Privacy Policy
Effective Date: 01 June 2025 · Last Updated: 01 June 2025
MSME Central ("we", "us", "our") operates the website www.msmecentral.in and provides MSME financial advisory services from Bengaluru, Karnataka, India. We are committed to protecting the personal data of every individual who interacts with our website or engages our services.
This Privacy Policy explains what personal data we collect, how we collect it, why we collect it, how we use it, and what rights you have in relation to it. It applies to all visitors, enquirers, newsletter subscribers, and clients who interact with MSME Central through any channel — website, email, phone, or WhatsApp.
By using our website or submitting any form, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Business Name: MSME Central
Nature of Business: MSME Financial Advisory and Consulting
Location: Bengaluru, Karnataka, India
Website: www.msmecentral.in
Primary Contact: Deepak Nandana
Email: deepak@msmecentral.in
Phone: +91 99005 65409
For the purposes of the Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000 and IT (Amendment) Act 2008, MSME Central is the Data Fiduciary — the entity that determines the purpose and means of processing personal data.
2. Personal Data We Collect
We collect only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect are:
2.1 Identity and Contact Data
- Full name
- Mobile number and/or telephone number
- Business email address
- Business name and type of entity
- City and state of business
2.2 Enquiry and Service Data
- Nature of financial advisory service required
- Description of business requirement as provided by you
- Correspondence exchanged through email, WhatsApp, or other channels
- Documents voluntarily shared during the engagement process
2.3 Technical and Usage Data
- IP address (collected automatically when you visit our website)
- Browser type, device type, and operating system
- Pages visited, time spent, and navigation path on our website
- Referring URL (the website you came from before visiting ours)
- Date and time of website visit
2.4 Communication Preferences
- Newsletter subscription preference (if you subscribe via our website)
- City and business sector for communication customisation
3. How We Collect Your Data
3.1 Directly from You
- When you complete and submit the contact form on our website
- When you complete and submit the enquiry form on our homepage
- When you subscribe to our newsletter or insights mailing list
- When you email us at any of our published email addresses
- When you contact us via phone call or WhatsApp
- When you engage us for advisory services and share documents
3.2 Automatically Through Technology
- Through Google Analytics 4 (GA4), which collects anonymised usage data about how visitors interact with our website
- Through server access logs maintained by our web hosting provider
- Through browser cookies as described in Section 8 of this Policy
3.3 From Third Parties
We do not purchase, rent, or acquire personal data from third-party data brokers or list providers. Any data we hold about you originates from your direct interaction with MSME Central or from publicly available sources such as your business website or published company information.
4. Why We Collect Your Data — Legal Basis
Under India's Digital Personal Data Protection Act 2023, we must have a lawful basis for processing personal data. We rely on the following bases:
| Purpose | Legal Basis |
|---|---|
| Responding to your enquiry or contact form submission | Consent (you have submitted a form requesting a response) |
| Providing advisory services under an engagement | Contractual necessity (performance of a service agreement) |
| Sending acknowledgement emails and follow-up communications | Consent / Legitimate interest |
| Sending MSME insights newsletter | Consent (explicit opt-in at subscription) |
| Maintaining records of engagements and communications | Legitimate interest / Legal obligation |
| Website analytics and performance monitoring | Legitimate interest (improving our service) |
| Fraud prevention and security | Legitimate interest / Legal obligation |
5. How We Use Your Data
We use personal data collected for the following purposes:
- To respond to your enquiry — we use your name, phone, and email to contact you about the service you have asked about
- To send acknowledgement communications — an automated reply confirming receipt of your enquiry is sent to the email address you provide
- To provide advisory services — where you engage us formally, your data is used to deliver the agreed advisory services
- To send relevant insights and updates — if you have subscribed, we send MSME policy updates, credit scheme alerts, and advisory articles. You can unsubscribe at any time
- To improve our website and services — anonymised analytics data helps us understand which content is most useful
- To maintain business records — we retain records of client engagements as required by applicable law and professional practice
- To comply with legal obligations — we may process your data where required to comply with a court order, regulatory requirement, or lawful request from a government authority
- Sell, rent, or share your personal data with third parties for marketing purposes
- Use your data for automated decision-making or profiling that produces legal effects
- Transfer your personal data to any entity outside India without your explicit consent
- Use your data for any purpose not described in this Privacy Policy without notifying you
6. Storage and Security
Your personal data is stored on our web server hosted within India by our hosting provider. Contact form submissions are stored in a secured MySQL database accessible only through our password-protected administrative panel. All data transmission between your browser and our website is encrypted using SSL/TLS (HTTPS).
We have implemented the following technical and organisational measures:
- SSL/TLS encryption for all data transmitted to and from our website
- Password-protected administrative access to the leads database
- Access restricted to authorised personnel only (Deepak Nandana, MSME Central)
- Server-side input sanitisation and validation to prevent injection attacks
- Regular hosting provider security updates and firewall protection
- No storage of sensitive financial documents on the website server
While we take all reasonable measures to protect your data, no method of electronic storage or internet transmission is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to adversely affect your interests, we will notify you and the relevant authorities as required under applicable law.
7. Third-Party Services
Our website uses the following third-party services that may process your data:
7.1 Google Analytics 4 (GA4)
We use Google Analytics 4 to collect anonymised data about how visitors interact with our website — pages visited, session duration, traffic source, and device type. GA4 is configured with IP anonymisation enabled, meaning your full IP address is never stored by Google. GA4 data is used solely to improve our website and content. Google's privacy policy is available at policies.google.com/privacy. You can opt out of GA4 tracking by installing the Google Analytics Opt-out Browser Add-on.
7.2 Web Hosting Provider
Our website is hosted on a shared hosting server in India. Our hosting provider processes server access logs (including IP addresses) as part of standard server operations. These logs are maintained by the hosting provider and are not directly accessible to or used by MSME Central for marketing purposes.
7.3 Google Fonts
Our website loads the Inter typeface from Google Fonts. When your browser requests this font, Google may log your IP address. This is a standard technical request and does not result in any profiling or tracking by Google Fonts beyond the font delivery request.
7.4 WhatsApp
Our website contains a link to communicate with us via WhatsApp. If you choose to use this link, your communication will be subject to WhatsApp's own privacy policy (Meta Platforms, Inc.). We do not control or have access to any data processed by WhatsApp beyond the messages you send us.
We do not integrate with any payment gateway, advertising platform, or social media tracking pixel on our website. There are no third-party advertising trackers on msmecentral.in.
8. Cookies and Tracking Technologies
Our website uses a limited number of cookies — small text files placed on your device by your browser. We do not use advertising cookies, social media tracking cookies, or cross-site tracking technologies.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga, _ga_* (Google Analytics) | Distinguishes unique visitors for analytics; IP is anonymised | 2 years |
| Session cookies | Standard browser session management; deleted when browser closes | Session |
You can control or disable cookies through your browser settings. Disabling Google Analytics cookies will not affect your ability to use our website or any of its features.
9. Data Retention
We retain your personal data for the following periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions (non-clients) | 12 months from date of enquiry | To facilitate follow-up and service delivery |
| Client engagement records | 7 years from engagement completion | Legal obligation; professional practice requirements |
| Email correspondence | 7 years from last communication | Business records; potential dispute resolution |
| Newsletter subscriber data | Until unsubscription or deletion request | Consent-based retention |
| Google Analytics data | 14 months (GA4 default, anonymised) | Website performance monitoring |
After the applicable retention period, personal data is deleted or permanently anonymised. We may retain data longer if required by a legal obligation, court order, or regulatory requirement.
10. Your Rights
Under India's Digital Personal Data Protection Act 2023 (DPDP Act), you have the following rights in relation to your personal data:
- Right of Access — You may request confirmation of whether we process your personal data and, if so, access to that data
- Right to Correction — You may request correction of inaccurate or incomplete personal data we hold about you
- Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations
- Right to Grievance Redressal — You may raise a grievance with us regarding our processing of your personal data
- Right to Withdraw Consent — Where processing is based on your consent (e.g., newsletter subscription), you may withdraw consent at any time without affecting the lawfulness of prior processing
- Right to Nominate — You may nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act
To exercise any of these rights, write to us at deepak@msmecentral.in with the subject line "Data Privacy Request". We will respond within 30 days of receipt of your request. We may ask you to verify your identity before processing your request.
If you are dissatisfied with our response, you may escalate your grievance to the Data Protection Board of India once it is operational under the DPDP Act.
11. Children's Privacy
Our website and services are directed exclusively at business owners, promoters, and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly. If you believe a minor has provided us with personal data, please contact us at deepak@msmecentral.in.
12. External Links
Our website contains links to external websites including government portals (samadhaan.msme.gov.in, gem.gov.in, udyamregistration.gov.in), banking institution websites, and reference sources. We are not responsible for the privacy practices or content of any external website. We recommend that you read the privacy policy of every external website you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Material changes will be indicated by updating the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated Policy.
14. Contact for Privacy Matters
For any questions, requests, or complaints regarding this Privacy Policy or our data handling practices, please contact:
MSME Central — Data Fiduciary
Deepak Nandana
Bengaluru, Karnataka, India
We aim to respond to all privacy-related communications within 30 days.
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act 2023, the Information Technology Act 2000 and IT (Amendment) Act 2008, and the Consumer Protection Act 2019. Any disputes shall be subject to the exclusive jurisdiction of courts in Bengaluru, Karnataka.