Who we are

RuleHouse GRC is the trading name of Ms. Tamasa Mishra, sole proprietor, of A104, Akshaya Regalia, Bharat Housing Society Layout, Uttarahalli Main Road, Banashankari 6th Stage, Bangalore, Karnataka 560061, India. Registered as a Micro Enterprise under Udyam Registration Number UDYAM-KR-03-0759301.

For any question about this notice or about your personal data, write to rulehousegrc@gmail.com. That address is also the grievance contact for the purposes of the Digital Personal Data Protection Act, 2023.

What this website collects: nothing

This site sets no cookies. It runs no analytics, no tracking pixels, no advertising scripts and no session storage. There is no contact form, no newsletter sign-up and no account to create. Nothing you do on this page is recorded by us.

We say this plainly because a firm that advises on data protection should be able to.

Two third parties that do see something

Being accurate matters more than being flattering, so:

• Cloudflare hosts this site and serves it. As with any web host, its edge servers process your IP address, the page requested, your browser user-agent and the time of the request, for the purposes of delivering the page and protecting against abuse. These are standard server logs, retained by Cloudflare under its own policies. We do not access or analyse them.
• Google Fonts supplies the three typefaces used here. Your browser requests those font files from Google’s servers, which means Google receives your IP address and user-agent when the page loads. This is the only third-party request the page makes. We receive nothing from it.

If you contact us

If you email or call, we process what you send — typically your name, email address, phone number, employer and whatever you tell us about your situation — for one purpose: to respond to you and, if it goes further, to scope and deliver an engagement.

We do not add you to a mailing list. We do not sell, rent or share your details with anyone. Enquiry correspondence that does not lead to an engagement is deleted within twelve months. Where an engagement follows, records are kept for as long as the engagement and any professional or statutory record-keeping obligation requires, and no longer.

Client data during an engagement

This notice covers the website and initial enquiries. Where RuleHouse GRC processes personal data on behalf of a client during an engagement, the client is the Data Fiduciary and RuleHouse GRC acts as a Data Processor on the client’s documented instructions. Those arrangements are governed by the engagement agreement, not by this notice.

Our standing practice is to ask for anonymised, redacted or sample data wherever that is sufficient for the work.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask for access to the personal data we hold about you, ask us to correct or complete it, ask us to erase it, and raise a grievance. Write to the address above and we will respond within a reasonable period.

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation may apply to your data. In that case you additionally have the right to object to processing, to restrict it, to data portability, and to lodge a complaint with your supervisory authority.

Security

The site is served over HTTPS. Correspondence is held in access-controlled accounts protected by multi-factor authentication. No transmission over the internet is ever completely secure, so please do not send us confidential client material, credentials, or unredacted personal data by email before an engagement agreement and a non-disclosure agreement are in place.

Changes

If this notice changes materially, the date at the top changes with it. There is no version history to consult; the current version is the one that applies.