Privacy built around clear, limited use

This policy applies to personal data handled through this website, project-enquiry emails, telephone calls, WhatsApp conversations and other direct communications relating to EvolveNest Energy. It does not replace a privacy or data-processing clause in a signed consultancy, employment, vendor or other agreement; that agreement applies to the processing specifically covered by it.

Our contact location is AB Road, near Silicon City, Indore, Madhya Pradesh, India. This is presented as a contact location and not necessarily the company's registered office.

Depending on how you interact with us, we may handle:

• Identity and contact data, such as your name, work email address and telephone number.
• Professional data, such as your organisation, role and business contact details.
• Project and enquiry data, including project type, site location, energy requirement, expected timeline, documents and the content of your messages.
• Communication records, including emails, call notes and WhatsApp messages exchanged with our team.
• Technical and usage data routinely generated when a website is requested, such as IP address, browser or device type, requested URL, referral information, timestamps and security or server logs. This information may be processed by our hosting and infrastructure providers.
• Consent, preference and request records, including privacy requests and communication preferences.

• Directly from you when you email, call, use WhatsApp, request a brochure or discuss a project with us.
• From your organisation or an authorised colleague when they include you in a project discussion.
• Automatically through standard web-server and security logs when you access the website.
• From public professional sources or referrals where relevant to a genuine business enquiry, subject to applicable law.

The website enquiry form currently prepares a message in your own email application. The form data is not submitted to or stored in a website database by EvolveNest Energy. Your email provider processes the message when you choose to send it.

If you provide personal data about another person, you should have authority to do so and should direct that person to this policy where appropriate.

• Respond to enquiries and understand project objectives, sites, constraints and timelines.
• Prepare proposals, assessments, meetings and potential consultancy engagements.
• Provide requested information, brochures, services and project communications.
• Manage client, prospect, vendor and professional relationships.
• Operate, secure, diagnose and improve the website and its availability.
• Prevent misuse, fraud, security incidents and unlawful activity.
• Maintain business, consent, request and transaction records.
• Comply with law, enforce agreements, establish or defend legal claims and respond to lawful authority requests.
• Send relevant business updates only where permitted; you may opt out of optional promotional communication at any time.

We do not sell or rent personal data. We do not use website-enquiry data for automated decision-making or profiling that produces legal or similarly significant effects.

We process personal data only for lawful purposes. Depending on the activity and the law that applies, processing may be based on your consent; your request for information or steps toward an engagement; performance of a contract; compliance with a legal obligation; permitted business or security purposes; or another basis recognised by applicable law.

Where processing relies on consent, you may withdraw that consent by contacting us. Withdrawal does not affect processing already carried out lawfully and may not require deletion where retention is required by law or for valid legal claims.

We do not currently use advertising cookies, behavioural tracking pixels or a third-party website analytics service. The site uses limited browser session storage to remember that the introductory animation has already been shown during the current browser session. This value is functional, does not identify you by name and normally disappears when the browser session ends.

Our hosting provider may use essential technologies or logs necessary to deliver and secure the site. If we later introduce non-essential cookies or analytics, we will update this policy and, where required, provide an appropriate consent choice before using them.

We may disclose personal data only as reasonably necessary to:

• Hosting, cloud, email, communications, cybersecurity and professional-service providers acting for us.
• Consultants, contractors, technology partners or vendors involved in evaluating or delivering a project, subject to appropriate confidentiality and only where relevant.
• Our corporate affiliates, personnel and authorised representatives on a need-to-know basis.
• Government bodies, regulators, courts, law-enforcement agencies or other parties where disclosure is required or permitted by law.
• A buyer, investor or successor in connection with a genuine merger, financing, reorganisation or transfer of business, subject to suitable confidentiality protections.

Some external service providers, including communications and web-infrastructure providers, may process data outside India. Where applicable, we take reasonable steps to use providers and arrangements consistent with legal restrictions on cross-border processing. We do not transfer personal data to a country or territory where such transfer is prohibited by the Government of India.

We keep personal data only for as long as reasonably necessary for the purpose described in this policy. As a general operating standard, inactive enquiry records may be deleted or anonymised after 24 months from the last meaningful interaction. Active client, transaction and project records may be kept for the engagement period and afterward for legal, tax, accounting, warranty, dispute-resolution and professional-record requirements.

Security and server logs are retained according to operational need and provider schedules. We may retain a limited record of a deletion, consent withdrawal or opt-out request to demonstrate compliance and avoid contacting you again contrary to your preference.

We use reasonable technical and organisational safeguards appropriate to the nature of the data and the risks involved. These may include access controls, restricted internal access, secure service providers, device and account protections, backups, confidentiality duties and processes for identifying and responding to incidents.

No internet transmission or storage system is completely secure. You remain responsible for choosing what you send through email or WhatsApp. If a personal-data breach occurs, we will assess it, take reasonable containment and remediation steps, and provide notifications to affected individuals and authorities where required by applicable law.

Subject to applicable law and available exceptions, you may ask us to:

• Confirm whether we process your personal data and provide information about that processing.
• Correct, complete or update inaccurate or incomplete personal data.
• Erase personal data that is no longer needed or that must be erased under applicable law.
• Withdraw consent or opt out of optional promotional communications.
• Provide information about relevant processors or recipients where the law requires it.
• Address a grievance concerning our handling of personal data.
• Record a nomination to exercise applicable rights in the event of death or incapacity, where this right is available under law.

Send a request from the email address associated with your data to our privacy contact below. Describe your request and the relevant interaction or project. We may request proportionate information to verify identity and authority before acting. We will respond within the period required by applicable law.

You should first give us a reasonable opportunity to resolve a privacy grievance. Where the Digital Personal Data Protection Act, 2023 and relevant rules provide a right to approach the Data Protection Board of India, you may do so after using our grievance process, in the manner prescribed by law.

This website and our consultancy services are intended for adults and organisations, not for children. We do not knowingly seek personal data from anyone under 18 through the general enquiry channels. A parent or lawful guardian who believes a child has provided personal data should contact us so we can review and, where appropriate, delete it. Where processing of a child's data is necessary and lawful, we will seek verifiable parental or guardian consent and apply protections required by law.

The site links to WhatsApp, Instagram, Facebook and email services, and loads web fonts supplied by Google. Opening or using an external service may allow that provider to collect identifiers, device or usage data under its own terms and privacy policy. We do not control those services. Review their privacy information before sending personal data.

Downloadable brochures are served as website files. Standard hosting logs may record the request, but the brochure download does not require you to create an account or submit personal data to us.

We may revise this policy when our services, technology, providers or legal obligations change. The latest version will be posted on this page with an updated effective date. If a change materially affects how we use personal data already collected, we will provide additional notice or seek consent where required.

To exercise a privacy right, withdraw consent, report a concern or ask a question, contact the Privacy and Grievance Officer for EvolveNest Labs Pvt Ltd:

For the website rules that operate alongside this policy, read our Terms and Conditions.