Statutory privacy disclosures, personal data processing standards, and individual rights under applicable law.
This Privacy Policy explains how Altiora Advisory & Strategy LLP™ (“Altiora”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data in connection with this website and related business interactions. It applies to website visitors, prospective and current clients, business contacts, suppliers, event participants and individuals who communicate with Altiora.
The responsible legal entity is Altiora Advisory & Strategy LLP™, a limited liability partnership incorporated in India under the Limited Liability Partnership Act, 2008, with LLPIN ACY-2888 and registered office at Kaudiar, Thiruvananthapuram, Kerala 695003, India. Privacy enquiries may be sent to Lijo.joseph@altioraadvisor.com.
Altiora acts as a controller where it determines the purposes and means of processing personal data for its own business operations, website administration, enquiries, relationship management and related purposes. In certain client assignments, Altiora may process personal data on a client’s documented instructions. In those circumstances, the client may act as controller and Altiora may act as processor or service provider. The parties’ respective roles and obligations will be set out in the applicable contract and, where required, a data processing agreement.
Depending on the nature of the interaction, Altiora may process the following categories of personal data:
Individuals should not submit sensitive personal data, classified information or third-party confidential information through general website forms unless specifically requested through an approved and secure process.
Altiora may obtain personal data directly from the individual; automatically through website logs and technologies; from the individual’s organisation or authorised representatives; and, where lawful and relevant to a business relationship, from publicly available professional sources or service providers supporting Altiora’s operations.
Altiora may process personal data for the following purposes:
For processing activities governed by Indian law, Altiora will identify and rely on the lawful basis applicable to the relevant activity under the legislation in force at the relevant time. The Indian framework includes the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), in each case to the extent the relevant provisions have commenced and apply to the processing. During the statutory phased commencement and transition, Altiora will also comply with applicable provisions of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent those provisions remain in force and apply. Processing may also be necessary for performance of a contract, compliance with a legal obligation, consent or another basis recognised by the applicable Indian law. The specific basis will depend on the processing activity and the law then in force.
The website may use strictly necessary cookies and similar technologies to operate core features, maintain security and remember essential settings. Subject to applicable Indian law and consent requirements, Altiora may also use analytics, preference or other non-essential technologies to understand website usage and improve the website and its services. Individuals may manage optional cookies through the website’s cookie settings and their browser settings. Disabling certain cookies may affect website functionality. Information about the specific cookies, providers, purposes and durations in use will be made available through the website’s cookie controls or a supplementary cookie notice, as appropriate.
Altiora may disclose personal data, where necessary and subject to appropriate safeguards, to website hosting and IT providers; cybersecurity, communications, CRM and business software providers; professional advisers, insurers and auditors; clients and their authorised representatives where necessary for an engagement; public authorities, regulators or courts where disclosure is required or permitted by law; and parties involved in a business reorganisation, merger, financing or transfer. Service providers are required to handle personal data in accordance with applicable contractual, confidentiality and security obligations. Altiora does not sell personal data.
Altiora and its service providers may process or access personal data in countries other than the country in which it was collected. Where cross-border transfer requirements apply, Altiora will implement the measures required by the applicable Indian law. Depending on the relevant jurisdiction, such measures may include contractual safeguards, transfer assessments, approvals or other recognised transfer mechanisms. Individuals may contact Altiora for further information about relevant safeguards, subject to legal restrictions.
Altiora retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, managing business relationships, delivering services, maintaining business and accounting records, meeting legal obligations and resolving disputes. Retention periods depend on the nature of the information, the purpose of processing, applicable legal requirements and contractual obligations. When personal data is no longer required, Altiora will take appropriate steps to delete, anonymise or securely dispose of it, subject to any lawful retention requirement.
Altiora uses reasonable organisational, technical and physical safeguards designed to protect personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. Safeguards will be maintained in accordance with the requirements of Indian law applicable to Altiora and the relevant processing activity, including, as and when applicable, the DPDP Act and DPDP Rules and the Information Technology Act, 2000 and rules made under it during any applicable transition period. Access is limited to personnel and service providers who require the information for legitimate business purposes and are subject to appropriate confidentiality obligations. No electronic system, website or method of transmission can be guaranteed to be completely secure.
Client confidentiality is also governed by the relevant engagement agreement and any non-disclosure agreement. Confidentiality does not, by itself, create legal professional privilege.
Depending on the law applicable to the individual and the circumstances of processing, individuals may have rights to request access to personal data, correction, deletion, restriction of processing, objection to certain processing, data portability, or withdrawal of consent where processing is based on consent. Individuals may also have the right to lodge a complaint with a competent supervisory authority. These rights may be subject to conditions, exemptions and limitations under applicable Indian law.
Requests may be submitted to Lijo.joseph@altioraadvisor.com with the subject line “Privacy Request”. Altiora may request information reasonably necessary to verify the requester’s identity and understand the request. Altiora will respond within the period required by applicable Indian law.
The website is intended for business and professional audiences and is not directed to children. Altiora does not knowingly seek to collect children’s personal data through the website. If an individual believes that a child has submitted personal data through the website, they may contact Altiora using the details in this policy.
The website may contain links to third-party websites or platforms. Those websites operate under their own privacy notices and practices. Altiora does not control and is not responsible for the personal-data processing carried out by third parties through their websites or services.
Altiora may update this Privacy Policy to reflect changes in its services, systems, processing activities or Indian legal requirements. The latest version will be published on this page with its effective or last-updated date. Questions, requests or complaints concerning personal data may be directed to Lijo.joseph@altioraadvisor.com or sent to Kaudiar, Thiruvananthapuram, Kerala 695003, India.
This Policy is intended to be read consistently with applicable Indian data-protection and information-technology laws, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 to the extent in force and applicable, the Information Technology Act, 2000 and applicable rules made under it during any statutory transition, and any amendments, subordinate legislation or binding directions applicable to Altiora.
This Policy is governed by and shall be interpreted in accordance with applicable Indian laws of India. The principal data-protection and information-technology instruments relevant to the website and Altiora’s processing activities may include the Digital Personal Data Protection Act, 2023; the Digital Personal Data Protection Rules, 2025; the Information Technology Act, 2000; and, during the applicable transition and to the extent still in force and applicable, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. The applicability and commencement of particular provisions shall be determined by the relevant commencement notifications and rules in force from time to time. References to legislation include amendments, replacements and subordinate legislation.