1. Who We Are

Caraka Clinical and Translational Sciences Private Limited ('Caraka', 'we', 'us', 'our') is a scientific, product-development and regulatory consulting practice. Our registered address is H-No. 9-133, Plot No 367, Laxmi Nagar Colony, 7th Cross, Boduppal, Hyderabad, Telangana, India - 500039. Our company identification number (CIN) is U74220TG2012PTC080473. We can be contacted at [email protected]. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website (carakaconsulting.com), submit an enquiry through our contact form, or otherwise interact with us. It also explains your rights under applicable data protection law.

2. Personal Data We Collect

We may collect the following categories of personal data: **Contact and identity data:** Your name, email address, telephone number and organisation or company name — provided when you submit an enquiry through our contact form. **Enquiry and project data:** Information about your product, project, development stage and consulting needs — provided voluntarily in the body of your enquiry. **Technical data:** Your IP address, browser type and version, operating system, referring URL, pages visited and time spent on pages — collected automatically when you visit our website. **Cookie and tracking data:** Information collected through cookies and similar technologies — subject to your consent. See Section 7 (Cookies) for details. We do not collect special category personal data (such as health data, biometric data or data revealing racial or ethnic origin) through our website or contact form. Please do not submit such data through our contact form.

3. How We Use Your Personal Data

We use your personal data for the following purposes: **Responding to enquiries:** To review and respond to project enquiries submitted through our contact form. Legal basis: legitimate interests (responding to a request you have made). **Providing consulting services:** To provide the consulting services you have engaged us to deliver, including communication, document exchange and project management. Legal basis: performance of a contract. **Website analytics:** To understand how visitors use our website and to improve its content and functionality. Legal basis: consent (where analytics cookies are used) or legitimate interests (where only essential technical data is processed). **Legal compliance:** To comply with applicable legal obligations, including record-keeping requirements. Legal basis: legal obligation. We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties. We do not use your personal data for direct marketing without your explicit consent.

4. How We Share Your Personal Data

We do not sell, rent or trade your personal data. We may share your personal data with the following categories of recipients: **Service providers:** Third-party service providers who assist us in operating our website and delivering our services — including our website hosting provider, our inbox and messaging platform (GoDaddy Airo Inbox), and our email service provider. These providers process personal data on our behalf under data processing agreements and are not permitted to use your data for their own purposes. **Professional advisors:** Legal, financial or other professional advisors, where necessary for the conduct of our business. **Regulatory authorities:** Where required by law, regulation or court order. We do not transfer your personal data outside India except where necessary to use the services of international service providers (such as cloud hosting or messaging platforms), in which case we ensure appropriate safeguards are in place.

5. Data Retention

We retain your personal data for as long as necessary for the purposes for which it was collected, and in accordance with applicable legal requirements. **Enquiry data:** We retain enquiry data for a period of three years from the date of the enquiry, or for the duration of any consulting engagement arising from the enquiry plus three years, whichever is longer. **Website analytics data:** We retain aggregated analytics data for a period of two years. **Legal and financial records:** We retain records required by law for the periods specified by applicable law. When personal data is no longer required, we delete or anonymise it securely.

6. Your Rights

Subject to applicable data protection law, you have the following rights in relation to your personal data: **Right of access:** You have the right to request a copy of the personal data we hold about you. **Right to rectification:** You have the right to request that we correct inaccurate or incomplete personal data. **Right to erasure:** You have the right to request that we delete your personal data, subject to certain exceptions. **Right to restriction:** You have the right to request that we restrict the processing of your personal data in certain circumstances. **Right to data portability:** You have the right to receive your personal data in a structured, commonly used and machine-readable format. **Right to object:** You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. **Right to withdraw consent:** Where we rely on your consent as the legal basis for processing, you have the right to withdraw your consent at any time. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

7. Cookies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit a website. **Essential cookies:** These cookies are necessary for the website to function and cannot be switched off. They include cookies that remember your cookie consent preference. **Analytics cookies:** These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website. They help us understand which pages are most and least popular. All information these cookies collect is aggregated and therefore anonymous. We only set analytics cookies with your consent. You can manage your cookie preferences at any time using the 'Manage Cookie Preferences' option on this page. You can also control cookies through your browser settings, although this may affect the functionality of the website.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include secure data transmission (HTTPS), access controls and regular security reviews. However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of third-party websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or by contacting you directly. The date of the most recent revision is shown at the top of this page. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at: Caraka Clinical and Translational Sciences H-No. 9-133, Plot No 367, Laxmi Nagar Colony, 7th Cross, Boduppal, Hyderabad, Telangana, India - 500039 [email protected] +91 91334 45635 / +91 97018 44460