Privacy Policy

Last updated: October 17, 2026

This policy explains what personal data Ceres Canopus Private Limited collects through its website and business contacts, why we use it, who we share it with, and how you can control it.

Ceres Canopus Private Limited (brand name Ceres Canopus Pvt Ltd; “Ceres Canopus,” “we,” “us” or “our”) respects your privacy. This policy applies when you visit cerescanopus.com, contact us, ask for a quotation or updates, apply for an internship, or otherwise deal with us about our services.

We aim to handle personal data in line with the Digital Personal Data Protection Act, 2023 and its rules, and the Information Technology Act, 2000 and its rules. Indian law applies (see Section 10 of our Terms of Use). If you are in the European Economic Area (EEA), the United Kingdom (UK) or Switzerland, please also read Section 12. Please read this policy with our Cookie Policy and Terms of Use.

1. Information we collect

Information you provide

Please do not send passwords, government identifiers, financial account details, health information, or other sensitive personal data through our website forms. We do not take payments on our website, and visitors do not have accounts.

Information collected automatically

Our hosting, security and website systems process technical information such as your IP address, browser and device details, pages requested, referring page, date and time, and server and security logs. We also use cookies and Google Analytics (Section 6).

2. How we use information

We use personal data to respond to enquiries and quotation requests, provide our services, assess internship applicants, send updates you asked for, manage business relationships, operate, secure and back up our website, understand how it is used, prevent spam and fraud, keep business records, comply with law, and protect our rights.

Under Indian law we process personal data with your consent, or for legitimate uses the law allows, such as responding to a request you made voluntarily or giving information the law requires us to give to the authorities. Analytics is the one non-essential use that starts before you choose, for visitors outside the EEA, UK and Switzerland. Where we show a consent banner, you can switch it off (Section 6). Section 12 covers the legal bases for visitors in the EEA, UK and Switzerland.

3. How we share information

We do not sell or rent personal data. We share it only as far as needed, with our personnel and authorised contractors, the service providers below, professional advisers such as accountants and lawyers, business clients or partners for an authorised project, courts or authorities when the law requires it, and a successor if our business is merged, restructured or sold.

Providers handle information under contract or under their own terms, and we remain responsible for how we use your data.

4. Internship applications

Internship applications are for people aged 18 or over (Section 11). We use application information to assess your suitability, contact you, arrange interviews and keep recruitment records. We aim to keep an application only as long as needed to finish selection and to consider you for a relevant future opportunity.

You can ask us to delete your application. We aim to delete or anonymise it from our live systems, unless the law requires us to keep it. Copies in backups and email may remain until they are overwritten or deleted in the normal course (Section 8).

5. Marketing communications

If you ask for updates or agree to receive marketing, we may use your email address or other contact details to send company news, offers and service information. You can withdraw consent or opt out at any time by using the unsubscribe method in the message, where one is included, or by emailing info@cerescanopus.com. Withdrawing consent does not affect processing that was lawful before you withdrew it.

6. Cookies, analytics and third-party content

Our Cookie Policy lists each cookie, who sets it, how long it lasts and how to control it. In short:

Strictly necessary and functional cookies

WordPress, caching and security tools use cookies or similar storage to run the site, keep forms and pages secure and fast, and remember choices such as a dismissed pop-up. Staff who log in receive login and settings cookies. Ordinary visitors do not. A hidden honeypot field, which real visitors never see, helps us catch automated spam.

Analytics

We use Google Analytics 4, a non-essential service, to learn how visitors use the site. It records pages viewed, scrolling, clicks on links to other sites, site searches, file downloads, and your approximate location, browser, device and referring page. Please do not type personal details into site search. It also records “lead” events when someone taps a phone number, email address or WhatsApp link, or submits the contact form. These events are set up to record only that the action happened. They are not meant to include what you type into a form.

Google states that Google Analytics 4 does not log or store IP addresses. Your browser still connects to Google to send the data. Google signals (a Google feature that links activity across a person’s devices) and ad personalisation are turned off, and we do not use analytics for advertising.

Consent and your choices

Our consent tool applies Google Consent Mode, a Google setting that applies your cookie choices. In the EEA, UK and Switzerland, analytics cookies are not set until you accept. Google may still receive limited signals that do not use cookies, such as the fact that a page was opened. Everywhere else, including India, analytics runs by default until you opt out. Advertising storage is denied for everyone because we do not run ads.

Where we show a consent banner, you can accept or decline analytics cookies and change your choice at any time from the cookie settings link on our website. You can also block or delete cookies in your browser, or use Google’s Analytics opt-out browser add-on. Blocking strictly necessary cookies may stop parts of the website from working.

Google Maps and social links

The Contact page embeds Google Maps. Google may receive your IP address, browser and device information, and your interactions, and may use cookies under the Google Privacy Policy. Our links to LinkedIn, Facebook, Instagram, X, WhatsApp and other external sites lead to services with their own privacy practices.

7. International processing

Some of our service providers, including our hosting provider, Google and Cloudflare, may store or process information outside India. We rely on the safeguards those providers offer and on any that the law requires, and we follow Indian law on transfers outside India.

8. Retention

We aim to keep personal data only as long as needed for its purpose, and for legal, accounting, security and dispute-resolution needs. In general:

• enquiry and quotation information is kept while we respond, and for a reasonable follow-up period;
• client, contract, invoice, accounting and tax records are kept for the period the law requires;
• internship information is kept as explained in Section 4;
• marketing contact details are kept until you unsubscribe, withdraw consent, or we end the list; and
• technical logs and backup copies are kept according to security and backup-rotation needs.

Analytics cookie lifetimes and data retention are set out in our Cookie Policy. When information is no longer needed, we aim to delete or anonymise it from our live systems, subject to technical limits and legal duties. Copies in backups and email may remain until they are overwritten or deleted in the normal course.

9. Security

We use reasonable safeguards to protect personal data. These include HTTPS (TLS) encryption in transit, the Wordfence security plugin and backups. No website, storage system or transmission method is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will tell you and the authorities as the law requires.

10. Your choices and rights

Subject to applicable law, you may ask us to confirm whether we process your personal data and give you a summary of it, correct or update it, erase it when it is no longer needed, stop processing that is based on your consent, stop sending you marketing, or look into a privacy grievance. Under Indian data-protection law you may also nominate another person to exercise your rights if you die or become unable to act.

You can withdraw consent at any time, as easily as you gave it. To make any request, email info@cerescanopus.com with the subject line Privacy Request. We may need to confirm your identity and the scope of your request. When you ask us to erase data, we aim to delete or anonymise it from our live systems, and copies in backups and email may remain as explained in Section 8. We may limit a request where the law requires us to keep data or where we must protect another person’s rights. If you are not satisfied after using our grievance process in Section 14, you may complain to the Data Protection Board of India, as the law provides.

11. Children

Our website, forms and internship application are for people aged 18 or over. In India, a child is anyone under 18. If you are under 18, please do not submit personal data to us. We do not run targeted advertising. If we learn that we hold a child’s data without proper authorisation, we aim to delete it.

12. Visitors in the EEA, UK and Switzerland

This section applies if the GDPR or the UK GDPR applies to your personal data. Visitors in Switzerland get the same cookie choices as visitors in the EEA and UK. Please contact us about your rights under Swiss law.

Who is responsible

Ceres Canopus Private Limited, Thane, Maharashtra 421204, India, is the controller of your personal data. A controller is the organisation that decides why and how data is used. Our contact details are in Section 14.

Our legal bases

• Consent: for analytics cookies where we ask for them, and for marketing emails where consent is needed. You can withdraw consent at any time.
• Contract: to take steps at your request before a contract, such as answering a quotation request.
• Legitimate interests: to respond to enquiries, run and secure the website, prevent spam and fraud, keep ordinary business and accounting records, and manage business relationships. We weigh these interests against your rights.

We do not make decisions about you that have legal or similarly significant effects by purely automated means.

Your rights

You may ask for access, correction, erasure, restriction of processing, and a portable copy of data you gave us, where that right applies. You may object to processing based on legitimate interests and to direct marketing, and you may withdraw consent at any time. To use these rights, follow Section 10.

Complaints

You may complain to the data protection authority in the country where you live or work, or where you believe a problem occurred. In the UK, that is the Information Commissioner’s Office. We would appreciate the chance to address your concern first.

Transfers outside the EEA, UK and Switzerland

We are based in India, so data you send us is processed in India. Our providers, including Google and Cloudflare, may process data in other countries. Where the law requires a transfer mechanism, we aim to rely on standard contractual clauses (standard contract terms approved by regulators) or another mechanism the law permits.

13. Changes to this policy

We may update this policy when our website, services, providers or legal duties change. We will publish the new version at this address and change the “Last updated” date. If we add advertising or other non-essential technologies, we will update this policy and ask for your consent where the law requires it.

14. Contact and grievance channel

Ceres Canopus Private Limited
Thane, Maharashtra 421204, India
Website: https://cerescanopus.com
Email: info@cerescanopus.com
Phone: +91 983 375 1206

The Grievance Officer is a role at the company. The Grievance Officer handles privacy questions, rights requests, consent withdrawals and complaints. Email info@cerescanopus.com and mark the message for the Grievance Officer. Use the subject line Privacy Request for a rights request or consent withdrawal, or Grievance for a complaint. Please include your name, how to reach you, and what you would like us to do.

1. We aim to acknowledge your message within 3 working days.
2. We aim to resolve it within 30 days. If we need more time or information, we will tell you.
3. If you are still not satisfied, you may complain to the Data Protection Board of India, as the law provides. Visitors in the EEA, UK and Switzerland may also contact their local authority (Section 12).