Title: Privacy Policy
Address: https://cerescanopus.com/privacy-policy/
Description: How Ceres Canopus Private Limited collects, uses and protects personal data on cerescanopus.com, and how to use your privacy rights.
Last updated: 2026-10-17
Format: the text of this page as Markdown, without the menu and the footer that every page repeats. The page itself: https://cerescanopus.com/privacy-policy/

# Privacy Policy
How we collect, use and protect personal data
Last updated: October 17, 2026
This policy explains what personal data Ceres Canopus Private Limited collects through its website and business contacts, why we use it, who we share it with, and how you can control it.
Ceres Canopus Private Limited (brand name Ceres Canopus Pvt Ltd; “Ceres Canopus,” “we,” “us” or “our”) respects your privacy. This policy applies when you visit [cerescanopus.com](https://cerescanopus.com/), contact us, ask for a quotation or updates, apply for an internship, or otherwise deal with us about our services.
We aim to handle personal data in line with the Digital Personal Data Protection Act, 2023 and its rules, and the Information Technology Act, 2000 and its rules. Indian law applies (see Section 10 of our Terms of Use). If you are in the European Economic Area (EEA), the United Kingdom (UK) or Switzerland, please also read Section 12. Please read this policy with our [Cookie Policy](https://cerescanopus.com/cookie-policy/) and [Terms of Use](https://cerescanopus.com/terms-of-use/).
## 1. Information we collect
### Information you provide
Where | What we collect | What we use it for
Contact form | Name, email address, phone number, company, and message. | To answer your enquiry or quotation request and follow it up.
Internship application | Current role, study year, preferred domain and duration, LinkedIn profile URL, and a short note. | To assess your application and contact you (Section 4).
Email field for updates | Email address. | To send the updates you asked for (Section 5).
Emails, calls, messages, meetings, contracts and invoices | What you choose to tell us, and business details needed for the work. | To deal with your request and keep business records.
Please do not send passwords, government identifiers, financial account details, health information, or other sensitive personal data through our website forms. We do not take payments on our website, and visitors do not have accounts.
### Information collected automatically
Our hosting, security and website systems process technical information such as your IP address, browser and device details, pages requested, referring page, date and time, and server and security logs. We also use cookies and Google Analytics (Section 6).
## 2. How we use information
We use personal data to respond to enquiries and quotation requests, provide our services, assess internship applicants, send updates you asked for, manage business relationships, operate, secure and back up our website, understand how it is used, prevent spam and fraud, keep business records, comply with law, and protect our rights.
Under Indian law we process personal data with your consent, or for legitimate uses the law allows, such as responding to a request you made voluntarily or giving information the law requires us to give to the authorities. Analytics is the one non-essential use that starts before you choose, for visitors outside the EEA, UK and Switzerland. Where we show a consent banner, you can switch it off (Section 6). Section 12 covers the legal bases for visitors in the EEA, UK and Switzerland.
## 3. How we share information
We do not sell or rent personal data. We share it only as far as needed, with our personnel and authorised contractors, the service providers below, professional advisers such as accountants and lawyers, business clients or partners for an authorised project, courts or authorities when the law requires it, and a successor if our business is merged, restructured or sold.
Purpose | Provider or tool | What it may handle
Hosting and website software | Hostinger; WordPress, Elementor, LiteSpeed Cache and Hustle pop-ups, running on our hosting | Website files and database, form submissions held on the site, server logs, page delivery, caching and pop-ups.
Analytics | Google Analytics 4 (Google) | Website usage data (Section 6).
Spam and security | Cloudflare Turnstile (Cloudflare), the Wordfence security plugin, and a hidden honeypot field | IP address, browser and device signals, used to tell people from bots and block harmful traffic.
Email delivery | An email-sending plugin and our business email | Form notifications and our replies, including your details and message.
Backups | UpdraftPlus backup plugin | Copies of the website and database, which may include form submissions.
Maps | Google Maps embed on the Contact page | IP address, browser and device details, and map interactions.
Providers handle information under contract or under their own terms, and we remain responsible for how we use your data.
## 4. Internship applications
Internship applications are for people aged 18 or over (Section 11). We use application information to assess your suitability, contact you, arrange interviews and keep recruitment records. We aim to keep an application only as long as needed to finish selection and to consider you for a relevant future opportunity.
You can ask us to delete your application. We aim to delete or anonymise it from our live systems, unless the law requires us to keep it. Copies in backups and email may remain until they are overwritten or deleted in the normal course (Section 8).
## 5. Marketing communications
If you ask for updates or agree to receive marketing, we may use your email address or other contact details to send company news, offers and service information. You can withdraw consent or opt out at any time by using the unsubscribe method in the message, where one is included, or by emailing [info@cerescanopus.com](mailto:info@cerescanopus.com). Withdrawing consent does not affect processing that was lawful before you withdrew it.
## 6. Cookies, analytics and third-party content
Our [Cookie Policy](https://cerescanopus.com/cookie-policy/) lists each cookie, who sets it, how long it lasts and how to control it. In short:
### Strictly necessary and functional cookies
WordPress, caching and security tools use cookies or similar storage to run the site, keep forms and pages secure and fast, and remember choices such as a dismissed pop-up. Staff who log in receive login and settings cookies. Ordinary visitors do not. A hidden honeypot field, which real visitors never see, helps us catch automated spam.
### Analytics
We use Google Analytics 4, a non-essential service, to learn how visitors use the site. It records pages viewed, scrolling, clicks on links to other sites, site searches, file downloads, and your approximate location, browser, device and referring page. Please do not type personal details into site search. It also records “lead” events when someone taps a phone number, email address or WhatsApp link, or submits the contact form. These events are set up to record only that the action happened. They are not meant to include what you type into a form.
Google states that Google Analytics 4 does not log or store IP addresses. Your browser still connects to Google to send the data. Google signals (a Google feature that links activity across a person’s devices) and ad personalisation are turned off, and we do not use analytics for advertising.
### Consent and your choices
Our consent tool applies Google Consent Mode, a Google setting that applies your cookie choices. In the EEA, UK and Switzerland, analytics cookies are not set until you accept. Google may still receive limited signals that do not use cookies, such as the fact that a page was opened. Everywhere else, including India, analytics runs by default until you opt out. Advertising storage is denied for everyone because we do not run ads.
Where we show a consent banner, you can accept or decline analytics cookies and change your choice at any time from the cookie settings link on our website. You can also block or delete cookies in your browser, or use [Google’s Analytics opt-out browser add-on](https://tools.google.com/dlpage/gaoptout). Blocking strictly necessary cookies may stop parts of the website from working.
### Google Maps and social links
The Contact page embeds Google Maps. Google may receive your IP address, browser and device information, and your interactions, and may use cookies under the [Google Privacy Policy](https://policies.google.com/privacy). Our links to LinkedIn, Facebook, Instagram, X, WhatsApp and other external sites lead to services with their own privacy practices.
## 7. International processing
Some of our service providers, including our hosting provider, Google and Cloudflare, may store or process information outside India. We rely on the safeguards those providers offer and on any that the law requires, and we follow Indian law on transfers outside India.
## 8. Retention
We aim to keep personal data only as long as needed for its purpose, and for legal, accounting, security and dispute-resolution needs. In general:
- enquiry and quotation information is kept while we respond, and for a reasonable follow-up period;
- client, contract, invoice, accounting and tax records are kept for the period the law requires;
- internship information is kept as explained in Section 4;
- marketing contact details are kept until you unsubscribe, withdraw consent, or we end the list; and
- technical logs and backup copies are kept according to security and backup-rotation needs.
Analytics cookie lifetimes and data retention are set out in our [Cookie Policy](https://cerescanopus.com/cookie-policy/). When information is no longer needed, we aim to delete or anonymise it from our live systems, subject to technical limits and legal duties. Copies in backups and email may remain until they are overwritten or deleted in the normal course.
## 9. Security
We use reasonable safeguards to protect personal data. These include HTTPS (TLS) encryption in transit, the Wordfence security plugin and backups. No website, storage system or transmission method is completely secure, so we cannot guarantee absolute security. If a personal data breach affects you, we will tell you and the authorities as the law requires.
## 10. Your choices and rights
Subject to applicable law, you may ask us to confirm whether we process your personal data and give you a summary of it, correct or update it, erase it when it is no longer needed, stop processing that is based on your consent, stop sending you marketing, or look into a privacy grievance. Under Indian data-protection law you may also nominate another person to exercise your rights if you die or become unable to act.
You can withdraw consent at any time, as easily as you gave it. To make any request, email [info@cerescanopus.com](mailto:info@cerescanopus.com) with the subject line Privacy Request. We may need to confirm your identity and the scope of your request. When you ask us to erase data, we aim to delete or anonymise it from our live systems, and copies in backups and email may remain as explained in Section 8. We may limit a request where the law requires us to keep data or where we must protect another person’s rights. If you are not satisfied after using our grievance process in Section 14, you may complain to the Data Protection Board of India, as the law provides.
## 11. Children
Our website, forms and internship application are for people aged 18 or over. In India, a child is anyone under 18. If you are under 18, please do not submit personal data to us. We do not run targeted advertising. If we learn that we hold a child’s data without proper authorisation, we aim to delete it.
## 12. Visitors in the EEA, UK and Switzerland
This section applies if the GDPR or the UK GDPR applies to your personal data. Visitors in Switzerland get the same cookie choices as visitors in the EEA and UK. Please contact us about your rights under Swiss law.
### Who is responsible
Ceres Canopus Private Limited, Thane, Maharashtra 421204, India, is the controller of your personal data. A controller is the organisation that decides why and how data is used. Our contact details are in Section 14.
### Our legal bases
- Consent: for analytics cookies where we ask for them, and for marketing emails where consent is needed. You can withdraw consent at any time.
- Contract: to take steps at your request before a contract, such as answering a quotation request.
- Legitimate interests: to respond to enquiries, run and secure the website, prevent spam and fraud, keep ordinary business and accounting records, and manage business relationships. We weigh these interests against your rights.
We do not make decisions about you that have legal or similarly significant effects by purely automated means.
### Your rights
You may ask for access, correction, erasure, restriction of processing, and a portable copy of data you gave us, where that right applies. You may object to processing based on legitimate interests and to direct marketing, and you may withdraw consent at any time. To use these rights, follow Section 10.
### Complaints
You may complain to the data protection authority in the country where you live or work, or where you believe a problem occurred. In the UK, that is the [Information Commissioner’s Office](https://ico.org.uk/). We would appreciate the chance to address your concern first.
### Transfers outside the EEA, UK and Switzerland
We are based in India, so data you send us is processed in India. Our providers, including Google and Cloudflare, may process data in other countries. Where the law requires a transfer mechanism, we aim to rely on standard contractual clauses (standard contract terms approved by regulators) or another mechanism the law permits.
## 13. Changes to this policy
We may update this policy when our website, services, providers or legal duties change. We will publish the new version at this address and change the “Last updated” date. If we add advertising or other non-essential technologies, we will update this policy and ask for your consent where the law requires it.
## 14. Contact and grievance channel
Ceres Canopus Private Limited Thane, Maharashtra 421204, India Website: [https://cerescanopus.com](https://cerescanopus.com/) Email: [info@cerescanopus.com](mailto:info@cerescanopus.com) Phone: [+91 983 375 1206](tel:+919833751206)
The Grievance Officer is a role at the company. The Grievance Officer handles privacy questions, rights requests, consent withdrawals and complaints. Email [info@cerescanopus.com](mailto:info@cerescanopus.com) and mark the message for the Grievance Officer. Use the subject line Privacy Request for a rights request or consent withdrawal, or Grievance for a complaint. Please include your name, how to reach you, and what you would like us to do.
- We aim to acknowledge your message within 3 working days.
- We aim to resolve it within 30 days. If we need more time or information, we will tell you.
- If you are still not satisfied, you may complain to the Data Protection Board of India, as the law provides. Visitors in the EEA, UK and Switzerland may also contact their local authority (Section 12).
Scroll to Top

---
Ceres Canopus Pvt Ltd (Ceres Canopus), 1st Floor, Shop No. 2, Goteghar, Shilphata, Uttarshiv, Thane, Maharashtra 421204, India. Phone and WhatsApp +91 983 375 1206, email info@cerescanopus.com.
