Privacy Policy
How we collect, use and protect your personal data — and the rights you have over it under India’s Digital Personal Data Protection Act, 2023.
Version 2026-10-19 · Last updated 19 October 2026
Who we are
Social Lab Environmental Solutions (“Social Lab”, “we”, “us”) is the Data Fiduciary for the personal data described here. We are at Office 306, Sunderban Complex, Baner, Pune 411045, India, and you can reach us at [email protected].
This notice is given under section 5 of the Digital Personal Data Protection Act, 2023 (“DPDP Act”). If you are reading it because you are about to submit an enquiry form, it tells you exactly what you are agreeing to.
What we collect, and why
We only collect what we need, and only for the purpose stated next to it.
| What | Why we need it | Basis |
|---|---|---|
| Name, work email, phone number, organisation | To reply to your enquiry and contact you about the service you asked about | Your consent |
| The message and topic you send us | To understand and answer your question | Your consent |
| The page you enquired from | To route your enquiry to the right team (EPR, CBAM, ESG, waste circularity, recycled polymer) | Your consent |
| CV and application details, if you apply for a job | To assess your application | Your consent |
| Analytics about pages viewed and how you arrived | To understand which content is useful | Your consent — off unless you turn it on |
| Server and security logs | To keep the site available and resist abuse | Legitimate use (s.7) |
We do not ask for, and ask that you do not send, sensitive details such as financial account numbers or health information through this website.
Your consent, and withdrawing it
Where we rely on consent, we ask for it plainly: an unticked box on the form, next to a description of what you are agreeing to. We record the wording you agreed to and when, so that both of us have the same record of it.
You can withdraw consent at any time, and it is as easy as giving it. Email [email protected] and we will stop processing on that basis and erase the data unless a law requires us to keep it. For cookies, use — your choice takes effect immediately.
Withdrawing consent does not make our earlier processing unlawful, and it may mean we can no longer answer an open enquiry.
Your rights as a Data Principal
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how we are processing it (s.11).
- Correction, completion, updating and erasure of your personal data (s.12). We will erase it unless retention is required for a legal purpose.
- Grievance redressal — a readily available means of raising a complaint with us (s.13), described below.
- Nominate another person to exercise these rights on your behalf if you die or become incapacitated (s.14).
To exercise any of these, email [email protected] with enough detail for us to identify your records. There is no fee. We will respond within the period prescribed under the Act and, in any case, as quickly as we reasonably can.
The Act also places a duty on you: please give accurate information, and do not file false or frivolous complaints (s.15).
Grievance Officer
If you are unhappy with how we have handled your personal data or your request, contact our Grievance Officer:
Grievance Officer — Social Lab Environmental Solutions
Email: [email protected]
Post: Office 306, Sunderban Complex, Baner, Pune 411045, Maharashtra, India
If we do not resolve your grievance to your satisfaction, you may complain to the Data Protection Board of India under section 13(3) of the DPDP Act.
How long we keep it
We keep enquiry data for as long as needed to answer you and for the business relationship that follows. Where an enquiry does not become a client relationship, we erase it once it is clear it serves no further purpose, in line with section 8(7) of the Act. Recruitment data is kept for the hiring cycle it relates to unless you ask us to keep it on file. Nothing is kept indefinitely “just in case”.
Who else sees it
We do not sell your personal data and we do not trade it for advertising. It is seen by the Social Lab team members who need it to respond to you, and by service providers acting as our Data Processors under contract — our website and database hosting, and our email provider. Processors act only on our instructions.
Where a processor stores data outside India, that transfer is made in accordance with section 16 of the DPDP Act and any restrictions the Central Government notifies.
Children
This is a business website and is not directed at children. We do not knowingly collect the personal data of anyone under 18 without verifiable parental consent, and we do not carry out tracking, behavioural monitoring or targeted advertising directed at children (s.9). If you believe a child has sent us personal data, tell us and we will erase it.
Cookies and analytics
Analytics and advertising cookies are off until you switch them on. On your first visit we ask; until you choose, Google’s tag runs in a restricted mode that sets no cookies and cannot identify you. Strictly necessary storage — which includes remembering your privacy choice itself — is always on, because the site cannot work without it.
You can change or withdraw your choice whenever you like from Cookie preferences in the footer of every page, or . You can also clear cookies in your browser.
Keeping it safe
We apply reasonable security safeguards to prevent personal data breaches, as required by section 8(5): access to enquiry and recruitment records is limited to staff who need it, transport is encrypted, and administrative access is individually accounted for. If a personal data breach occurs, we will notify the Data Protection Board and each affected person as required by section 8(6).
Changes to this notice
If we change what we collect or why, we will update this page and its version number. Consent you have already given stays tied to the version of this notice that was in force when you gave it.
Contact
Social Lab Environmental Solutions — [email protected] · Office 306, Sunderban Complex, Baner, Pune 411045.
This notice describes our actual practice and is written to meet the Digital Personal Data Protection Act, 2023. It is not legal advice, and it is pending review by legal counsel — in particular the named Grievance Officer and the retention periods should be confirmed before you rely on them.
