Legal

Privacy Policy

Effective Date: 21 October 2026

Last Updated: 21 October 2026

This Website is operated by Kala aur Vakalat Private Limited, which operates under the brand name KaV Kulture. In this policy, “KaV”, “we” and “us” are used interchangeably (reflecting Kala Aur Vakalat Private Limited).

We follow India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are

KaV Kulture is operated by Kala aur Vakalat Private Limited. We are a Growth Consultancy aiming to make workplaces more humane, efficient & inclusive. We run training, programmes and people-and-culture partnerships for startups, mid-size companies and social sector organisations.

This policy explains what personal information we collect through our website (https://kavkulture.org/) and our work, how we use it, and what control you have over it. For anything related to your data, write to us at kavkulture@gmail.com.

2. What we collect

  • When you contact us or book a conversation: your name, work email, phone number, organisation, role, and whatever you write in your message.
  • When you attend a training or programme: your name, work email, organisation, role, attendance, and feedback form responses.
  • When your organisation runs the Kulture Pulse Check with us: survey responses from employees, and the organisation’s team structure details needed to run the survey.
  • When you visit our website: your IP address, browser and device type, pages visited, and referring page. This is collected automatically through cookies and analytics tools (see our Cookie Policy).
  • Payments: if you pay us directly, our payment provider processes your payment details. We do not store your card or bank details.

3. How we use it

We use your information to:

  • Respond to your enquiries and plan engagements with you
  • Design, deliver and follow up on trainings, programmes and retainers
  • Send you session materials, invites and updates you have asked for
  • Measure whether our work is helping, using feedback and survey data
  • Share your testimonial, but only with your written permission
  • Improve our website and services
  • Meet our legal obligations

We do not sell your personal information, and we do not use it to build profiles for advertisers.

4. Employee data

Employee responses are sensitive, so we handle them differently:

  • Responses are used only to assess the organisation’s culture and are reported to the client organisation in aggregate, never with names attached.
  • We do not share individual responses with the client organisation, its managers or its leadership.
  • Where we run surveys or assessments for a client organisation, how that data is collected and used is set out in the notice shown with the survey and in our agreement with the client.

5. Who we share it with

We share information only when needed to deliver our work, and only with:

  • Service providers such as video-conferencing, scheduling, survey, email, storage and payment tools, who process data on our behalf
  • Co-facilitators or experts working with us on a specific engagement, under confidentiality
  • Authorities, if the law requires us to

6. Training participants and client confidentiality

What participants share in workshops stays within the workshop. We do not report individual participants’ personal stories or disclosures back to their employers. We share only aggregated themes and learnings with the client, and we do this with the participants’ knowledge.

7. How long we keep the data

We keep your personal information only as long as we need it for the purpose you gave it. After that, we either delete it or anonymise it, which means removing anything that could identify you. We keep anonymised feedback and learnings indefinitely to understand our work better and improve it.

If you have agreed to hear from us about future programmes, we keep your contact details until you ask us to remove you from the list.

We use anonymised and aggregated feedback to track patterns and improve our work. We also keep financial and contractual records for as long as the law requires.

8. How we protect it

We use password-protected accounts, access limited to the people who need it, and reputable tools. No system is completely secure, but we take reasonable steps to protect your data. If a breach affects your information, we will tell you and the Data Protection Board of India as the law requires.

9. Your rights

Under the DPDP Act, you can:

  • Ask what personal data we hold about you
  • Ask us to correct or update it
  • Ask us to delete it
  • Withdraw your consent at any time (this does not affect what we did before you withdrew)
  • Raise a grievance with us
  • Nominate someone to exercise these rights for you if you die or become unable to

Write to kavkulture@gmail.com and we will respond within the time the law sets.

10. Children

Our website and services are meant for organisations and working professionals. We do not knowingly collect data from anyone under 18.

11. Links to other websites

Our website may link to other sites (for example LinkedIn, or articles we reference). We are not responsible for their privacy practices.

12. Changes to this policy

If we change this policy, we will post the new version here with a new date. Continuing to use the website means you accept the updated policy.