Privacy Policy

1. Who We Are

This Privacy Policy applies to Tarnea Technology Solutions Private Limited (CIN: U72900KA2011PTC059509), trading as Thembian, a company incorporated under the Companies Act, 2013 and registered in Bengaluru, Karnataka, India. Our registered office is at #677, 1st Floor, 13th Cross, 27th Main Rd, 1st Sector, HSR Layout, Bengaluru, Karnataka 560102.

When we refer to "Thembian", "we", "us", or "our" in this policy, we mean Tarnea Technology Solutions Private Limited and its Thembian brand.

2. Scope

This policy describes how we collect, use, store, and share personal data when you visit www.thembian.com, contact us, request a free assessment, or engage with our services. It applies to all visitors and prospective clients regardless of geography.

3. Data We Collect

Information you provide directly:

• Name, company name, work email address, and phone number (via our assessment form or contact channels)
• Industry, annual revenue range, and other business details you share during engagement
• Communications you send us via email or WhatsApp

Information collected automatically:

• Browser type, IP address, device information, and operating system
• Pages visited, time on page, and referral source
• Cookie identifiers (see our Cookie Policy for details)

4. How We Use Your Data

We use personal data for the following purposes:

• Providing our services: To conduct free AI assessments, deliver engagements, and fulfil contractual obligations
• Communications: To respond to your enquiries and keep you informed of your engagement status
• Marketing (with consent): To send thought leadership, case studies, and relevant updates where you have opted in
• Analytics: To understand how our website is used and improve the user experience
• Legal compliance: To comply with applicable laws, regulations, and court orders

5. Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance: Where processing is necessary to deliver services you have requested
• Legitimate interests: For analytics, website security, and business development activities
• Consent: For marketing communications and non-essential cookies, where your opt-in is obtained
• Legal obligation: Where required by applicable Indian or international law

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Cloud infrastructure, analytics, and CRM providers acting as data processors under confidentiality agreements
• Professional advisors: Legal, accounting, and audit firms where necessary
• Authorities: Regulatory bodies or law enforcement where required by law

Any third-party processor is required to handle your data in accordance with applicable data protection law and our instructions.

7. International Transfers

Our primary operations are in India. Where data is transferred outside India, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms, in accordance with the Digital Personal Data Protection Act, 2023 (India) and applicable international standards.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Prospective client data is retained for 24 months from last contact. Client engagement data is retained for 7 years for legal and audit purposes. You may request deletion at any time (subject to legal retention obligations).

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain processing activities
• Withdraw consent at any time (where processing is consent-based)
• Data portability in a structured, machine-readable format

To exercise any of these rights, contact us at hello@thembian.com. We will respond within 30 days.

10. Security

We implement industry-standard technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure; we encourage you not to share sensitive personal data over unencrypted channels.

11. Cookies

We use cookies and similar technologies on our website. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.

12. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated effective date. Your continued use of our website after changes constitutes acceptance of the revised policy.