Privacy Notice

Last updated: 6 October 2026

1. Who we are

This website (thedandy.in) is operated by D & Y Associates LLP (LLPIN ACH-5146), a firm of Practising Company Secretaries with offices in Mumbai and Nagpur ("we", "us"). We are the Data Fiduciary for the personal data described in this notice.

2. What we collect and why

Contact form

Name, company, email address, phone number and your message – used only to reply to your enquiry and, if you engage us, to communicate about that engagement.

Careers form

Name, email address, phone number, position, qualifications and experience, and your CV – used only to consider you for current and future openings at the firm.

Technical data

When you submit a form we record the date and time, a one-way coded (hashed) form of your IP address and your browser type, used only to prevent spam and misuse. We do not store your IP address in readable form.

Team attendance

Members of our team who use the attendance page share their location at the moment they mark attendance, and their phone is identified by a device cookie. This is used only for attendance records and is explained to them separately.

We do not use advertising or analytics trackers, and we do not sell, rent or share your personal data for marketing.

3. Consent

We process the details you submit on the basis of your consent, which you give by ticking the consent box on the form. You can withdraw your consent at any time by writing to us (see section 7); we will then stop using and delete your data, unless the law requires us to keep it.

4. Who can see your data

Only the partners of the firm and team members who need it to respond to you. Your data is stored with reputed website-hosting and business-email service providers, who process it only on our behalf and under our instructions. We will disclose personal data to a government authority only where the law requires it.

5. How long we keep it

Enquiries

Up to 3 years from submission, then deleted automatically.

Job applications and CVs

Up to 12 months from submission, then deleted automatically.

Suspected spam

Up to 90 days, then deleted automatically.

Emails you exchange with us are kept in our mailboxes in line with our professional record-keeping obligations.

6. How we protect it

The website uses an encrypted (HTTPS) connection. Form submissions and CVs are stored outside the public part of the website and can be viewed only through a private admin area protected by a password and a second sign-in step (authenticator code). Access is logged.

7. Your rights and how to contact us

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• tell you what personal data we hold about you and how it is used;
• correct, complete or update it;
• delete it;
• nominate another person to exercise these rights on your behalf in case of death or incapacity.

To make a request or raise a grievance, write to compliance@thedandy.in with the subject "Personal data request". We will respond within a reasonable time and in any case within the period prescribed by law. If you are not satisfied with our response, you may approach the Data Protection Board of India.

8. Changes

We may update this notice from time to time. The latest version will always be available on this page with its date.