Privacy Policy
This policy explains what we collect when you use this website or contact us as a prospective or existing corporate client. Employee health information is handled under a separate and stricter notice — see our data protection page.
1. Who this policy covers
This policy applies to visitors to this website and to business contacts at client and prospective client organisations — for example an HR head who submits an enquiry or an EHS manager who requests a resource.
It does not cover the health records of employees we examine. Those are governed by the data protection notice, which applies stricter confidentiality and access controls.
2. What we collect
When you submit an enquiry we collect the information you provide: your name, work email, phone number, organisation, role, industry, approximate workforce size, the services you are interested in and any message you write.
We collect basic technical information automatically, such as pages viewed and approximate region, in order to understand how the site is used and to keep it secure. We do not use this to build advertising profiles.
3. Why we use it
To respond to your enquiry, prepare a proposal, and communicate with you about an engagement. To provide the resources you request. To maintain our client relationship, including scheduling and account management. To meet our own legal, accounting and audit obligations.
We rely on your consent for marketing communications and on legitimate business interest or contractual necessity for the rest. You can withdraw consent to marketing at any time without affecting an active contract.
5. How long we keep it
Enquiry records are retained for up to three years from the last interaction, so we can pick up a conversation where it left off. Records relating to a contracted engagement are retained for the duration of the contract and for the period afterwards required by tax, accounting and statutory obligations.
You can ask us to delete your business contact details earlier, and we will do so unless we are required to retain them.
6. Your rights
You may ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to particular uses. Write to our corporate desk and we will respond within the period required by applicable law.
If you are not satisfied with our response you may escalate to our grievance officer, and subsequently to the relevant authority under Indian data protection law.
8. Security
Information is transmitted over TLS and stored on infrastructure hosted in India with access restricted to staff who need it. Our security practices are described further in the data protection notice.
9. Changes to this policy
We update this policy when our practices change. The date at the top of this page shows when it was last revised.
Questions about this document? Write to care@drultimate.com or call +91 73890 33366. Where a signed master service agreement exists, its terms take precedence over this page.