Privacy notice

This notice explains how Statnativ India Pvt. Ltd. ("Statnativ", "we", "us") handles personal information when you use this website or our client portal. For personal information we decide how to use, we are responsible for it (a "data fiduciary" under India's Digital Personal Data Protection Act, 2023).

What we collect

When you contact us or request a consultation: your name and work email, plus any company, phone number, country, area of interest and message you choose to give. If you request a consultation, we also record your preferred date and time and your browser's time zone so we can propose a suitable slot. We record that you agreed to be contacted.

To protect our forms from abuse: a one-way (hashed) fingerprint of your network address and the time of your request. We cannot turn the fingerprint back into your address, and we keep it for 30 days. Our spam check (Cloudflare Turnstile) runs in your browser when you use a form.

When you use the client portal: your account details (name, email, role and organisation), the tasks, forms, questions and comments you create, the documents you upload for your engagement, and a record of key actions such as uploads, reviews and status changes. Your browser stores a sign-in session so you stay signed in; signing out removes it.

Payments: where we ask you to pay, we record the amount, currency, status and the payment provider's reference. Card and bank details are entered on the payment provider's page; we never see or store them.

Technical logs: our hosting providers keep basic request logs (for example, time, page and network address) to keep the service secure and reliable. We do not use advertising or analytics cookies.

How we use it

• To reply to your enquiry and arrange consultations.
• To deliver the services you have engaged us for, including entity setup and compliance coordination.
• To send service emails you need (for example, "a document was reviewed"). These emails never contain your files.
• To protect the website and portal from abuse and to keep them secure.
• To meet our legal, tax and regulatory obligations.

We do not sell personal information and we do not use it for advertising.

Who processes it for us

We use these providers to run the service. They process personal information on our instructions:

Provider	What for	Where data may be processed
Supabase	Database, sign-in, private file storage and blog images	India (Mumbai)
Cloudflare	Website and portal hosting, spam protection	Global network
Resend	Sending service emails	Japan (Tokyo) and the United States
Razorpay	Payment processing (only when a payment is requested)	India

Some of these providers may process information outside India. Where they do, we rely on the safeguards in our agreements with them and on the transfer rules that apply to us.

We also share information with qualified professionals we appoint for your engagement (for example, company secretaries, chartered accountants or lawyers) when their work needs it, and with government authorities when a filing or the law requires it.

Identity documents

When an engagement requires identity or corporate documents, please upload them only through the portal; we will not ask for them by email. By default a document you upload is visible only to you and Statnativ; you can choose to share it with your team. Access is restricted by role and key actions are recorded.

How long we keep it

• Enquiries that do not become engagements: 24 months after our last contact, then deleted.
• Engagement records and documents: for the engagement and for 8 years after it ends, or longer where legal, tax or regulatory obligations require.
• Abuse-prevention fingerprints: 30 days.

Your rights

Depending on the law that applies to you, you can ask us for a summary of the personal information we hold about you, ask us to correct, complete or delete it, withdraw consent you have given (this does not affect anything we did before), and nominate someone to exercise your rights if you cannot. We may keep information where the law requires us to.

To exercise a right or raise a concern, email us at the address in the site footer. Grievance contact: Amit Tiwari, Director, contact@statnativ.com. We will respond within 30 days. If you are not satisfied with our response, you may be able to complain to the relevant authority (in India, the Data Protection Board of India).

Security

We use role-based access, private file storage, encryption in transit, and separation between customers so that one customer cannot see another's information. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Children

This website and portal are for businesses and are not directed at children.

Changes

We will update this notice when our practices change and show the date above.