Privacy Policy

[TO BE COMPLETED], trading as The Green Team (Channel Partners · Hyderabad), decides why and how your personal data is processed. Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) that makes us the Data Fiduciary and you the Data Principal.

Registered address: [TO BE COMPLETED]. Registration: [TO BE COMPLETED]. GSTIN: [TO BE COMPLETED].

Questions about anything below go to Data Protection Officer, [TO BE COMPLETED] at privacy@thegreenteam.in.

This is the whole list. If something is not here, we are not collecting it. We ask for the least we can and still do the job — we do not require an address, a date of birth, an income figure or any identity document to use this site.

We never sell your personal data, and we never rent or trade your contact details. We do not run behavioural advertising and we do not build advertising profiles from your visits.

Where we rely on consent, you give it by a clear affirmative act — typing your details into a form and submitting it, accepting analytics in the cookie banner, or switching the monthly briefing on. We do not treat silence, a pre-ticked box or continued browsing as consent.

Withdrawing consent is as easy as giving it, as the DPDP Act requires. Turn the briefing off with the same toggle on your profile that turned it on. Refuse analytics from the cookie banner, or clear the choice and answer again. Withdraw everything by deleting your account. Withdrawal is not retrospective — it does not undo processing that was lawful before you withdrew — and it may mean we can no longer do the thing you asked for.

Some processing does not rest on consent but on a legitimate use under section 7 of the DPDP Act: chiefly, personal data you volunteered for a purpose and have not objected to — the details in an enquiry, so an adviser can call you back.

Under sections 11 to 14 of the DPDP Act you may:

• Know what we hold. A summary of your personal data, what we are doing with it, and who else we have shared it with. Download all of it from your profile, as a file, immediately.
• Correct or complete it. Every field we hold is editable on your profile, except an email or phone number a provider verified — write to us and we will change those.
• Have it erased. Delete your account from your profile and we remove your account, your profile, your chat transcripts and your place on the briefing list. We keep enquiry records where we are required to, or where they are needed for a legal claim — clause 6 says how long.
• Be heard. Grievance redressal is clause 9, and it has a deadline. No account? Make any of these requests here.
• Nominate someone. You may nominate a person to exercise these rights for you if you die or become incapable of exercising them. Write to the Data Protection Officer and we will record it.

We answer a request within 30 days. We may ask you to verify who you are first — the DPDP Act also places a duty on you not to impersonate someone else.

Only the processors below, each doing a defined job for us under contract, and never for their own marketing. We have not appointed a Consent Manager.

We also pass your name and number to the developer of a project when you ask us to arrange a site visit or a booking with them — that is the introduction you came to us for, and we tell you at the time. We disclose data to a court, regulator or law enforcement agency where we are legally required to.

Data leaving India. Several processors above operate outside India, so your data is processed abroad. Section 16 of the DPDP Act permits this except to countries the Central Government restricts by notification; we will stop using any processor that becomes non-compliant.

The table in clause 2 gives the period for each kind of data. In short: your account lasts until you delete it; enquiry records are kept for three years from your last contact with us, because that is how long a dispute about an introduction can realistically arise; analytics is deleted after fourteen months; chat transcripts after twelve.

When you withdraw consent and no legal purpose requires us to keep something, we erase it, as section 8(7) requires — we do not archive it indefinitely against a future use.

Reasonable security safeguards, as section 8(5) requires: traffic is encrypted end to end; the database is not reachable from a browser and every read and write goes through our server, which checks who you are first; unit pricing and every administrative screen are closed to anyone not signed in and authorised; our email provider holds only what it needs to send. Access is limited to the people who need it to answer you.

If there is a breach, section 8(6) requires us to notify the Data Protection Board of India and each affected person. We will tell you what happened, what data was involved, what we have done, and what you should do — without waiting to finish investigating.

This site is not intended for anyone under 18, and we do not knowingly collect a child’s personal data. Section 9 of the DPDP Act requires verifiable parental consent before processing a child’s data, and prohibits tracking, behavioural advertising and any processing likely to cause a detrimental effect on a child. We do none of those things to anyone. If you believe a child has given us data, write to the Data Protection Officer and we will delete it.

Write to our Grievance Officer, [TO BE COMPLETED], at grievance@thegreenteam.in. We acknowledge within 24 hours and resolve within 15 days.

You must give us that chance first. If we do not answer, or the answer does not satisfy you, you may complain to the Data Protection Board of India. Nothing here takes away a right you have under any other law.

If we change how we use your data in a way that matters, we will say so on this page and email every member before it takes effect — not quietly re-date the document. The version and date at the top always say which text is current.

The Green Team · Hyderabad, Telangana · admin@thegreenteam.in · +91 97001 44003