Secure data. Trusted future.
Darvi Consulting helps organisations turn privacy obligations into operational strength, building programs that satisfy regulators, reassure customers, and scale with your business.
A specialist privacy practice, built for the DPDPA era
Darvi Consulting is an India-based data privacy consulting firm serving organisations at home and worldwide. We combine deep regulatory knowledge (spanning India's DPDPA and Global Data Protection Regulations) with hands-on operational experience, so privacy compliance becomes something your teams actually run, not a binder on a shelf.
Advice you can defend. Programs you can run.
Regulation-first expertise
Practitioners fluent in the DPDPA and Global Data Protection Regulations, with advice grounded in the letter of the law and the reality of enforcement.
Practical, not theoretical
We design controls your teams can operate day to day, with clear owners, workflows and evidence trails that stand up to audit.
Client-centric delivery
Right-sized engagements for startups to enterprises. No boilerplate: every deliverable is built around your data, your risks, your sector.
India-based, globally fluent
Local depth on Indian regulation with the cross-border perspective global businesses need for transfers, vendors and multi-market compliance.
Technology-aware
From consent platforms to DSR automation, we help you choose and implement privacy technology that fits, not shelfware.
Measurable outcomes
Gap scores, remediation roadmaps and maturity benchmarks, so leadership always knows where the program stands and what's next.
Core services
End-to-end privacy consulting, from first gap assessment to fully operational privacy programs.
Data Privacy Consulting
Privacy program development, gap assessments, framework implementation and governance.
Regulatory Compliance
DPDPA and Global Data Protection Regulations compliance strategy, readiness and remediation across jurisdictions.
Privacy Assessments
PIA, DPIA and Legitimate Interest Assessments that identify and reduce risk early.
Data Governance
RoPA, data inventory, mapping, classification and retention frameworks.
Consent & Preference Management
Consent strategy, cookie compliance and full consent lifecycle management.
Data Subject Rights
DSR process design, rights request management and workflow automation.
Privacy Operations
Privacy by design, vendor assessments, training, policies and third-party risk.
Privacy Technology Consulting
Privacy automation and tooling, selected, configured and embedded properly.
Sector-specific privacy, not one-size-fits-all
Client-centric from assessment to operations
A clear, four-stage engagement model. You always know what happens next and what you'll receive.
STAGE / IDENTIFY & ACCESSIdentify & Access
We identify your data, systems and access points, mapping obligations and business context before recommending anything.
STAGE / ASSESSEvaluate
Gap assessments benchmark you against the DPDPA, Global Data Protection Regulations and best practice, with prioritised risk.
STAGE / BUILDImplement
Policies, workflows, tooling and training designed with your teams, not handed over cold.
STAGE / SUSTAINOperate
Ongoing governance, monitoring and advisory so compliance holds as you grow.
Common questions
If you process digital personal data of individuals in India (as a company, startup, or even a foreign business offering goods or services to people in India), the DPDPA almost certainly applies to you. We help you determine exactly which obligations are relevant and how to meet them proportionately.
Yes, but it should be right-sized. Regulators expect proportionate compliance, and enterprise customers increasingly require privacy assurances from vendors of every size. We build lean programs that cover your real obligations without enterprise overhead.
Most gap assessments run two to six weeks depending on the size and complexity of your data processing. You receive a scored gap report, a prioritised remediation roadmap and an executive summary for leadership.
Absolutely. That's a common scenario for Indian businesses serving global customers. We design unified controls that satisfy multiple regimes wherever possible, and clearly flag the areas where obligations diverge.
Both. We help you select consent management, DSR automation and data discovery tools that fit your stack and budget, and then configure, integrate and embed them into your workflows so they deliver value from day one.
Ready to make privacy your advantage?
Speak with a Darvi consultant about your compliance goals. No obligation, just a clear view of where you stand.
Send a quick enquiry
The privacy partner behind resilient organisations
Darvi Consulting is a specialist data privacy consulting firm based in India, serving clients across the country and around the world. We were founded on a simple conviction: privacy done well is not a cost of doing business. It is a source of customer trust, operational clarity and competitive advantage. Our consultants bring together regulatory expertise, program management discipline and privacy technology know-how to build compliance that lasts.
Make defensible privacy achievable
To help every organisation, from first-time founders to global enterprises, protect personal data with programs that are practical, proportionate and provable.
A trusted data economy
To be India's most trusted privacy consulting partner, powering a digital economy where individuals' data is respected and businesses grow on a foundation of trust.
What we hold ourselves to
Integrity
We give you the advice you need, not the answer that's easiest to sell. Every recommendation is one we'd stand behind in front of a regulator.
Clarity
Regulation is complex; our guidance isn't. We translate legal obligations into plain language and concrete actions.
Craft
Deliverables built for your organisation, never recycled templates. Precision matters when compliance is on the line.
Partnership
We work alongside your teams and transfer capability as we go, so your program outlives the engagement.
Why organisations choose us
Specialists, not generalists
Privacy is all we do. That focus means faster diagnosis, sharper advice and deliverables shaped by real regulatory expectations.
Built for Indian regulation
Deep, current knowledge of the DPDPA, its rules and enforcement direction, combined with fluency in Global Data Protection Regulations for cross-border businesses.
Outcome accountability
Every engagement has defined deliverables, timelines and success measures. You'll always know what you're getting and when.
Identify & Access → Assess → Build → Sustain
A disciplined engagement model that keeps momentum and makes progress visible at every stage.
01 / IDENTIFY & ACCESSIdentify & Access
Stakeholder interviews, data flows, systems and access points, identifying obligations and the factual base for everything that follows.
02 / ASSESSGaps & risk
Structured assessment against applicable regulation with scored findings and a prioritised roadmap.
03 / BUILDControls & capability
Policies, processes, tooling and training implemented with your teams and tested in practice.
04 / SUSTAINGovern & improve
Metrics, reviews and advisory support that keep the program effective as regulation and business evolve.
Everything a modern privacy program needs
Eight practice areas covering strategy, compliance, assessments, governance and operations. Engage us for a single deliverable or an end-to-end program.
Not sure where to start?
A privacy gap assessment gives you a clear, scored picture of where you stand, and a roadmap to fix it.
Privacy expertise shaped by your sector
Each industry processes personal data differently, and carries its own regulatory overlays, risks and customer expectations. We bring sector-specific context to every engagement.
Let's talk about your privacy goals
Tell us a little about your organisation and what you need. A consultant will respond within one business day.
Enquiry form
Fields marked * are required.
Privacy Notice
Last updated: July 2026 · Issued in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA)
1. Introduction
Darvi Consulting ("Darvi Consulting", "we", "us", "our") is a data privacy consulting firm based in India. As a "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDPA"), we are committed to processing personal data lawfully, fairly and transparently. This Privacy Notice explains what personal data we collect through this website (darviconsulting.com) and our related communications, why we collect it, how we use, store, share and protect it, and the rights available to you as a Data Principal. Where we act as a processor of personal data on behalf of our clients in the course of our consulting engagements, that processing is instead governed by the terms of the applicable client engagement agreement, and this Notice applies only to personal data we collect directly through this website and our own business communications.
2. Applicability
This Notice applies to visitors to this website, individuals who submit enquiries or subscribe to our newsletter, and any other individual whose personal data we process in connection with operating this website. It does not apply to personal data processed by Darvi Consulting as part of a client's own DPDPA compliance program, which is governed separately by the relevant client agreement and the client's own privacy notices.
3. Personal data we collect
We collect personal data directly from you, only to the extent necessary for the purposes described in this Notice:
- Contact and enquiry data: full name, company name, organisation type, email address, phone number, service required and any message or details you choose to share via our enquiry form.
- Newsletter data: your email address, where you voluntarily subscribe to receive updates.
- Communications data: records of correspondence if you contact us by email, phone or WhatsApp.
- Technical data: limited technical information (such as browser type and general access logs) necessary to operate and secure this website. We do not use this data to profile or track individuals across other websites.
We do not knowingly collect sensitive categories of personal data (such as financial, health or biometric information) through this website, and you should not submit such data via our enquiry form.
4. Purpose and legal basis for processing
In accordance with Section 5 of the DPDPA, we process your personal data only for the following clear, specified purposes, and only on the basis of your free, informed and specific consent given at the point of submission (for example, by submitting the enquiry form or newsletter form), or, where applicable, for a legitimate use recognised under the DPDPA:
- To respond to enquiries and provide information you have requested about our services;
- To schedule and conduct consultations you have requested;
- To send newsletter communications, only where you have affirmatively subscribed;
- To maintain business records of our communications with prospective and existing clients;
- To comply with applicable law, regulation or a lawful request from a competent authority; and
- To protect the security and integrity of this website.
We do not use your personal data for any purpose beyond what is stated at the time of collection without seeking fresh consent, except where permitted by law.
5. Consent and withdrawal
Where our processing relies on your consent, you have the right to withdraw that consent at any time, with the same ease with which it was given. You may withdraw consent to newsletter communications by using the unsubscribe mechanism in any newsletter email, or by writing to our Grievance Officer at the address in Section 12. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and will not affect any ongoing consulting engagement governed by a separate agreement.
6. How long we retain your data
We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with our legal obligations, resolve disputes and enforce our agreements. Enquiry and communications data is typically retained for the duration of our engagement discussions and for a reasonable period thereafter for record-keeping purposes. Newsletter subscriber data is retained until you unsubscribe or withdraw consent. Where personal data is no longer necessary for the purpose for which it was processed and we are not required to retain it by law, we will erase it or render it non-identifiable, in line with the data minimisation and storage limitation principles under the DPDPA.
7. Disclosure and sharing of personal data
We do not sell, rent or trade personal data. We may share personal data with:
- Consultants and employees of Darvi Consulting who need access to respond to your enquiry, strictly on a need-to-know basis;
- Service providers who process data on our behalf and under our instructions, such as our website hosting provider and our contact-form processor, each bound by appropriate confidentiality and data protection obligations; and
- Regulators, courts or other authorities, where required by applicable law.
8. Cross-border transfer of personal data
Some of our website and email service providers may process or store personal data on servers located outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it continues to receive a standard of protection consistent with the DPDPA, and any such transfer is made only to the extent permitted under Section 16 of the DPDPA and any notification issued by the Central Government thereunder.
9. Security safeguards
In line with Section 8(5) of the DPDPA, we implement reasonable technical and organisational security safeguards appropriate to the nature of the personal data we hold, including access controls, encryption of data in transit, and restricting access to personal data to personnel who require it to perform their duties. In the event of a personal data breach, we will take prompt steps to contain and remediate it and will notify the Data Protection Board of India and affected Data Principals as required under the DPDPA and its rules.
10. Children's data
This website is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from individuals below the age of 18. If we become aware that we have inadvertently collected personal data from a child without verifiable parental or guardian consent, we will take steps to delete such data promptly, in accordance with Section 9 of the DPDPA.
11. Your rights as a Data Principal
Subject to applicable law, as a Data Principal under the DPDPA you have the right to:
- Access: obtain a summary of the personal data we hold about you and the processing activities undertaken;
- Correction and updating: request correction of inaccurate or misleading personal data, and completion of incomplete personal data;
- Erasure: request erasure of personal data that is no longer necessary for the purpose for which it was collected, unless retention is required by law;
- Grievance redressal: raise a grievance regarding our handling of your personal data and receive a response within a reasonable time; and
- Nominate: nominate another individual to exercise your rights under the DPDPA in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer using the details in Section 12. We will verify your identity before acting on your request and will respond within the timelines prescribed under the DPDPA and its rules.
12. Grievance Officer
In accordance with the DPDPA, Darvi Consulting has designated a Grievance Officer to address questions, concerns or grievances relating to the processing of your personal data:
Grievance Officer, Darvi Consulting
Email: contact@darviconsulting.com
Phone: +91 95286 12567
We aim to acknowledge grievances promptly and resolve them within the timeline prescribed under applicable law. If you are not satisfied with our response, you may escalate your grievance to the Data Protection Board of India, established under the DPDPA.
13. Cookies and the Consent Preference Centre
This website currently uses only essential, strictly necessary technical mechanisms to function correctly, and does not deploy non-essential tracking or advertising cookies. We nonetheless provide a cookie banner and a Consent Preference Centre (accessible via the "Consent Preferences" link in the footer of every page) so you can review and control optional analytics cookies and your newsletter email preference at any time, and so we hold a clear, auditable record of your choices. Where we introduce analytics or any other non-essential cookie in the future, we will obtain your consent through this same mechanism before activating it, and you will always be able to withdraw that consent as easily as you gave it.
14. Global Data Protection Regulations
Where you interact with us from outside India, or where applicable law otherwise requires, we also have regard to relevant Global Data Protection Regulations (such as the EU/UK GDPR and other applicable regional data protection frameworks) in addition to the DPDPA, and will apply whichever standard offers you greater protection in respect of personal data collected through this website.
15. Changes to this Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, our services, or applicable law, including any rules notified under the DPDPA. The "Last updated" date at the top of this page indicates when this Notice was last revised. We encourage you to review this page periodically.
16. Contact us
For any questions about this Privacy Notice or our data practices, please contact us at contact@darviconsulting.com or +91 95286 12567.
Terms of Use
Last updated: July 2026
1. Acceptance of these terms
By accessing or using this website (darviconsulting.com), you agree to be bound by these Terms of Use. If you do not agree with any part of these terms, please do not use this website.
2. About Darvi Consulting and this website
Darvi Consulting ("we", "us", "our") is a data privacy consulting firm based in India. This website provides general information about our services, industries served and consulting approach, and allows visitors to submit enquiries and subscribe to our newsletter.
3. No professional relationship formed by browsing
Content on this website is provided for general informational purposes only and does not constitute legal, regulatory or professional advice. Viewing this website, or submitting an enquiry through it, does not by itself create a client relationship, retainer or contractual engagement between you and Darvi Consulting. A formal consulting relationship begins only once both parties have executed a separate written engagement agreement setting out its scope, fees and terms.
4. Permitted use of this website
You may access and use this website for lawful purposes only. You agree not to: (a) use the website in any way that could damage, disable or impair it or interfere with any other party's use; (b) attempt to gain unauthorised access to any part of the website, servers or systems connected to it; (c) submit false, misleading or malicious information through our enquiry or newsletter forms; or (d) use any automated means (bots, scrapers or crawlers) to extract content from this website without our prior written consent.
5. Intellectual property
All content on this website (including our name, logo, branding, text, graphics and layout) is owned by or licensed to Darvi Consulting and is protected under applicable Indian and international intellectual property laws. You may view and print pages for personal, non-commercial reference, but you may not reproduce, republish, distribute or create derivative works from any part of this website without our prior written permission.
6. Third-party links
This website may contain links to third-party websites or services (for example, WhatsApp) for your convenience. We do not control and are not responsible for the content, accuracy or privacy practices of any third-party website. Accessing a linked website is at your own risk and subject to that website's own terms and privacy policy.
7. Disclaimer of warranties
This website and its content are provided "as is" and "as available", without warranties of any kind, whether express or implied, including as to accuracy, completeness, availability or fitness for a particular purpose. We do not warrant that the website will be uninterrupted, timely or error-free.
8. Limitation of liability
To the maximum extent permitted by applicable law, Darvi Consulting shall not be liable for any indirect, incidental, consequential or special damages arising out of or in connection with your use of, or inability to use, this website, even if we have been advised of the possibility of such damages. Nothing in these terms limits or excludes liability that cannot lawfully be limited or excluded under applicable Indian law. This limitation does not apply to obligations we owe you under a separate, signed consulting engagement agreement, which is governed by its own terms.
9. Indemnification
You agree to indemnify and hold Darvi Consulting, its consultants and employees harmless from any claims, losses or damages, including reasonable legal fees, arising out of your misuse of this website or your violation of these Terms of Use.
10. Governing law and jurisdiction
These Terms of Use are governed by the laws of India, including the Information Technology Act, 2000 and the Indian Contract Act, 1872, without regard to conflict-of-law principles. Subject to applicable law, any dispute arising out of or relating to these terms or your use of this website shall be subject to the exclusive jurisdiction of the competent courts in India.
11. Changes to these terms
We may revise these Terms of Use from time to time to reflect changes in our services, business practices or applicable law. The "Last updated" date at the top of this page indicates when these terms were last revised. Continued use of the website after any change constitutes your acceptance of the revised terms.
12. Severability
If any provision of these Terms of Use is found to be invalid or unenforceable by a court of competent jurisdiction, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will continue in full force and effect.
13. Contact us
Questions about these Terms of Use can be sent to contact@darviconsulting.com or +91 95286 12567.