How Alchemy Mantra™ collects, uses, and protects your personal data.
Last Updated: May 2026 | Effective Date: May 2026 | Applies to: alchemymantra.com
Alchemy Mantra™ Ventures operates the Alchemy Mantra™ brand and is the Data Fiduciary responsible for your personal data under the Digital Personal Data Protection Act 2023.
| Detail | Information |
|---|---|
| Business Name | Alchemy Mantra™ Ventures |
| Founder & Proprietor | Nitin Sarawahi |
| Website | alchemymantra.com |
| nitinsarwahi@alchemymantra.com | |
| Location | Hyderabad, Telangana, India |
When you interact with our website, contact us via WhatsApp or email, or engage our services, we collect and process certain personal data. This notice explains what we collect, why, how long we keep it, and what your rights are.
What: Your name, mobile/WhatsApp number, work email address, company name, company size, industry, and service of interest.
When: When you submit our website contact form, send us a WhatsApp message, or email us directly.
Why: To respond to your enquiry, schedule a discovery call, and determine whether our services are a fit for your situation.
Legal Basis: Your consent, given when you submit the contact form (by checking the consent checkbox) or initiate contact with us.
Your confirmation: By submitting our contact form, you confirm that the personal data provided is your own and that you have the right to share it with us. If you are submitting details on behalf of another person, you confirm that you have their prior consent to do so.
What: Your name, email address, WhatsApp/mobile number, company name and size, industry, and a description of your business concern.
When: When you book a discovery call via our Cal.com booking page (cal.eu/nitinsarawahi/discovery-call).
Why: To schedule and confirm your call appointment and send reminders.
Legal Basis: Consent — your booking action constitutes consent for this purpose.
What: Voice recording of the call and business information you share verbally.
When: Only when you give us explicit verbal consent at the start of the call. We will always ask before recording.
Why: For our own reference notes and to ensure accuracy in scope documentation. Recordings are never shared with any third party.
Legal Basis: Your explicit verbal consent, obtained before the call begins.
What: Your name, designation, contact details, and business/operational information you share during an engagement.
When: During the delivery of a contracted service (assessment, audit, retainer, or workshop).
Why: To deliver the service you have contracted us for and to maintain accurate records of work completed.
Legal Basis: Contract — processing is necessary to perform the service agreement between us.
What: Company name, billing address, GSTIN, contact name, and payment confirmation details. We do not hold your bank account credentials or card numbers.
When: When we issue an invoice or receive payment confirmation.
Why: To fulfil our billing obligations, comply with GST requirements, and maintain financial records as required by law.
Legal Basis: Legal obligation (GST Act, Income Tax Act) and contract.
We do not sell, rent, or trade your personal data to any third party.
We use the following third-party platforms to operate our business. Each acts as a Data Processor on our behalf and is bound by their own privacy and data protection terms:
| Platform | Purpose | Privacy/DPA |
|---|---|---|
| Google LLC | Gmail, Google Calendar, Google Meet, Google Drive, Google Sheets — for email, scheduling, calls, and data storage | workspace.google.com/terms/dpa |
| Meta Platforms (WhatsApp) | WhatsApp enquiries and client communication | whatsapp.com/legal/privacy-policy |
| Cal.com Inc. | Discovery call booking (cal.eu) — EU data region | cal.com/privacy |
| Zoho Corporation | Invoicing (if applicable) | zoho.com/privacy.html |
These platforms may process data on infrastructure located outside India. As of the date of this notice, no country has been placed on MeitY's restricted transfer list under the DPDP Act, and these transfers are currently permissible.
| Data Type | Retention Period |
|---|---|
| Enquiry / contact data (non-clients) | 2 years from last interaction, or until you withdraw consent |
| Discovery call bookings | 90 days from booking date |
| Discovery call recordings | 1 year from call date; deleted earlier if no engagement follows |
| Client engagement records | 7 years from engagement close date (standard business record retention) |
| Invoicing and financial records | 7 years (as required by GST Act and Income Tax Act) |
| Consent records | Duration of data retention + 1 year (as evidence of lawful processing) |
When the retention period expires, data is deleted or anonymised. You may also request earlier deletion (see Your Rights below), subject to legal retention obligations.
As a Data Principal, you have the following rights under the Digital Personal Data Protection Act 2023:
You may ask us what personal data we hold about you and receive a summary.
You may ask us to correct any inaccurate or incomplete personal data we hold.
You may ask us to delete your personal data. We will comply unless we are required to retain it for a legal obligation.
Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
If you believe your rights have been violated, you may raise a grievance with us. If unresolved, you may escalate to the DPDP Board once fully constituted.
You may nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of the above rights, email us at nitinsarwahi@alchemymantra.com with the subject line "DPDP Data Request — [Your Name]". We will acknowledge your request within 48 hours and resolve it within 30 days.
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. These include:
Our website (alchemymantra.com) uses only functional cookies necessary for the site to operate. We do not use advertising cookies or tracking pixels. We do not use Google Analytics or any third-party analytics tool. Our website is static HTML with no database.
If we add analytics or third-party tools in future, we will update this notice and add a cookie consent banner before doing so.
If you submitted our contact form and no longer wish us to hold your information, email nitinsarwahi@alchemymantra.com with the subject "Please delete my data" and we will remove your details from our records within 7 business days, unless we are legally required to retain certain information (e.g., if an invoice has been raised).
We may update this Privacy Notice when our practices change or when regulations are updated. The "Last Updated" date at the top of this notice reflects the most recent version. Significant changes will be communicated to active clients by email.
Name: Nitin Sarawahi
Organisation: Alchemy Mantra™ Ventures
Email: nitinsarwahi@alchemymantra.com
Location: Hyderabad, Telangana, India
We acknowledge all data privacy requests within 48 hours and resolve them within 30 days. For the subject line, please use: "DPDP Data Request — [Your Name]"