Privacy Policy

1. Introduction

RudraForge is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, engage our consulting services, communicate with us, or otherwise interact with our business.

We are committed to processing personal information responsibly and in accordance with applicable data protection and privacy laws.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

RudraForge is a Governance, Risk, and Compliance (GRC) consulting company providing professional services including, but not limited to:

  • Governance, Risk and Compliance (GRC)
  • SOC 2 Consulting
  • ISO 27001 Consulting
  • CMMI Consulting
  • Cybersecurity Advisory
  • Information Security Management
  • Risk Assessments
  • Internal Audits
  • Compliance Readiness
  • Security Awareness
  • Third-Party Risk Management

3. Information We Collect

Depending on how you interact with us, we may collect:

Personal Information

  • Name
  • Company Name
  • Job Title
  • Business Email Address
  • Phone Number
  • Country
  • Business Address

Business Information

  • Organisation details
  • Compliance requirements
  • Security documentation
  • Audit evidence
  • Risk registers
  • Policies and procedures

Technical Information

  • IP Address
  • Browser type
  • Operating System
  • Device Information
  • Website usage information
  • Cookies and analytics information

Communication Information

  • Email correspondence
  • Meeting notes
  • Contact form submissions
  • Customer support requests

4. How We Collect Information

We collect information through:

  • Our website
  • Contact forms
  • Email communications
  • Discovery meetings
  • Sales discussions
  • Service engagements
  • Client documentation
  • Third-party integrations
  • Cookies and analytics technologies

5. Why We Use Your Information

We process information to:

  • Provide consulting services
  • Respond to enquiries
  • Prepare proposals
  • Deliver projects
  • Improve customer experience
  • Maintain security
  • Meet contractual obligations
  • Comply with legal requirements
  • Prevent fraud
  • Manage business operations
  • Send service updates
  • Send marketing communications where permitted by law

6. Legal Basis for Processing

Where required by applicable law, we process personal information based on one or more of the following:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate business interests
  • Protection of vital interests

7. Cookies

Our website may use cookies and similar technologies to:

  • Improve website functionality
  • Remember user preferences
  • Analyse website traffic
  • Improve security
  • Measure website performance

You may disable cookies through your browser settings, although some website features may not function properly.

8. Information Sharing

We do not sell personal information.

We may share information with:

  • Cloud service providers
  • Hosting providers
  • Email providers
  • CRM providers
  • Payment processors
  • Professional advisors
  • Auditors
  • Regulatory authorities where legally required
  • Law enforcement where required by law

All third parties are expected to maintain appropriate security measures.

9. International Data Transfers

Where personal information is transferred across national borders, we implement appropriate safeguards designed to protect the information in accordance with applicable privacy laws.

10. Information Security

RudraForge maintains appropriate administrative, technical, and organisational safeguards designed to protect personal information.

Security measures may include:

  • Encryption
  • Multi-factor authentication
  • Role-based access controls
  • Secure cloud infrastructure
  • Security monitoring
  • Logging and auditing
  • Regular security reviews
  • Vulnerability management
  • Employee confidentiality obligations
  • Secure backup procedures

While we strive to protect information, no method of transmission or storage can be guaranteed to be completely secure.

11. Data Retention

We retain personal information only for as long as necessary to:

  • Deliver our services
  • Resolve disputes
  • Protect our legitimate business interests

When information is no longer required, it is securely deleted or anonymised where appropriate.

12. Your Rights

Subject to applicable law, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to certain processing activities
  • Withdraw consent where processing is based on consent
  • Request data portability
  • Lodge a complaint with the relevant supervisory authority

To exercise these rights, please contact us using the details provided below.

13. Confidential Client Information

As a GRC and cybersecurity consulting company, RudraForge recognises the confidential nature of client information.

Information shared during consulting engagements, audits, assessments, compliance projects, or security reviews is handled in accordance with contractual confidentiality obligations and is accessed only by authorised personnel with a legitimate business need.

14. Children’s Privacy

Our website and professional services are intended for business users and are not directed to children. We do not knowingly collect personal information from children.

15. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

The revised version will be posted on this page with an updated effective date.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.

RudraForge

18. Governing Law

This Privacy Policy shall be governed by the applicable laws governing the jurisdictions in which RudraForge operates and provides services, together with any applicable international data protection requirements.

19. Commitment to Privacy

At RudraForge, protecting client information is fundamental to our business. We continuously improve our security, privacy, and governance practices to safeguard the trust placed in us by our clients, partners, and stakeholders worldwide.