Legal

Privacy Policy

Last updated: 30 September 2026

Hamsa AI Labs Private Limited (“Hamsa AI Labs”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through hamsalabs.ai and our business communications, why we collect it, and the choices you have. We handle personal data in line with India’s Digital Personal Data Protection Act, 2023 and, where they apply, the EU and UK General Data Protection Regulation.

1. Who this policy applies to

This policy applies to visitors to our website, people who contact us, prospective and current clients and partners, and job applicants. It does not cover personal data we process on behalf of our clients within their own systems and cloud environments. That processing is governed by our contracts with those clients, and the client is responsible for it as the data fiduciary or controller.

2. What we collect

Information you give us

• Your name, email address, organisation, role and the content of your message when you write to us.
• Business contact details shared in the course of an engagement or partnership discussion.
• Your CV, work samples and related details when you apply for a role.

Information collected automatically

• Technical data such as IP address, browser type, device type, pages requested and timestamps. Our hosting provider records this in server logs to deliver and secure the website.
• We do not use advertising cookies, and we do not sell or rent personal data.

3. How we use it

• To respond to your enquiry and communicate with you about our services.
• To evaluate, set up and deliver engagements with clients and partners.
• To assess applications and run our hiring process.
• To operate, secure and improve our website.
• To comply with legal, tax and regulatory obligations, and to establish or defend legal claims.

4. Legal basis

We process personal data on the basis of your consent (for example, when you write to us), to take steps toward or perform a contract with you, for our legitimate interests in running and protecting our business (balanced against your rights), or where the law requires it. You can withdraw consent at any time, which does not affect processing carried out before withdrawal.

5. Sharing

We share personal data only as needed, with:

• Service providers who host our website, email and business tools, under contracts that require them to protect the data and use it only on our instructions.
• Professional advisers such as auditors and lawyers, under confidentiality obligations.
• Authorities, where required by law or to protect our rights, users or the public.
• A successor entity, if our business is reorganised, merged or sold, subject to this policy.

6. International transfers

Our service providers may store or process data outside India, including in the United States and the European Union. Where we transfer personal data across borders, we do so as permitted by applicable law and with appropriate safeguards, such as contractual commitments.

7. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls and least-privilege access to our systems. No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected individuals and authorities as the law requires.

8. Retention

We keep personal data only as long as needed for the purposes above. Enquiry correspondence is generally kept for up to three years after our last contact, job applications for up to two years unless you ask us to delete them sooner, and records we must retain by law for the period the law requires. After that, data is deleted or anonymised.

9. Your rights

Depending on where you live, you may have the right to:

• Access a summary of the personal data we hold about you and how it is used.
• Correct, complete or update inaccurate data.
• Ask us to erase your data, or to restrict or object to its processing.
• Withdraw consent you have given.
• Receive your data in a portable format.
• Nominate another person to exercise your rights in the event of your death or incapacity.
• Raise a grievance with us, and escalate it to the Data Protection Board of India or your local data protection authority.

To exercise any of these rights, email us at the address below. We may need to verify your identity before acting on a request, and we will respond within the time the applicable law allows.

10. Children

Our website and services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared personal data with us, please contact us and we will delete it.

11. Links to other sites

Our website may link to third-party sites. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Material changes will be highlighted on this page.

13. Contact and grievances

For questions about this policy, to exercise your rights or to raise a grievance, contact: