North Star Impact Solutions Pvt Ltd (“NorthStar”, “NIS”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you visit our website or contact us, why we collect it, how we protect it and the choices you have. It is written in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Who we are
We are a sustainability-technology company building SaaS solutions for ESG reporting, carbon accounting, impact scoring and social impact visualisation. Our registered office is at 404 Iscon Emporio, Near Star Bazaar, Jodhpur Crossroads, Satellite, Ahmedabad – 380015, Gujarat, India. For this website, we are the “Data Fiduciary” for the personal data described below.
2. What we collect
- Information you give us: your name, work email, company, the solution you are interested in and your message when you use our contact or demo form, or email us.
- Technical information: IP address, browser type, device, pages visited and time spent, collected through server logs and essential cookies to keep the site secure and working.
- Communication records: correspondence with our team, including meeting notes from demos you request.
We do not knowingly collect sensitive personal data such as financial, health or biometric information through this website. Please do not include such data in form messages.
3. Why we use it
- To respond to your enquiry, schedule a demo and share information you asked for.
- To understand how our website is used so we can improve content and performance.
- To keep our website and systems secure, and to prevent spam and misuse.
- To comply with legal obligations and respond to lawful requests from authorities.
We process your data on the basis of your consent (which you give when you submit a form) and for legitimate uses permitted under applicable law. We never sell your personal data.
4. Platform data is different
If your organisation subscribes to the NIS platform, the sustainability, operational and ESG data you upload is processed under your subscription agreement and data processing terms. In that relationship your organisation decides how that data is used, and we process it only to provide the service.
5. Cookies
We use essential cookies required for the website to function and stay secure. If we introduce analytics or marketing cookies in the future, we will update this policy and, where required, ask for your consent first. You can block or delete cookies in your browser settings; some parts of the site may not work as intended if you do.
6. Sharing your data
We share personal data only with trusted service providers who help us run our business, such as website hosting, email and cloud infrastructure providers (for example AWS, Microsoft Azure or Google Cloud). They may process data only on our instructions and must keep it confidential and secure. We may also disclose data if required by law or to protect our rights, users or the public.
7. International transfers
Some of our service providers may store or process data outside India. Where this happens, we take reasonable steps to ensure your data receives a level of protection consistent with Indian law, and we do not transfer data to any country restricted by the Government of India.
8. How long we keep it
We keep enquiry data for as long as needed to respond to you and manage our relationship, typically up to 24 months after our last interaction, unless a longer period is required by law. After that, we delete or anonymise it.
9. How we protect it
We use reasonable security practices, including encrypted connections (HTTPS), access controls, regular updates and limited staff access on a need-to-know basis. No method of transmission over the internet is completely secure, but we work continuously to protect your information.
10. Your rights
- Ask for a summary of the personal data we hold about you and how we use it.
- Ask us to correct, complete or update inaccurate data.
- Ask us to erase your data where it is no longer needed.
- Withdraw your consent at any time; this will not affect processing already carried out.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To exercise any of these rights, email us at admin@northstarimpactsolution.com. We may need to verify your identity before acting on a request.
11. Children
Our website and services are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared data with us, please contact us and we will delete it.
12. Grievance Officer
If you have any concern about how your personal data is handled, please write to our Grievance Officer at admin@northstarimpactsolution.com or by post to our registered office address above. We aim to acknowledge grievances within 48 hours and resolve them within 30 days.
13. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed. Significant changes will be highlighted on this page.