1. Who we are
This policy explains how PLM Pundits LLP (Sector 57, Gurugram, Haryana 122011, India) and PLM Pundits LLC (Austin, Texas, USA), together "PLM Pundits", "we" or "us", handle personal data collected through plmpundits.com.
For the purposes of the Digital Personal Data Protection Act, 2023 (India) we act as a data fiduciary, and for the purposes of the EU and UK General Data Protection Regulation we act as a controller. [Confirm which entity is responsible for which visitors.]
2. What we collect
When you submit our inquiry form we collect:
- Your name, work email, company, job title, phone number and country
- Your industry, areas of interest, project stage, timeline and message
- The date, time and version of the consent you gave
- How you reached us: campaign parameters (utm_source, utm_medium, utm_campaign), the page you submitted from and the referring page
- A one-way hash of your IP address, used for spam prevention and rate limiting. We do not store your IP address itself.
If analytics is enabled, we also collect usage data such as pages viewed and device type through [analytics provider], only after you accept analytics cookies.
3. Why we use it and our legal basis
- To respond to your inquiry and arrange a discovery conversation: based on your consent (DPDP Act section 6; GDPR Article 6(1)(a)) and steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
- To prioritise and route inquiries internally, including an internal lead score that is never shown to you or used to make decisions with legal effect: based on our legitimate interests (GDPR Article 6(1)(f)).
- To protect the site from spam and abuse: based on our legitimate interests and, in India, legitimate uses permitted by law.
- To understand how the site is used and improve it, where you have accepted analytics cookies: based on your consent.
We do not sell your personal data and we do not use it for automated decision-making.
5. International transfers
We operate from India and the United States, and our service providers may process data in other countries. Where personal data from the EU or UK is transferred outside those regions, we rely on appropriate safeguards such as Standard Contractual Clauses. Transfers from India follow any restrictions notified under the DPDP Act. [Confirm hosting regions.]
6. How long we keep it
We keep inquiry records for [24 months] from your last contact with us, unless you become a client, in which case contract records follow our client retention schedule. You can ask us to delete your data sooner at any time.
7. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you and how we use it
- Correct or complete inaccurate data
- Have your data erased
- Withdraw consent at any time, without affecting processing that has already taken place
- Object to or restrict processing based on legitimate interests (GDPR)
- Receive your data in a portable format (GDPR)
- Nominate another person to exercise your rights in the event of death or incapacity (DPDP Act)
- Have grievances addressed by us, and complain to the Data Protection Board of India or your local data protection authority
To exercise any of these rights, email contact@plmpundits.com. We will respond within the time required by applicable law.
8. Grievance officer
Name: [Grievance officer name]
Email: [grievance email address]
Address: Sector 57, Gurugram, Haryana 122011, India
10. Security
We protect personal data with encryption in transit (HTTPS), access controls, and by keeping secrets out of code and personal data out of logs. No system is perfectly secure; if a breach affects you, we will notify you and the relevant authorities as the law requires.
11. Children
Our site is intended for business users. We do not knowingly collect personal data from anyone under 18.
12. Changes to this policy
We may update this policy. The version and date at the top show when it last changed, and the version you agreed to is stored with your inquiry.