Privacy Policy
Last updated: October 14, 2026
1. Who we are
TAARU Insights (“TAARU”, “we”, “us”, “our”) is a research and advisory practice operated by Nitant Kumar Arora, an individual based in New Delhi, India. TAARU is not yet incorporated. When it is, we will update this policy to name the company.
Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Nitant Kumar Arora is the Data Fiduciary responsible for the personal data described here. Contact details are in Section 14.
2. Scope
This policy covers personal data we handle when you:
- visit taaruinsights.com (the “Site”);
- submit an inquiry through the Site’s contact form or email us;
- receive business correspondence from us, including introductory outreach.
It does not cover information you or your organization share with us during a paid engagement. That information is governed by our engagement letter and any confidentiality agreement, which take precedence. It also does not cover third-party websites we link to (Section 12).
3. Information we collect
Information you give us
- Contact form: your first and last name, business email address, organization and message, plus (optionally) the service you are interested in. You also tick a box confirming you agree to this policy.
- Email and calls: whatever you choose to share when you write to or speak with us, including email signature details.
Information collected automatically
- Server logs: our hosting provider records technical data when you visit, such as IP address, browser and device type, pages requested, and the date and time.
- Cookies and analytics: we do not use analytics or tracking cookies (see Section 5).
Information from public and professional sources
For business development, we may collect business contact details of professionals at investment and advisory firms: name, job title, employer, business email address and professional profile. We obtain these from public sources such as company websites, professional networking sites and industry publications.
Please do not send us sensitive personal data, such as financial account details, health information or government ID numbers, through the Site or by email.
4. How we use your information
We use personal data only for the purposes below.
| Purpose | Data used | Basis |
|---|---|---|
| Respond to your inquiry and discuss a possible engagement | Contact form and email data | Your consent, given when you submit the form or write to us |
| Keep records of inquiries and correspondence | Contact form and email data | Your consent |
| Introductory business outreach | Public business contact data | Data published by you or your employer; you can opt out at any time |
| Operate, secure and troubleshoot the Site | Server logs | Necessary to provide and protect the Site |
| Comply with law, or establish or defend legal claims | Any of the above, as needed | Legal obligation |
We do not sell personal data, make automated decisions about you, or build advertising profiles. We will not use your data for a new purpose without telling you and, where required, asking for your consent.
You can withdraw consent or opt out of outreach at any time by emailing us (Section 14). Withdrawal does not affect processing already carried out.
5. Cookies and analytics
The Site does not use analytics, advertising or tracking cookies. Our hosting platform may set strictly necessary cookies to deliver the Site securely. These do not identify you personally. If we ever introduce analytics or other non-essential cookies, we will update this policy and ask for your consent before setting them.
6. Who we share it with
We share personal data only with service providers who help us run TAARU, and only as needed for the purposes in Section 4.
| Provider | Role | Data involved |
|---|---|---|
| Google LLC (Google Sheets, via Google Apps Script) | Stores contact form submissions | Contact form data |
| Our email service provider | Business email | Correspondence |
| Our website hosting provider | Hosts the Site | Server logs |
| Google Fonts, cdnjs (Cloudflare) and the Tailwind CSS CDN | Deliver the Site’s fonts, icons and styling | Your IP address and browser details, sent automatically when a page loads |
These providers process data on our behalf under their own terms and security commitments.
We may also disclose personal data where required by law, court order or a government authority; to protect our rights or defend legal claims; or to a company formed to carry on TAARU’s business, which will remain bound by this policy. We do not sell, rent or trade personal data.
7. International transfers
Our service providers, including Google, may store and process data on servers outside India, including in the United States. The DPDP Act permits such transfers except to countries the Government of India restricts by notification, and we will not transfer data to a restricted country. If you are outside India, your data will be processed in India and wherever our providers operate.
8. How long we keep it
| Data | Retention |
|---|---|
| Inquiries that do not lead to an engagement | 24 months from last contact, then deleted |
| Inquiries that lead to an engagement | For the engagement, then as long as the engagement letter and Indian tax and accounting law require |
| Outreach contacts who opt out | A minimal record (name and email) kept only so we do not contact you again |
| Server logs | The period set by our hosting provider, after which they are deleted automatically |
When you withdraw consent or ask us to erase your data, we delete it unless the law requires us to keep it.
9. Security
We use reasonable security safeguards. Access to inquiry data is restricted to those who need it to respond to you, our accounts are protected by strong passwords, and the Site is served over HTTPS. No method of storage or transmission is completely secure.
If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act and its rules require. We will explain what happened, its likely impact, and the steps we are taking.
10. Your rights
Subject to applicable law, you have the right to:
- Access: a summary of the personal data we hold about you, how we use it, and who we have shared it with.
- Correction: correct, complete or update inaccurate data.
- Erasure: have your data deleted once it is no longer needed or you withdraw consent, unless the law requires us to keep it.
- Withdraw consent: at any time, as easily as you gave it.
- Opt out of outreach: at any time.
- Grievance redressal: raise a complaint with us (Section 14).
- Nomination: nominate someone to exercise these rights if you die or become incapable.
To exercise a right, email us from the address we hold for you, or give us other reasonable proof of identity. We will respond within 30 days. If you are unsatisfied after using our grievance process, you may complain to the Data Protection Board of India. If you are outside India, you may have additional rights under your local law; contact us and we will honor them where they apply.
11. Children
The Site and our services are for business professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
12. Third-party links
The Site may link to other websites, such as LinkedIn. We are not responsible for their privacy practices. Please read their policies before sharing personal data with them.
13. Changes to this policy
We may update this policy, for example when TAARU is incorporated, when we change service providers, or when the law changes. The “Last updated” date at the top shows the current version. For material changes, we will post a notice on the Site and, where the change affects you and we hold your email address, tell you directly before it takes effect.
14. Contact and grievance officer
For questions, requests or complaints about this policy or your personal data, contact our Grievance Officer:
Nitant Kumar Arora
Email: nitant@taaruinsights.com
Location: New Delhi, India
We acknowledge grievances within 7 days and aim to resolve them within 30 days.