Effective Date: December 20, 2025
Introduction
About Us
1.1 Our Personal Data Protection Commitments
1.2 Our Privacy Network and Compliance Program
1.3 Privacy Principles We Apply
About the Collection and Use of Your Personal Data
2.1 When Do We Collect Your Personal Data?
2.2 What Do We Do With Your Personal Data?
2.3 On What Legal Basis Do We Collect Your Personal Data?
2.4 Who Has Access to Your Personal Data?
2.5 How Long Do We Keep Your Personal Data?
How Do We Ensure the Security of Your Personal Data?
Personal Data of Minors
About Cookies
Your Privacy Rights
Changes to Our Policy
Questions / Contact
Definitions
Indycel (operating via Indycel.com) is committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where relevant, and India’s Digital Personal Data Protection Act (DPDPA 2023). This policy explains how Indycel, acting as Data Controller, collects, uses, and safeguards your personal data when you interact with our website, consultancy services, and training programs.
Indycel ensures a high level of protection for all personal data collected from visitors, customers, trainees, and partners (“Data Subjects”). We comply with applicable data protection rules and maintain transparency in all processing activities.
Indycel has established internal protocols and compliance measures to ensure adherence to data protection principles. This includes:
A Data Protection Officer overseeing compliance.
Staff training and awareness programs on privacy obligations.
Technical and organizational safeguards integrated into our operations.
We process personal data for specific, explicit, and legitimate purposes. Data collected is:
Adequate, relevant, and limited to what is necessary.
Processed lawfully, fairly, and transparently.
Accurate and updated when required.
Retained only for as long as necessary.
We may collect personal data when you:
Browse our website (technical data such as IP address, cookies).
Subscribe to newsletters, updates, or training programs.
Contact us via email, phone, or forms.
Register for consultancy or spawn lab services.
Participate in surveys, workshops, or events.
We use personal data to:
Manage customer and trainee relationships.
Provide services, training, and consultancy.
Respond to inquiries or claims.
Conduct statistical analysis and improve website usability.
Ensure site and operational security.
Processing is based on:
Legitimate interest (e.g., improving services, marketing).
Contractual necessity (e.g., fulfilling consultancy agreements).
Legal obligations (e.g., compliance with tax or regulatory requirements).
Consent (e.g., newsletters, promotional communications).
Access may be granted to:
Indycel employees involved in customer service, training, and IT.
Service providers supporting hosting, analytics, or communications.
Legal authorities when required by law.
Successor entities in case of merger or acquisition.
Retention depends on purpose:
Inquiry data: kept until resolution + legal archiving (up to 5 years).
Marketing data: retained until you unsubscribe or for 3 years after last contact.
Training/consultancy records: retained for contractual duration + compliance period.
Technical logs/cookies: retained as per cookie policy (usually 1–12 months).
We implement technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction. Service providers are contractually bound to maintain equivalent safeguards.
Indycel does not knowingly collect personal data from individuals under 15 years of age. If such data is inadvertently collected, parents or guardians may contact us to exercise rights on behalf of the minor.
Cookies are used to:
Enable technical functionality (session management, preferences).
Conduct statistical analysis of website traffic.
Improve user experience and relevance of services.
You can manage or disable cookies via your browser settings. Disabling cookies may affect website functionality.
You may exercise the following rights:
Access, rectification, and erasure of your data.
Restriction or objection to processing.
Data portability.
Withdrawal of consent (where applicable).
Requests can be submitted via the contact details below.
Indycel may update this policy periodically. Updates will be posted on this page with a revised effective date.
For questions or to exercise your rights, contact:
Indycel.com
Email: amir2020ray@gmail.com
Data Controller: Indycel, determining purposes and means of processing.
Processor: Third parties processing data on behalf of Indycel.
Data Subject: Any individual whose personal data is processed.
Processing: Any operation performed on personal data (collection, storage, use, disclosure, etc.).
Transfer: Any transmission of personal data across borders or systems.