💬 Chat with us...
Last Updated: 1 September 2026
DEXTER & KESTREL CONSULTING LLP (“Dexter & Kestrel”, “D&K”, “we”, “us” or “our”) is a professional consulting and advisory organisation providing services including Data Privacy and Data Protection, Governance, Risk & Compliance (GRC), ESG and Sustainability, ISO Consulting, Audits and Assessments, and Professional Training and Capacity Building.
For personal data processed through this website and for our own website-related business activities, Dexter & Kestrel acts as the Data Fiduciary to the extent it determines the purpose and means of processing. Where D&K processes personal data solely on behalf of a client under a professional engagement, the parties’ roles and responsibilities will be determined by the applicable agreement and law.
This Privacy Notice applies to personal data processed when you:
A separate privacy notice, contractual provision or data-processing arrangement may apply to a particular client engagement, employment relationship or other activity. This Notice does not replace those arrangements.
The personal data we collect depends on how you interact with us. It may include:
Identity and Contact Information
Name, email address, telephone/mobile number.
Professional Information
Organisation, designation, professional role, business location.
Enquiry and Engagement Information
Information in your enquiry, requirements and communications.
Recruitment Information
CV/application information, qualifications and related communications.
Training and Event Information
Registration and participation details.
Technical and Security Information
IP address, browser/device information, access time, diagnostic/security information.
Cookie and Consent Information
Cookie preferences and consent choices, where applicable.
Please provide only personal data that is relevant and reasonably necessary for the purpose for which you are communicating with us.
The general website is not intended to collect unnecessary highly sensitive information. Please do not submit health information, identity documents, financial account or payment information, privileged material, confidential client information or other highly sensitive information through a general enquiry form unless we specifically request it through an appropriate channel.
If information of a sensitive or confidential nature is required for a particular engagement, it will be handled under the applicable legal, contractual, security and confidentiality safeguards.
We may collect personal data:
The D&K website may provide a WhatsApp link or icon that enables visitors to contact Dexter & Kestrel Consulting LLP through WhatsApp.
If you choose to use this link, you will be connected with WhatsApp, which is operated by a third-party service provider. Personal data or other information that you voluntarily provide through WhatsApp, including your name, telephone number, messages, documents or other information, may be received and processed by D&K for the purposes of responding to your enquiry, communicating with you, understanding your requirements and, where applicable, discussing or progressing a potential professional engagement.
Your use of WhatsApp is also subject to WhatsApp's own terms and privacy practices. D&K does not control the personal-data processing carried out by WhatsApp as a third-party platform.
You should exercise appropriate caution when sharing confidential, privileged, sensitive personal, financial, authentication or other highly sensitive information through WhatsApp. Unless D&K specifically requests otherwise and provides an appropriate secure process, such information should not be submitted through WhatsApp or other general communication channels
We process personal data only for specified and lawful purposes, including:
Contact/Enquiry Data
Receive, understand and respond to enquiries and requests.
Professional/Business Information
Understand requirements and determine whether our services may be relevant.
Engagement Data
Establish, administer and perform professional engagements.
Training/Event Data
Register participants, administer programmes and communicate necessary information.
Recruitment Data
Assess applications and manage recruitment/professional opportunities.
Technical/Security Data
Operate, secure, troubleshoot and protect the website and systems; prevent abuse.
Cookie Preference Data
Remember and administer your cookie choices.
Legal/Compliance Data
Comply with applicable law, lawful requests and professional obligations; establish or defend legal rights.
Dexter & Kestrel seeks to process digital personal data in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), to the extent their respective provisions are applicable and in force from time to time.
This Notice is intended to provide clear information about the personal data processed through the website, the purposes for which it is processed, and the mechanisms available to Data Principals for consent withdrawal, requests for erasure, exercise of applicable rights, and submission of grievances.
Where consent is the basis for processing, D&K will seek consent in a clear and plain manner and limit the request to personal data reasonably necessary for the specified purpose. Consent will not be inferred merely from the fact that you have read this Notice or visited the website.
Where consent is relied upon, you may withdraw it at any time through the mechanism provided for that processing or by contacting info@dexterandkestrel.com.
Withdrawal will not affect the lawfulness of processing carried out before withdrawal. Where applicable, D&K will cease or cause relevant processors to cease consent-based processing within a reasonable period, unless continued processing is required or authorised by law.
D&K may also process personal data where permitted or required under the DPDP Act, including applicable legitimate uses, and under other applicable Indian laws or lawful obligations. The applicable basis will depend on the particular processing activity.
When you submit the website contact form, the information you provide is transmitted through our website infrastructure and is made available through the website hosting/control-panel environment and to our Hostinger email account for the purpose of responding to your enquiry and managing the related communication.
The website uses Google reCAPTCHA v2 to help protect forms and website functions against spam, automated submissions, abuse and malicious activity. reCAPTCHA may process technical/session information necessary for its security and threat-detection functions.
The website uses cookies and similar technologies that are necessary for website operation, security and management of cookie preferences.
The website does not currently use Google Analytics, Google Tag Manager, Microsoft Clarity, LinkedIn Insight Tag, Meta Pixel, embedded YouTube/Vimeo tracking, a CRM, a newsletter platform, an online booking platform or a chatbot/live-chat platform.
Where consent is required for a non-essential cookie or similar technology, the website's cookie-consent mechanism is intended to obtain and manage that choice. You may change or withdraw cookie preferences through the Cookie Settings mechanism made available on the website.
For details, see our separate Cookie Policy.
We may disclose or provide access to personal data where reasonably necessary to:
We do not sell personal data. Service providers are expected to process personal data only for authorised purposes and subject to applicable contractual, technical and organisational safeguards.
The website hosting and business email services are provided through Hostinger. Depending on the service and circumstances, Hostinger may process personal data in connection with providing hosting, email, security and related infrastructure services. D&K remains responsible for determining the purposes and means of its own website-related processing.
Hostinger's contractual terms and data-processing documentation may permit processing or support by Hostinger affiliates, sub-processors and infrastructure providers, including outside India. D&K will manage such processing in accordance with applicable law.
Some service providers or their infrastructure may process or make personal data accessible from locations outside India.
Where this occurs, D&K will seek to ensure that the processing is subject to applicable data-protection requirements, contractual safeguards and any restrictions or conditions applicable under Indian law.
We maintain reasonable technical and organisational measures appropriate to the nature and risk of processing. Depending on the circumstances, these may include access controls, authentication, secure configurations, encryption where appropriate, network/endpoint protections, backups, monitoring/logging, confidentiality obligations and incident-response procedures.
No electronic transmission or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security.
If D&K becomes aware of a personal data breach or security incident, we will assess, contain, investigate and respond in accordance with applicable law and our internal incident-management procedures.
Where notification to Data Principals, the Data Protection Board or another authority is legally required, we will make the notification in accordance with the applicable requirements.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
Retention depends on the nature of the data, the relationship with the individual or organisation, legal/regulatory requirements, accounting and record-keeping obligations, disputes or legal claims, and legitimate security/business needs.
When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to legal retention obligations and technical limitations such as backups.
Subject to the applicable statutory framework, Data Principals may have rights including:
The scope, procedure and limitations of these rights are determined by the DPDP Act, DPDP Rules and other applicable law, including any exemptions or conditions that may apply.
Requests relating to personal data, consent withdrawal, privacy rights or grievances may be sent to info@dexterandkestrel.com. Please describe the request clearly and provide sufficient information for us to understand and process it.
We may need to verify identity or authority before acting on a request, particularly where the request involves disclosure, correction, deletion or another action affecting personal data. We will handle requests in accordance with applicable law and the procedures and timelines that apply when the relevant statutory provisions are in force.
If a grievance is not resolved through our internal process, you may have a right to escalate the matter to the Data Protection Board of India or another competent authority, subject to the applicable law and procedure.
D&K does not currently operate a separate newsletter or marketing-email platform.
If we send promotional communications in the future, we will provide an appropriate mechanism for managing preferences and, where required, obtaining or withdrawing consent.
You may continue to receive necessary administrative, contractual, security or service-related communications even if you opt out of promotional communications.
Where you apply for a role or professional opportunity, we may process information contained in your application, CV, qualifications, experience and related communications for recruitment and selection.
Additional information and retention arrangements may be communicated through the relevant recruitment process.
The website and our professional services are primarily intended for businesses, professionals and organisations.
We do not knowingly seek to collect personal data from children through the general website. If we become aware that personal data relating to a child has been collected in circumstances where collection or processing is not permitted, we will take appropriate steps under applicable law.
Our website may contain links to third-party websites or resources. This Notice does not apply to websites or services that we do not control.
You should review the privacy notices of those third parties before providing personal data. D&K is not responsible for their privacy practices.
The general D&K website is not intended to make decisions about individuals that produce legal or similarly significant effects through automated processing.
We do not use personal data collected through the general website to create individual profiles for discriminatory or unlawful purposes.
Submission of information through a general website form does not by itself establish a confidential professional relationship, legal privilege or consulting engagement.
Please do not submit confidential, privileged or commercially sensitive material through a general enquiry form unless D&K specifically requests it through an appropriate channel.
Where D&K processes personal data on behalf of a client, the client may determine the purposes and means of that processing and D&K may act as a Data Processor.
The parties' respective obligations will be governed by the applicable engagement letter, statement of work, contract, confidentiality agreement, data-processing agreement or other lawful arrangement.
We may update this Notice to reflect changes in our business, website, personal-data processing, technology, applicable law or privacy/security practices.
The revised version will be published on this page with an updated 'Last Updated' date.
This Notice is governed by and interpreted in accordance with the laws of India, subject to any mandatory rights or protections available under applicable law.
Email: info@dexterandkestrel.com
For privacy-related requests and grievances, please use the above contact address. We will handle such matters in accordance with applicable law and our internal procedures.
This Notice has been prepared with reference to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as notified by the Ministry of Electronics and Information Technology (MeitY), together with the website technology information supplied by D&K.