Privacy Policy

Effective date: August 1, 2026
Last updated: August 1, 2026

This Privacy Policy explains how Stathmos Group LLP ("Stathmos," "we," "us," or "our"), with its registered office at 212-A Lilamani Corporate Heights, Nava Vadaj, Ahmedabad, Gujarat 380013, India, collects, uses, and protects personal information when you visit https://stathmosgroup.com/ (the "Website"), contact us, subscribe to our newsletter, or engage our services.

For the purposes of the EU/UK General Data Protection Regulation ("GDPR"), we are the data controller of the personal data described in this policy. For the purposes of India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP"), we are the data fiduciary.

If you have questions about this policy or your personal data, contact us at info@stathmosgroup.com.

1. Information We Collect

We collect only the information we need, and we do not buy, sell, or trade personal data.

Information you provide to us:

• Contact and quote forms: your name, email address, phone number (if provided), the subject and content of your message, and any attachments or other information you choose to include.
• Newsletter sign-up: your email address.
• Business communications: information you share with us by email, phone, or messaging apps in the course of an enquiry or project.
• Client and project information: where you engage our services, information needed to deliver the project and manage billing, as defined in the applicable contract or Statement of Work.

Information collected automatically:

• Server logs: when you visit the Website, our web server may record standard technical data such as your IP address, browser type and version, the pages you visit, the date and time of your visit, and the referring page. We use this data for security, debugging, and to keep the Website running reliably.
• Form submissions: when you submit a form, we record the submission together with your IP address and the time of submission. We use the IP address for spam prevention and rate limiting.
• Email engagement (newsletters and follow-ups we send): emails we send may contain a small tracking image and measured links that tell us whether a message was opened and which links were clicked, together with the IP address and browser/device type at the time. We use this to understand whether our communications are useful and to stop sending messages that are not being read. You can prevent open tracking by disabling image loading in your email client, and you can opt out of these emails entirely at any time (see Section 6).

We do not use third-party advertising trackers or marketing cookies. With your consent, we use Google Analytics to understand how the Website is used; you can accept or reject this in the cookie banner or at any time via the "Cookie settings" link in the footer, and no analytics cookies are set until you accept. See our Cookie Policy for details of the cookies in use.

2. How and Why We Use Your Information (Legal Bases)

We use personal information for the following purposes. Where the GDPR or similar laws apply, the legal basis for each purpose is indicated.

• Responding to your enquiries and quote requests — to reply to you and discuss your project. Legal basis: our legitimate interest in responding to messages you send us, and/or steps taken at your request prior to entering into a contract.
• Providing and managing our services — delivering projects, support, invoicing, and account administration. Legal basis: performance of a contract.
• Sending our newsletter and service updates — only where you have signed up or otherwise agreed to receive them. Legal basis: consent, which you may withdraw at any time.
• Website security and spam prevention — including rate limiting, abuse detection, and the Cloudflare Turnstile check on our forms. Legal basis: our legitimate interest in keeping the Website and our systems secure.
• Understanding how the Website is used — only if you accept analytics cookies, using Google Analytics to see which pages are viewed and how visitors arrive. Legal basis: consent, which you may withdraw at any time.
• Improving our Website and communications — using aggregate, non-identifying information wherever possible. Legal basis: our legitimate interest in improving our services.
• Legal compliance — keeping records required by tax, accounting, and other laws, and establishing or defending legal claims. Legal basis: compliance with a legal obligation and our legitimate interests.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects, and we do not sell or "share" (as defined in California law) personal information.

3. Where Your Data Is Processed and International Transfers

We are based in India, and personal data is primarily processed on servers and systems located in India and/or the country of our hosting providers. If you contact us from outside India (for example, from the EU, UK, North America, Australia, or New Zealand), your information will be transferred to and processed in India.

Where required by applicable law, we protect international transfers using appropriate safeguards, such as contractual protections consistent with recognised standard contractual clauses, and we apply the same care to your data regardless of where it is processed. You may contact us for more information about the safeguards applied to your data.

4. Third-Party Service Providers

We use a small number of carefully selected service providers ("processors") to operate the Website and our business:

• Cloudflare Turnstile (Cloudflare, Inc.): protects our forms from spam and automated abuse. When you complete a form, Turnstile may process technical information about your browser and device to distinguish humans from bots. See Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/ for details.
• Hosting and infrastructure providers: host the Website, our databases, and email services.
• Email delivery (SMTP) providers: deliver form notifications and newsletters.
• Google Analytics (Google Ireland Limited and Google LLC): only where you consent to analytics cookies, measures how the Website is used. Google processes technical usage data, including a shortened IP address, as described in our Cookie Policy and Google's privacy policy at https://policies.google.com/privacy.

We only share with these providers the information they need to perform their services, we do not permit them to use your personal contact details for their own marketing, and we require appropriate confidentiality and security commitments. We may also disclose personal information where required by law, court order, or governmental authority, or where reasonably necessary to protect our rights, users, or the public.

5. Data Retention

We keep personal information only for as long as needed for the purposes described above:

• Enquiry and form submissions: retained while we handle your enquiry and for a reasonable period afterwards so we can refer back to prior correspondence, after which they are deleted or anonymised.
• Newsletter data: retained until you unsubscribe or we delete inactive subscribers; unsubscribe records may be kept on a suppression list so we do not contact you again.
• Client and billing records: retained for the duration of our engagement and thereafter as required by tax, accounting, and company law (typically up to 8 years in India).
• Server and security logs: retained for short periods appropriate to security and troubleshooting.

When retention is no longer required, we delete or irreversibly anonymise the data.

6. Newsletter and Marketing Communications

We send marketing emails only to people who have signed up or who have an existing business relationship with us where permitted by law. Every marketing email we send includes a way to unsubscribe, and you can also opt out at any time by emailing info@stathmosgroup.com. Opting out of marketing does not affect emails we need to send you about an active project or contract.

7. Your Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you and a summary of how it is processed.
• Correction — ask us to correct or update inaccurate or incomplete information.
• Erasure — ask us to delete your personal information, subject to legal retention requirements.
• Restriction and objection — ask us to limit certain processing, or object to processing based on legitimate interests or for direct marketing (marketing objections are always honoured).
• Data portability — receive certain data in a structured, commonly used, machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Grievance redressal and nomination (India): if you are in India, you have the right to readily available means of grievance redressal and the right to nominate another individual to exercise your rights in the event of death or incapacity, in accordance with the DPDP Act.
• Complain to a regulator: you may lodge a complaint with your local data protection authority — for example, the Data Protection Board of India, your EU member state supervisory authority, the UK Information Commissioner's Office, or the Office of the Australian Information Commissioner. We would appreciate the opportunity to address your concerns first.

California residents: we do not sell personal information or share it for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. You have the rights to know, access, correct, and delete personal information, and the right not to receive discriminatory treatment for exercising your rights.

To exercise any of these rights, email info@stathmosgroup.com. We may need to verify your identity before acting on a request, and we will respond within the timeframe required by applicable law. Exercising your rights is free of charge except where a request is manifestly unfounded or excessive.

8. Grievance Officer (India)

In accordance with Indian law, the contact details of our Grievance Officer are:

Name

Punit Advani

Email

info@stathmosgroup.com

Address

212-A Lilamani Corporate Heights, Nava Vadaj, Ahmedabad, Gujarat 380013, India

We will acknowledge and address grievances within the timelines prescribed under applicable law.

9. Security

We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS), access controls, spam and abuse protection, and the principle of collecting only what we need. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we review our practices regularly and will notify you and the relevant authorities of a personal data breach where required by applicable law.

10. Children's Privacy

Our Website and services are directed at businesses and professionals and are not intended for children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Links to Other Websites

Our Website contains links to external websites we do not operate. This Privacy Policy does not apply to those websites, and we encourage you to review the privacy policies of any site you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. For material changes, we will provide a more prominent notice on the Website or, where appropriate, notify you by email. Your continued use of the Website after changes take effect indicates your acknowledgement of the updated policy; where a change requires your consent under applicable law, we will ask for it.

13. Contact Us

Company

Stathmos Group LLP

Email

info@stathmosgroup.com

Phone

+91 97125 48149 | +91 97122 11746

Address

212-A Lilamani Corporate Heights, Nava Vadaj, Ahmedabad, Gujarat 380013, India