Cookie Policy

1. What Are Cookies

Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They help the website recognise your browser, remember preferences, and gather information about usage patterns.

Similar tracking technologies include web beacons, pixel tags, local storage, and session storage. References to "cookies" in this Policy include all such similar tracking technologies unless otherwise stated.

This Cookie Policy should be read together with our Privacy Policy and Terms of Use. For any conflict between documents, the more specific data-protection provision will govern. This Policy is published having regard to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, 2025 ("DPDP Rules").

2. Consent & Pre-Collection

Non-essential cookies will not be set on your device before you have been informed of their use. When you first access the Platform, you will be presented with information about the cookies we use and the ability to manage your preferences.

Consent for non-essential cookies is: free — you are not required to accept them to access the Platform; specific — given per category of cookie, not as a blanket agreement; informed — you are told what each category does before consenting; and withdrawable — you may withdraw consent at any time via the Cookie Preferences control or by contacting privacy@adynta.com.

Withdrawal of consent does not affect the lawfulness of any processing carried out before withdrawal. After withdrawal, we will cease setting non-essential cookies and will delete or anonymise associated personal data within 30 days, unless retention is required by applicable law.

Strictly necessary cookies (Section 4) are set without consent as they are required for core platform security and functionality. All other cookie categories require your affirmative consent before being set.

3. Cookies We Use

We use a limited set of cookies grouped by purpose. The table below describes each category, the data collected, retention period, and whether any data is transferred outside India. We update this table when we add or remove cookies.

We do not currently use marketing, advertising, or behavioural profiling cookies. If we introduce such cookies in the future, we will update this Policy, present a new consent notice, and obtain explicit consent before setting them.

4. Strictly Necessary Cookies

Strictly necessary cookies are narrowly limited to functions that are essential for the Platform to operate securely and lawfully. We do not treat analytics, functional, or marketing cookies as strictly necessary.

The following specific cookies are treated as strictly necessary:

These specific cookies may be required for certain core functions — such as maintaining an authenticated session or displaying the disclaimer gateway correctly. Disabling them may prevent login or cause the disclaimer gateway to reappear. They are not used for analytics, profiling, or marketing purposes.

5. Analytics Cookies

We use analytics cookies to understand how visitors interact with the Platform, diagnose errors, and improve user experience. Analytics cookies are only set after you provide consent.

Where we use third-party analytics providers (currently Google Analytics), we configure them to: pseudonymise or anonymise IP addresses where possible; limit collection to non-sensitive usage data; and aggregate data rather than link it to individual identities.

Analytics data is retained for up to 24 months. Raw analytics identifiers are anonymised after 6 months. You may opt out at any time via Cookie Preferences. After opt-out, we will cease setting analytics cookies and will delete or anonymise associated data within 30 days.

Google Analytics is operated by Google LLC. Data processed by Google Analytics may be transferred outside India — see Section 7 (Cross-Border Data Transfers) for details.

6. Functional Cookies

Functional cookies remember user preferences and settings — such as preferred language, region, notification settings, and accessibility choices — to deliver a more consistent experience.

Functional cookies are set only after you provide consent where they involve personal data or cross-site tracking. They are not used to profile you across third-party sites or for advertising purposes.

Functional cookies are retained for up to 12 months. You may withdraw consent and delete them at any time via Cookie Preferences or your browser settings.

7. Cross-Border Data Transfers

Some cookie-derived personal data may be processed or stored outside India by third-party providers whose infrastructure is located abroad. Currently, this applies to Google Analytics (Google LLC) and Cloudflare, Inc., which process data in multiple jurisdictions globally.

All cross-border transfers of cookie-derived personal data are carried out in compliance with the DPDP Act, the DPDP Rules, and any restrictions or conditions notified by the Government of India from time to time. Adynta implements appropriate contractual and technical safeguards with these providers and will update those safeguards as required when government notifications or rules change.

For full details on cross-border transfers, destination jurisdictions, and safeguards applicable to all personal data (including cookie-derived data), please refer to Section 7 of our Privacy Policy. To request specific details about a particular cookie's cross-border transfer arrangements, contact privacy@adynta.com.

8. Retention & Deletion

We retain cookie identifiers and associated personal data only for as long as necessary for the stated purpose and no longer than the periods listed in the cookie table in Section 3. Retention periods are tied to documented processing purposes — not set arbitrarily.

When a purpose ends, or you withdraw consent, we will delete or irreversibly anonymise cookie-related personal data within 30 days, unless retention is required by applicable law (for example, for fraud prevention, security investigation, or legal proceedings).

You can delete cookies at any time using your browser settings. Note that deleting strictly necessary cookies (Section 4) will affect core Platform functionality such as your authenticated session.

9. Children's Data

The Platform is a professional B2B regulatory intelligence service intended solely for business and professional users aged 18 years and above. We do not knowingly collect personal data from children (persons under 18 years of age as defined under the DPDP Act 2023) via cookies, and we do not use cookies for behavioural profiling or marketing directed at children.

If Adynta discovers that cookie-derived personal data of a child has been collected through incidental access, Adynta will promptly delete such data and adjust technical controls to prevent recurrence. Parents or guardians who believe a child's data has been collected via cookies may contact privacy@adynta.com to request immediate deletion.

10. Your Rights as a Data Principal

Under the DPDP Act 2023 and other applicable Indian law, you have the following rights in relation to personal data collected via cookies:

• Right to Access: Request information about what cookie-derived personal data we hold about you and how it is used.
• Right to Correction & Erasure: Request correction of inaccurate data or erasure of cookie-derived data that is no longer necessary or where consent has been withdrawn.
• Right to Withdraw Consent: Withdraw consent to non-essential cookies at any time via Cookie Preferences or by contacting privacy@adynta.com. Withdrawal will not affect processing already carried out.
• Right to Grievance Redressal: Raise a complaint about cookie-related data processing with our Grievance Officer.
• Right to Complain: Lodge a complaint with the Data Protection Board of India where you believe your rights have been violated and your grievance has not been resolved.

To exercise any of these rights, email privacy@adynta.com with the subject line "Cookie Data Rights Request", including your name and the email address associated with your account. We will acknowledge within 24 hours and respond within 30 days. Full details of your rights and our Grievance Officer contact are in our Privacy Policy.

11. Your Choices & Cookie Preferences

You have several ways to manage your cookie preferences:

Cookie Preferences control: Use the Cookie Preferences link in the footer to review and update your consent choices at any time. Changes will take effect immediately and will be respected on all subsequent visits.

Browser settings: Most browsers allow you to block or delete cookies through their settings. Instructions for common browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Privacy, search, and services → Cookies and site permissions

Note that blocking or deleting strictly necessary cookies (listed in Section 4) will affect core Platform functionality including your authenticated session and disclaimer acceptance status.

Do Not Track: Some browsers send Do Not Track (DNT) signals. Our Platform does not rely solely on DNT. Instead, we provide explicit Cookie Preferences controls that allow you to manage tracking independently of your browser's DNT setting.

Third-party opt-outs: For Google Analytics specifically, you may also use the Google Analytics Opt-out Browser Add-on. Using our Cookie Preferences control achieves the same result within the Platform.

12. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, applicable law, or government notifications under the DPDP Act.

Material changes — such as introducing new cookie categories, changing cross-border transfer arrangements, or altering retention periods — will be communicated via a notice on the Platform and by updating the Effective Date above. Where a material change requires fresh consent under the DPDP Act or DPDP Rules, we will present a new consent notice before setting any new cookies.

Non-material edits will be posted with an updated effective date. We maintain version records of this Cookie Policy for compliance and auditability.

13. Governing Law

This Cookie Policy is governed by the laws of India. For Indian Data Principals, remedies under the Digital Personal Data Protection Act, 2023 and the Data Protection Board of India remain fully available and are not affected by this Policy.

For disputes concerning this Cookie Policy, the parties will first attempt good-faith resolution. If unresolved, disputes may be brought in the competent courts at Ahmedabad, Gujarat, India, subject to mandatory DPDP procedures where applicable.

14. Contact

For questions about this Cookie Policy, to exercise your data principal rights in relation to cookie-derived data, or to withdraw consent: privacy@adynta.com

For grievances: grievance@adynta.com

Full contact details including our Grievance Officer are published in our Privacy Policy, Section 14.

Adynta Consulting, Ahmedabad, Gujarat, India.