Privacy policy

Who we are

Dabster Group is a brand of ExpertGRC Consulting Services Private Limited, the company that operates this website and is the data controller for personal data submitted through it.

Scope

This policy covers personal data collected through www.dabstergroup.com. It does not cover data processed under a client engagement — that is governed by the contract and any data processing terms agreed with that client.

What we collect

We collect only what you submit. The website has no account system, and we do not build profiles of visitors.

Information you give us

• Enquiry form: name, email address, and optionally company and area of interest, plus the message you write.
• SecureGRC demo request: name, work email address, company, job title, country, and optionally phone number, areas of interest and a message.

Information collected automatically

• Server logs: our hosting provider records standard request data including IP address, user agent, requested URL and timestamp. This is used for security, abuse prevention and diagnosing faults.
• Rate limiting: when you submit a form, we temporarily hold your IP address in memory to limit how many submissions can be made from one address in a ten-minute window.

We do not use advertising trackers, marketing pixels, session recording or cross-site tracking on this website. Where website measurement is enabled it is cookieless and aggregate — it records page views and anonymous interaction events such as “a contact form was submitted”, and never the contents of what you type. See our cookie notice for what is stored in your browser.

Why we use it, and on what basis

• To respond to you. Form submissions are used to answer your enquiry or arrange a demonstration, and to prepare for that conversation. We rely on your consent, which you give with the checkbox on the form, and on our legitimate interest in responding to business enquiries addressed to us.
• To understand how the website is used. Where measurement is enabled, it is aggregate and cookieless: no cross-site identifier is set and no form content is sent to it. We rely on our legitimate interest in maintaining and improving our own website.
• To keep the site secure and working. Server logs and rate limiting protect against abuse and help us diagnose faults. We rely on our legitimate interest in the security and availability of our systems.

If a campaign parameter was present in the link you arrived through, it is recorded with your enquiry so we know which activity prompted it. It contains no information about you.

We do not use website enquiry data for unrelated marketing. If we ever introduce a mailing list, it will require separate, explicit opt-in.

Who we share it with

We do not sell personal data and we do not share it with third parties for their own purposes. Data is processed by service providers acting on our instructions:

• Hosting and content delivery — serves the website and retains standard server logs.
• Form delivery — the email or webhook service configured to deliver your submission to us.

These providers may process data outside your country of residence. Where that happens we rely on the provider's contractual data protection commitments.

How long we keep it

• Enquiries and demo requests are retained for as long as needed to respond and to maintain a record of the conversation, and are reviewed periodically for deletion.
• Server logsare retained according to our hosting provider's standard retention period.
• Rate-limit records are held in memory only and expire within ten minutes.

How we protect it

• The site is served over HTTPS.
• Form submissions are validated on the server as well as in the browser, and are rate-limited.
• Credentials for delivery services are held as server-side environment variables and are never exposed to the browser.
• Access to submitted enquiries is limited to staff who need it.

Your rights

Depending on where you are located, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, and to request a copy in a portable format. Where we rely on your consent — as we do for the enquiry and demo forms — you may withdraw it at any time, which does not affect processing already carried out.

To exercise any of these, email info@dabstergroup.comwith “Privacy request” in the subject line. We may need to verify your identity before acting on a request.

Raising a concern

If you are concerned about how we have handled your personal data, write to info@dabstergroup.com. We acknowledge privacy requests and complaints within five business days and aim to resolve them within thirty days. If the matter is complex and we need longer, we will tell you why and give you a revised date.

If you are not satisfied with our response, you may be entitled to complain to the data protection authority in your jurisdiction. Where the India Digital Personal Data Protection Act 2023 applies to our processing of your data, that route is the Data Protection Board of India, after you have first raised the matter with us.

Children

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children.

Changes

If this policy changes materially we will update the date at the top of this page. Continued use of the website after a change indicates acceptance of the revised policy.

Contact

For any question about this policy or how we handle personal data, write to info@dabstergroup.com, or to ExpertGRC Consulting Services Private Limited, Shop No. 42, Block-C, Janak Puri, New Delhi - 110058, India.