Privacy Policy

This Privacy Policy explains how NMA Enterprises Private Limited ("The Delhi Folk," "we," "us," or "our") collects, uses, stores, shares, and protects your personal data when you visit our website (the "Website") or interact with us.

We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000, and the rules made thereunder.

For the purposes of the DPDP Act, The Delhi Folk acts as the Data Fiduciary in respect of the personal data it processes, and you are the Data Principal.

By using the Website or providing your personal data to us, you consent to the practices described in this Privacy Policy.

This Privacy Policy applies to personal data we collect:

• through the Website, including any contact or enquiry form;
• when you communicate with us by email or other means; and
• in the course of discussing or providing our services.

This Policy does not apply to third-party websites or services that may be linked from our Website. Personal data processed under a separate client engagement agreement is also governed by the terms of that agreement.

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide to us:

• Name, email address, phone number, and company or organisation name;
• The content of any enquiry, brief, message, or other communication you send us;
• Any other information you choose to share with us during a prospective or active engagement.

Information we collect automatically:

• Technical data such as your IP address, browser type, device information, and operating system;
• Usage data such as the pages you visit, the time and date of your visit, and how you navigate the Website;
• Cookies and similar technologies (see Section 7).

We do not intentionally collect sensitive personal data through the Website. Please do not share sensitive information (such as financial account details, health information, or government identifiers) through the Website unless specifically requested for a legitimate purpose.

We collect personal data:

• Directly from you — when you fill in a form, email us, or otherwise communicate with us;
• Automatically — through cookies and analytics tools when you use the Website; and
• From third parties — for example, publicly available professional information or referrals, where relevant to a potential engagement.

We use your personal data for the following purposes:

• to respond to your enquiries and communicate with you;
• to provide, discuss, and deliver our services;
• to manage our relationship with you as a client, collaborator, or prospective client;
• to operate, maintain, and improve the Website;
• to send you information you have requested, or updates we believe may be relevant to you, where you have consented;
• to comply with our legal and regulatory obligations; and
• to protect our rights, property, and the security of the Website.

Under the DPDP Act, we process your personal data on the basis of your consent or for legitimate uses permitted under the law. Where we rely on consent, you may withdraw it at any time (see Section 9).

When you provide personal data through the Website, we will, where required, seek your consent and inform you of the purpose of processing. Your consent is free, specific, informed, unconditional, and unambiguous, and is limited to the purposes for which it is given.

You may withdraw your consent at any time by contacting us using the details in Section 13. Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal. If you withdraw consent, we may be unable to provide certain services or respond to your enquiries.

The Website may use cookies and similar technologies to function properly, remember your preferences, and understand how visitors use the Website.

• Essential cookies are necessary for the Website to operate.
• Analytics cookies help us measure and improve Website performance (for example, through tools such as web analytics services).
• You can manage or disable cookies through your browser settings. Disabling certain cookies may affect how the Website functions.

If you use specific tools such as Google Analytics, Meta Pixel, or an embedded form/marketing platform, name them here and link to their privacy policies. If you implement a cookie consent banner, reference it in this section.

We do not sell your personal data. We may share your personal data only in the following circumstances:

• Service providers (Data Processors): with trusted third parties who process data on our behalf, such as hosting, email, analytics, and form providers, under appropriate confidentiality and data protection obligations;
• Legal and regulatory: where required to comply with applicable law, legal process, or a lawful request from a government or regulatory authority;
• Business protection: where necessary to enforce our terms, protect our rights, or prevent fraud or harm; and
• Business transfers: in connection with a merger, acquisition, or reorganisation, subject to appropriate safeguards.

Under the DPDP Act, you have the following rights in respect of your personal data:

• Right to access — to obtain a summary of the personal data we process about you and the processing activities undertaken;
• Right to correction and erasure — to request correction, completion, updating, or erasure of your personal data;
• Right to grievance redressal — to have your grievances addressed by us (see Section 13);
• Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity; and
• Right to withdraw consent — to withdraw consent previously given, at any time.

To exercise any of these rights, please contact us using the details in Section 13. We may need to verify your identity before acting on your request. We will respond within the timelines required under applicable law.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When personal data is no longer required, we will delete or anonymise it in a secure manner.

We implement reasonable security practices and procedures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with applicable law. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. Where required under the DPDP Act, we will obtain verifiable consent from a parent or lawful guardian before processing the personal data of a child. If you believe we have inadvertently collected data from a child, please contact us so we can delete it.

If you have any questions, concerns, or grievances regarding this Privacy Policy or how we handle your personal data, you may contact our Grievance Officer:

Grievance Officer: [insert name]
On behalf of: NMA Enterprises Private Limited (The Delhi Folk)
Email: info@thedelhifolk.com
Address: I-601, Mayur Dhwaj Apartments, Indraprastha Extension Road, New Delhi – 110092

We will acknowledge and address grievances within the timelines prescribed under applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically. Your continued use of the Website after any changes constitutes acceptance of the revised Policy.

This Privacy Policy is governed by the laws of India. Any disputes arising in relation to it shall be subject to the jurisdiction of the courts at New Delhi, India.