-
SRA Group, Bengaluru
-
1st August 2025
Scope & Acceptance
This Privacy Policy governs how SRA Group and its subsidiaries, affiliates, and partners collect, use, store, disclose, and protect the personal data of users.
By accessing or using our website, microsites, or any other platform associated with us, you agree to the terms of this policy.
If you do not agree, please refrain from using our services. The policy aligns with the Digital Personal Data Protection Act (DPDP) 2023 and SEBI guidelines.
Information We Collect
- Personal Identification Information: Name, contact number, email address, mailing address, etc., via forms, WhatsApp, calls, and social media.
- Non-Personal Information: Browser details, operating system, IP address, and usage statistics.
- Cookies: We use cookies for analytics, personalization, and performance monitoring. Users can control cookie settings in their browser.
Methods of Data Collection
- Direct inputs via website forms and feedback submissions
- Responses to email campaigns
- Third-party platforms (social media, ad networks)
- Offline or phone-based interactions, including through channel partners
Purpose of Data Collection
- Enhancing and personalizing user experience
- Service delivery and customer support
- Campaign management, analytics, and business insights
- Regulatory compliance and security auditing
Legal Basis & Consent
We collect and process personal data with the user's explicit consent. Consent is taken via clear checkboxes or disclosure before submission.
Users have the right to withdraw consent at any time by contacting us at contact@sragroup.in
Sharing of Data
- We do not sell or rent personal data.
- Data may be shared with:
- Service vendors and partners (bound by confidentiality agreements)
- Government agencies upon lawful request
- Marketing platforms for campaigns, without sharing sensitive information
- Aggregated data may be shared for analytical purposes
User Rights (Under DPDP Act, 2023)
- Access: Request your personal data
- Correction: Request corrections to inaccuracies
- Erasure: Request deletion when no longer necessary
- Portability: Request transfer to another service
- Restriction & Objection: Limit or object to processing
- Withdrawal: Revoke consent anytime
Data Retention
We retain your personal data only for as long as required for the intended purpose or legal obligation.
After the retention period, data is securely deleted using industry-standard techniques.
Security Measures
We implement comprehensive technical and organizational security measures including:
- Data encryption in storage and transit
- Firewalls and secure hosting
- Regular internal and external audits
- Access control and staff confidentiality agreements
Data Breach Response
In case of a breach:
- Notify the Data Protection Board of India within 72 hours
- Inform affected individuals with detailed information
- Take immediate action to mitigate impact
Cookies and Tracking
Cookies help improve website functionality and personalize content.
Users may disable cookies in their browser, though this may impact the experience.
Children’s Privacy
We comply with COPPA and DPDP guidelines regarding data from children under 13.
Parental consent is required, and verification methods are employed.
Accountability & Governance
- Regular audits and compliance reviews
- Staff training on data protection and secure handling
- Appoint data protection officers where required
Third-Party Services
Our platforms may link to external websites.
These are governed by their own privacy policies.
We recommend reviewing those policies independently.
Policy Updates
SRA Group may update this policy at any time without notice.
Users are advised to review it periodically.
The effective date will indicate the most recent update.
Contact Us
If you have questions or requests related to this policy, please contact us at:
- SRA Group, Bengaluru, India
- contact@sragroup.in
- +91 9632597866