1. Introduction
At Kaiso Research and Consulting LLP (“Kaiso,” “we,” “us,” or “our”), we are committed to protecting the privacy and personal data of our clients, research participants, partners, and website users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our websites, services, platforms, or communications, whether online or offline.
As a research and consulting firm operating in a digital-first, data-driven environment, we align our practices with global privacy regulations, including the EU General Data Protection Regulation (GDPR), the Information Technology Act, 2000 (India), and other applicable regional laws.
2. Information We Collect
We may collect and process different categories of personal and professional information depending on your engagement with us. This includes, but is not limited to:
a. Personal Information
- Name, job title, email address, phone number, company name
- Billing and payment information (when purchasing reports or subscriptions)
- Geolocation and communication preferences
b. Business Information
- Survey responses (quantitative and qualitative)
- Company-specific or sectoral data shared for custom research projects
- Transaction and communication history
c. Automatically Collected Data
When you interact with our website, we may automatically collect:
- IP address, device type, browser type
- Pages visited, time spent, referring URLs
- Cookies and session data
3. How We Use Your Information
We collect and use your data for the following purposes:
- To process orders, inquiries, or service requests
- To conduct B2B market research, surveys, and consulting engagements
- To improve our website and user experience
- To personalise content, emails, and service recommendations
- To comply with legal obligations, internal audits, or regulatory requests
- To maintain communication regarding your account, transactions, or updates
- We do not sell or rent personal data to third parties.
4. Legal Basis for Processing
Where applicable under GDPR, our lawful bases for collecting and processing personal data include:
- Consent – You have given clear permission for us to process your data for a specific purpose.
- Contractual Necessity – Processing is required to fulfil a contract or pre-contractual request.
- Legal Obligation – Processing is necessary to comply with applicable law.
- Legitimate Interest – Processing is necessary for our business functions, such as research analysis or customer communication, and does not override your rights.
5. Use of Cookies and Tracking Technologies
Kaiso uses cookies, pixels, and other tracking technologies to enhance your experience and improve our services. Cookies help us:
- Understand how users interact with our content
- Remember login details and preferences
- Provide tailored recommendations or reminders
You may choose to disable cookies in your browser settings. However, this may limit some functionality of our website.
For more details, please refer to our full Cookie Policy (available upon request).
6. Data Sharing and Third Parties
We may share data with:
- Trusted service providers (e.g., cloud hosts, analytics vendors, marketing platforms)
- Research partners or clients (only anonymised or aggregated data, unless explicitly consented)
- Legal or regulatory bodies (when required by law)
All third-party vendors are bound by strict data protection agreements and confidentiality clauses.
7. Data Storage and Retention
All data is securely stored on servers with industry-standard encryption and access control measures. Personal data is retained:
- For as long as necessary to fulfil the purpose for which it was collected
- To meet legal, contractual, or regulatory obligations
- Or until a valid request for erasure is received (see Section 9)
Data is reviewed periodically for accuracy and relevance.
8. International Data Transfers
Where data is transferred outside India or the EEA (European Economic Area), we ensure such transfers comply with data protection requirements through:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs)
- Secure encryption protocols
9. Your Rights Under GDPR and Applicable Laws
If you are located within the EEA or under jurisdictions with data protection laws, you may have the right to:
- Access your data
- Rectify incorrect or incomplete data
- Delete your data (“Right to be Forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Complain to a supervisory authority
To exercise any of these rights, please contact us at help@kaisoresearch.com.
10. Data Security Measures
We implement multi-layered data protection mechanisms, including:
- Role-based access controls
- Data encryption (in transit and at rest)
- Secure payment gateways (e.g., PayPal, Stripe)
- Two-factor authentication
- Regular vulnerability scans and audits
- Staff training in cybersecurity and data protection protocols
11. Links to Third-Party Sites
Our website or services may contain links to external websites. We are not responsible for the privacy practices, content, or security of these third-party sites. We recommend reviewing their privacy policies before providing any personal information.
12. Policy Updates and Modifications
We may update this Privacy Policy periodically to reflect legal or operational changes. The updated version will be posted on our website with a revised “Last Updated” date. Continued use of our services after any modification constitutes your acceptance of the revised policy.
13. Contact Us
For questions, concerns, or requests related to this Privacy Policy or your data:
- Email: help@kaisoresearch.com
- Phone: +1 872 219 0417