Privacy Policy

Last Updated: 25 August 2026

CYBRSECURA is a brand of Rao Digital Solutions LLP (“CYBRSECURA”, “we”, “us”, or “our”). We respect your privacy and are committed to protecting personal data and handling it responsibly.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit or interact with cybrsecura.com (the “Website”), contact us, schedule a consultation, or otherwise communicate with us through the Website.

This Privacy Policy is intended to address applicable requirements under Indian data protection law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable rules, and the General Data Protection Regulation (EU) 2016/679 (“GDPR”), where the GDPR applies to our processing activities.

1. Who We Are

The Website is operated by:

Rao Digital Solutions LLP
Brand: CYBRSECURA

Website: https://cybrsecura.com

For privacy-related questions, requests or complaints, please contact:

Email: privacy@cybrsecura.com

For individuals whose personal data is subject to the GDPR, Rao Digital Solutions LLP acts as the data controller where it determines the purposes and means of processing personal data.

For individuals whose personal data is subject to the DPDP Act, Rao Digital Solutions LLP may act as the Data Fiduciary where it determines the purpose and means of processing personal data.

2. Personal Data We Collect

The personal data we collect depends on how you interact with us.

2.1 Information You Provide

When you contact us, submit an enquiry, request information, schedule a consultation, or communicate with us, we may collect:

  • Name
  • Business or personal email address
  • Telephone or mobile number
  • Company or organization name
  • Job title or designation
  • Information about your requirements or enquiry
  • Meeting or appointment details
  • Other information that you voluntarily provide to us

We encourage you not to submit passwords, authentication credentials, confidential security information, financial information, or other sensitive information through ordinary Website forms or email unless we specifically request that information through an appropriate secure channel.

2.2 Information Collected Automatically

When you visit the Website, certain technical information may be collected automatically, depending on the technologies deployed on the Website.

This may include:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Date and time of access
  • Pages visited
  • Referring website or source
  • General Website usage information
  • Information required to maintain Website security and functionality

We do not use automatically collected information to identify you personally unless reasonably necessary for security, fraud prevention, legal compliance, or another legitimate purpose.

3. How We Use Personal Data

We may use personal data for the following purposes.

3.1 Responding to Enquiries

We may use information you provide to:

  • Respond to enquiries
  • Provide information about our services
  • Understand your requirements
  • Arrange consultations or meetings
  • Follow up on requests that you have made

3.2 Providing Services

Where you become a client or prospective client, we may use personal data to:

  • Evaluate prospective engagements
  • Prepare proposals and statements of work
  • Communicate regarding services
  • Deliver cybersecurity, risk, privacy, governance and compliance advisory services
  • Manage client relationships
  • Maintain appropriate business and contractual records

3.3 Website Operation and Security

We may process information to:

  • Operate and maintain the Website
  • Improve Website functionality and user experience
  • Monitor Website performance
  • Detect and prevent security incidents
  • Prevent fraud, abuse and unauthorized access
  • Troubleshoot technical problems

3.4 Legal and Business Purposes

We may process personal data to:

  • Comply with applicable laws and regulations
  • Maintain tax, accounting and business records
  • Respond to lawful requests from authorities
  • Establish, exercise or defend legal claims
  • Protect our rights, property and legitimate business interests

3.5 Marketing and Communications

Where permitted by applicable law, we may use contact information to provide information about our services, cybersecurity and privacy insights, events, or other business communications.

Where consent is required, we will obtain the appropriate consent before sending such communications.

You may opt out of marketing communications at any time.

4. Legal Basis for Processing under GDPR

Where the GDPR applies, we process personal data on one or more of the following legal bases:

Consent

Where you have provided consent for a specific processing activity, we may process your personal data based on that consent.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Contract or Pre-Contractual Steps

We may process personal data where necessary to take steps at your request before entering into a contract or to perform a contract with you.

For example, we may process contact information to respond to a request for a proposal or to discuss a potential engagement.

Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

These interests may include:

  • Responding to business enquiries
  • Managing prospective and existing client relationships
  • Securing our Website and systems
  • Preventing fraud and abuse
  • Improving our services
  • Protecting our legal and commercial interests

Legal Obligations

We may process personal data where necessary to comply with a legal obligation applicable to us.

5. Processing under Indian Data Protection Law

Where the DPDP Act applies, we process digital personal data in accordance with applicable requirements concerning lawful processing, purpose limitation, transparency, security safeguards, retention and the rights available to Data Principals.

Where consent is required, we will seek consent in accordance with applicable law and provide information regarding the purpose for which personal data is processed.

Where processing is based on consent, consent may be withdrawn in accordance with applicable law.

The DPDP Act and the Digital Personal Data Protection Rules, 2025 contain phased commencement provisions. Our privacy practices will be updated as applicable provisions become operative.

6. Cookies and Similar Technologies

The Website may use cookies and similar technologies.

Depending on the technologies deployed, these may be used for:

  • Essential Website functionality
  • Security
  • Performance and reliability
  • Website analytics
  • Understanding how visitors use the Website
  • Other functionality provided by third-party services

Where applicable law requires consent for non-essential cookies or similar technologies, we will seek that consent through an appropriate mechanism.

You may also control or disable cookies through your browser settings. Disabling certain cookies may affect Website functionality.

The specific cookies and technologies used by the Website may change as we add, remove or update Website functionality.

7. Contact Forms and Appointment Scheduling

We may provide contact forms, enquiry forms, appointment scheduling tools or similar functionality on the Website.

When you submit information through a contact form or scheduling service, we may collect information such as:

  • Name
  • Email address
  • Telephone number, where provided
  • Organization or company
  • Your enquiry or requirements
  • Appointment details
  • Other information that you voluntarily provide

The information may be processed by the Website infrastructure and by third-party service providers used by us to operate forms, scheduling, communications or related business functions.

We use this information primarily to respond to your enquiry, communicate with you, arrange meetings, evaluate potential engagements, and provide requested services or information.

We will not ask you to provide sensitive security information through an ordinary Website contact form unless an appropriate secure mechanism is provided.

8. Third-Party Service Providers

We may use third-party service providers to support the operation of our Website and business.

These providers may support functions including:

  • Website hosting
  • Website security
  • Contact forms
  • Appointment scheduling
  • Email and communications
  • Analytics
  • Customer relationship management
  • Document and business administration
  • Other technology and operational services

Where appropriate, we take reasonable steps to ensure that service providers process personal data only for authorized purposes and maintain appropriate security measures.

Third-party providers may process personal data in accordance with their own privacy policies and terms.

We will update this Privacy Policy where material changes to our use of third-party services affect how personal data is processed.

9. Sharing of Personal Data

We may disclose personal data to the following categories of recipients where necessary and permitted by applicable law:

  • Technology and service providers
  • Website hosting and security providers
  • Contact-form and scheduling providers
  • Email and communications providers
  • Professional advisers
  • Contractors and consultants supporting our business or services
  • Government authorities and regulators where required or permitted by law
  • Courts, tribunals or other authorities where necessary to establish, exercise or defend legal rights
  • A purchaser, successor or other entity involved in a merger, restructuring, acquisition or transfer of our business or assets

We do not sell personal data.

We do not disclose personal data to third parties for their independent marketing purposes unless permitted by applicable law and, where required, with your consent.

10. International Data Transfers

Some third-party service providers used by us may process or store personal data outside India or outside the European Economic Area (“EEA”).

Where the GDPR applies and personal data is transferred outside the EEA, we will use an appropriate lawful transfer mechanism where required, which may include:

  • An adequacy decision;
  • Standard Contractual Clauses approved by the European Commission; or
  • Another lawful transfer mechanism recognized under applicable GDPR requirements.

Where Indian law imposes requirements concerning transfers of personal data outside India, we will comply with those requirements as applicable.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, or for as long as required to meet applicable legal, regulatory, contractual, tax, accounting or other obligations.

The appropriate retention period may depend on:

  • The nature of the personal data
  • The purpose for which it was collected
  • Whether an ongoing business relationship exists
  • Contractual requirements
  • Legal and regulatory obligations
  • Tax and accounting requirements
  • The need to establish, exercise or defend legal claims
  • Security and fraud-prevention requirements

When personal data is no longer required, we will take reasonable steps to securely delete, anonymize or otherwise dispose of it, subject to applicable retention requirements.

12. Security of Personal Data

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, destruction and other reasonably foreseeable security threats.

Depending on the nature of the information and the associated risks, these measures may include:

  • Access controls
  • Authentication and authorization controls
  • Encryption where appropriate
  • Secure system configurations
  • Backup and recovery measures
  • Monitoring and logging
  • Security updates
  • Organizational and contractual safeguards

However, no website, internet transmission or information-storage system can be guaranteed to be completely secure.

13. Your Privacy Rights

Your rights depend on the applicable law and your circumstances.

13.1 Rights under Indian Data Protection Law

Where applicable under the DPDP Act and associated rules, you may have rights including:

  • The right to access information about personal data being processed
  • The right to request correction of inaccurate or incomplete personal data
  • The right to request erasure of personal data where applicable
  • The right to withdraw consent where processing is based on consent
  • The right to exercise other rights available to Data Principals under applicable law
  • The right to raise a grievance concerning the processing of your personal data

13.2 Rights under GDPR

Where the GDPR applies, you may have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete personal data
  • Request erasure of personal data
  • Request restriction of processing
  • Object to certain processing
  • Receive personal data in a portable format where the right to data portability applies
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with a competent data protection supervisory authority

These rights are subject to applicable legal conditions, limitations and exemptions.

14. Exercising Your Rights

To exercise a privacy right, withdraw consent, or raise a privacy-related concern, contact us at:

privacy@cybrsecura.com

Please provide sufficient information for us to understand and process your request.

We may request additional information reasonably necessary to verify your identity before responding to a request.

We will respond to valid requests within the time period required by applicable law.

If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant supervisory, regulatory or data protection authority.

Individuals subject to the GDPR may contact the data protection supervisory authority in the country where they live, work, or where they believe an infringement has occurred.

Individuals subject to Indian data protection law may use the applicable grievance and regulatory mechanisms available under Indian law.

15. Children’s Privacy

The Website is intended primarily for businesses and professional users and is not directed at children.

We do not knowingly seek to collect personal data from children through the Website.

If we become aware that we have collected personal data from a child in circumstances where such collection is not permitted, we will take reasonable steps to address the situation in accordance with applicable law.

16. Automated Decision-Making and Profiling

We do not use personal data collected through the Website to make decisions producing legal or similarly significant effects on individuals through solely automated decision-making.

We do not use Website enquiries to make automated decisions about an individual’s eligibility for our services.

If our practices change in a manner that involves automated decision-making or profiling subject to applicable legal requirements, we will update this Privacy Policy accordingly.

17. Third-Party Websites

The Website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, security or content of third-party websites.

When you follow a third-party link, we recommend reviewing that third party’s privacy policy before providing personal data.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services
  • Changes to the Website
  • Changes in technology or third-party services
  • Changes in applicable privacy and data protection requirements
  • Changes to our processing activities

When we make material changes, we will update the Last Updated date at the beginning of this Policy and may provide additional notice where appropriate.

19. Contact Us

For privacy questions, requests, complaints or concerns, please contact:

Rao Digital Solutions LLP
Brand: CYBRSECURA

Privacy Contact: privacy@cybrsecura.com

Website: https://cybrsecura.com

We encourage you to contact us first so that we can attempt to resolve your concern directly.

20. Governing Law

This Privacy Policy is governed by the laws applicable in India.

Nothing in this Policy is intended to limit any mandatory rights that may apply to individuals under the GDPR or other applicable data protection legislation.

Important: This Privacy Policy should be kept consistent with the actual cookies, analytics tools, contact forms, scheduling services, hosting arrangements, email systems and other technologies deployed on the Website. Where our processing practices materially change, this Policy will be reviewed and updated accordingly.

Scroll to Top