PRIVACY POLICY

1. Introduction

Acquisory Consulting LLP (“Acquisory”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, store and safeguard personal data, and the rights available to you. It applies to our website (acquisory.com), our services, events and communications, across our offices in India and the United Arab Emirates.

This Policy is intended to align with the Digital Personal Data Protection Act, 2023 (India) (“DPDPA”) and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”), together with other applicable laws.

2. Who We Are

Acquisory Consulting LLP is a boutique transaction advisory and consulting firm founded in 2010, with offices in Delhi-NCR, Mumbai, Bengaluru and Dubai. For the purposes of this Policy, Acquisory acts as the Data Fiduciary (under the DPDPA) and Data Controller (under the UAE PDPL) in respect of the personal data it determines the purpose and means of processing.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

  • Identity and contact data: name, job title, employer, email address, telephone number and postal address.
  • Engagement data: information provided in connection with our advisory engagements, including know-your-customer (KYC), due diligence and related information.
  • Website and technical data: IP address, browser and device information, and usage data collected through cookies and similar technologies.
  • Communications: enquiries, event and webinar registrations, and newsletter subscriptions.
  • Recruitment data: curriculum vitae/résumés and related information submitted by applicants.

Where we process sensitive or financial information for the purpose of an engagement, we do so only to the extent necessary and with appropriate safeguards.

4. How We Use Personal Data

We use personal data for the following purposes:

  • To provide, manage and improve our advisory and consulting services.
  • To respond to enquiries and communicate with you.
  • To organise and manage events, webinars and newsletters.
  • To comply with legal, regulatory, KYC/AML and contractual obligations.
  • To operate, secure and improve our website.
  • For recruitment and evaluation of applicants.
  • For marketing communications, where permitted and with your consent where required.

5. Legal Basis for Processing

We process personal data on one or more of the following bases, as permitted under the DPDPA and UAE PDPL: your consent; the performance of a contract with you; compliance with a legal obligation; and our legitimate interests, provided these are not overridden by your rights and interests.

6. Sharing and Disclosure

We do not sell personal data. We may share personal data with: our professional teams, affiliates and alliance partners; service providers and processors acting on our behalf under appropriate confidentiality and data-protection obligations; regulators, courts and public authorities where required by law; and parties to a transaction where relevant and lawful. We require third parties to protect personal data and to process it only as instructed.

7. International Data Transfers

As we operate across India and the UAE, personal data may be transferred and processed outside your country of residence. Where we transfer personal data across borders, we implement appropriate safeguards as required by applicable law.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or for longer where required by legal, regulatory and contractual obligations. When personal data is no longer required, it is securely deleted or anonymised.

9. Data Security

Acquisory is ISO/IEC 27001 certified and implements appropriate technical and organisational measures designed to protect personal data against loss, misuse and unauthorised access, disclosure, alteration or destruction.

10. Your Rights

Subject to applicable law and any legal exemptions, you may have the right to:

  • Access the personal data we hold about you and information about its use.
  • Request correction or updating of inaccurate or incomplete data.
  • Request erasure of your personal data.
  • Withdraw consent previously given, at any time.
  • Seek redressal of grievances in relation to the processing of your data.
  • Nominate another individual to exercise your rights in the event of death or incapacity (under the DPDPA).

To exercise any of these rights, please contact us using the details in Section 15.

11. Cookies

Our website uses cookies and similar technologies to enable core functionality, analyse usage and improve your experience. You can manage or disable cookies through your browser settings; some features of the website may not function properly as a result.

12. Children’s Data

We do not knowingly collect the personal data of children without verifiable consent of a parent or lawful guardian, in line with the requirements of the DPDPA. If you believe we have collected such data, please contact us and we will take appropriate steps.

13. Third-Party Links

Our website may contain links to third-party websites or resources. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. The current version will be posted on acquisory.com with the “last updated” date shown above.

15. Contact Us / Grievance Officer

For questions, requests or grievances regarding this Policy or your personal data, please contact:

Acquisory Consulting LLP
Email: admin@acquisory.com
Registered office: Unit 1116, 11th Floor, World Trade Tower (WTT), C-1, Sector 16, Noida – 201301, India
Middle East office: Office 604, Bay Square 11, Business Bay, P.O. Box 118767, Dubai, UAE