Last updated 31 May 2026
This policy explains what personal data obsequi.tech collects, why, and the rights you have over it. It is written to be read — not to hide behind. For engagement-specific data handling, the Data Processing Addendum governs.
Who we are
obsequi.tech is a compliance-AI engineering consultancy operating in India and remotely. For the purposes of India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we are the data fiduciary for the information described in this policy. Where we handle the personal data of clients’ end users, we do so under the framework that governs that engagement (e.g. GDPR, HIPAA), as set out in the Data Processing Addendum.
What we collect
Contact details you provide when booking an audit or emailing us — name, work email, company, and the contents of your message.
Basic, privacy-respecting analytics about how this site is used. We do not sell or share this data.
Why we collect it
To respond to enquiries, schedule audits, and deliver engagements you have asked us to scope.
Our lawful bases are legitimate interest (responding to your enquiry) and, where an engagement begins, contract.
How long we keep it
Enquiry data is retained for up to 24 months unless an engagement begins, in which case retention follows the engagement contract and the Data Processing Addendum.
Your rights
You can request access to, correction of, or deletion of your personal data, and you can withdraw consent. Email privacy@obsequi.tech and we will respond within the statutory timeframe.
You also have the right to raise a grievance with our Data Protection Officer and, if unresolved, to approach the Data Protection Board of India.
International transfers
We serve clients across the UK, EU, and US. Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses and carry out transfer impact assessments.