prevent personal data breaches, including end-to-end encryption in transit (TLS/HTTPS), strict access controls, clean desk policies, and non-disclosure agreements with all internal personnel.

In the event of a personal data breach affecting digital personal data under our custody, Wulven will notify affected Data Principals and the Data Protection Board of India in accordance with the provisions and rules of the DPDP Act.

7. Cross-Border Data Transfers

Wulven may process or transfer digital personal data across international borders to support US enterprise clients, provided that such transfers comply with the DPDP Act and are not made to any territory restricted by applicable statutory notifications.