Privacy
Policy

01Who we are

In this document, “DRSTY”, “The DRSTY Studio”, “we”, “us” and “our” mean DRSTY, a business design studio operating from Andhra Pradesh, India, and, once incorporated, the company that carries on the DRSTY business. “You” means anyone who visits drsty.in or contacts us through it.

We are the “Data Fiduciary” for the personal data described here. Questions about this policy go to hello@drsty.in.

02What we collect

We collect as little as we can. Specifically:

• What you send us. Your name, email, phone number, company and anything you write when you email us, book a call, or fill a discovery questionnaire.
• Booking details. When you book a call, the scheduling tool (Calendly) collects your name, email, chosen time and any answers you give, and shares them with us.
• Client engagement data. If you become a client, the business information, access and records you share with us for the work — handled under our NDA and Service Agreement.
• Technical data. Like every website, our hosting provider automatically receives your IP address, browser type, device and pages requested, for security and delivery.

We do not knowingly collect data from children under 18, and we do not ask for sensitive data such as passwords, financial account numbers or health information through this website.

03Why we use it

• To reply to you, schedule calls and prepare for them.
• To write proposals, deliver the work you engage us for, invoice and keep the records the law requires.
• To keep the website secure, working and fast.
• To send you information you have asked for. We do not send marketing email without your consent, and every such email carries a way out.

We process your data on the basis of your consent, or where it is necessary for a contract with you or for legal compliance, as permitted under the DPDP Act, 2023. We do not sell your personal data.

04Who else sees it

Only service providers who help us run the website and the business, and only as much as they need:

We may also disclose data where required by law, a court order or a competent authority, or to protect our rights. Some providers store data outside India; where they do, we rely on their contractual safeguards and transfer only to countries not restricted by the Government of India.

05How long we keep it

• Enquiries that do not become work: up to 24 months, then deleted.
• Client records, agreements and invoices: as long as tax and company law require (generally 8 years).
• Server logs held by our hosting provider: according to their retention schedule.

When we no longer need data, we delete it or make it anonymous.

06How we protect it

Access on a named-person basis, separate business accounts and storage, two-factor authentication where available, and HTTPS on every page. Client access is withdrawn at the end of each engagement. No system is perfectly secure; if a breach affects your data, we will notify you and the Data Protection Board of India as the law requires.

07Your rights

Under the DPDP Act, 2023 you can:

• Ask what personal data we hold about you and how we use it.
• Ask us to correct, complete or update it.
• Ask us to erase it, where we are not legally required to keep it.
• Withdraw consent at any time — this does not affect anything done before you withdrew.
• Nominate someone to exercise these rights on your behalf.
• Raise a grievance with us, and, if unresolved, with the Data Protection Board of India.

Email hello@drsty.in from the address we hold for you. We respond within 30 days.

08Grievance Officer

In line with the IT Act, 2000 and the rules under it, our Grievance Officer is:

09Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Significant changes will be highlighted on the website.