Privacy Policy of GIRIMALIKA LAYERS PRIVATE LIMITED

Effective Date: 24 April 2026

1. Introduction and Company Information

This Privacy Policy explains how GIRIMALIKA LAYERS PRIVATE LIMITED (“we”, “us”, “our”) collects, uses, discloses, stores, and protects personal data when you visit or use our website burxingox.pro, contact us, or otherwise engage with our consulting services.

GIRIMALIKA LAYERS PRIVATE LIMITED is a private limited company operating in India and providing consulting-related services. We are committed to handling personal data in accordance with applicable Indian laws, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023, and other applicable laws and regulations.

Company Details:

• Legal Name: GIRIMALIKA LAYERS PRIVATE LIMITED
• Address: 3rd Floor, Unit 304, Prestige Polygon, Langford Road, Shantinagar, Bengaluru, Karnataka 560027, India
• Email: [email protected]
• Phone: +91 80 4127 6384
• Website: burxingox.pro

2. Data Collection and Processing

We may collect and process the following categories of personal data, depending on your interaction with us:

• Identity and contact data: name, email address, phone number, company name, job title, and similar contact details.
• Communication data: messages, inquiries, feedback, support requests, and records of correspondence.
• Professional and business data: information you provide in connection with consulting inquiries, project requirements, business needs, and service engagement.
• Technical data: IP address, browser type, device identifiers, operating system, access times, pages viewed, and website usage information.
• Transactional data: billing details, invoicing information, payment-related records, and service history, where applicable.
• Any other information you voluntarily provide: including documents, attachments, or details submitted through forms, email, or other communication channels.

We generally collect personal data directly from you, through our website, email, telephone calls, meetings, forms, or during the course of providing our consulting services. In some cases, we may also receive information from business partners, service providers, or publicly available sources, where permitted by law.

We process personal data using lawful and fair means, and only to the extent necessary for the purposes described in this Privacy Policy.

3. Purpose of Data Processing

We process personal data for the following purposes:

• to respond to inquiries and communicate with you;
• to provide, manage, and improve our consulting services;
• to assess business requirements and prepare proposals, quotations, or service arrangements;
• to maintain records of our interactions and service engagements;
• to process payments, invoicing, and related administrative activities;
• to operate, maintain, secure, and improve our website and internal systems;
• to detect, prevent, and investigate fraud, misuse, security incidents, or unlawful activity;
• to comply with legal obligations, regulatory requirements, tax requirements, and lawful requests from authorities;
• to enforce our contractual rights and protect our legitimate business interests;
• to send service-related updates, notices, and, where permitted, marketing communications;
• to analyze usage trends and improve user experience and service quality.

4. Legal Basis for Processing

We process personal data only where permitted under applicable law. Depending on the context, our legal basis may include:

• Consent: where you have given clear permission for a specific purpose.
• Performance of a contract: where processing is necessary to enter into or perform a contract with you.
• Legitimate uses / legitimate interests: where processing is necessary for our legitimate business purposes, provided such interests are not overridden by your rights and interests.
• Compliance with law: where processing is required to comply with applicable legal or regulatory obligations.
• Public interest or legal claims: where necessary to establish, exercise, or defend legal rights or claims.

Where we rely on consent, you may withdraw it at any time, subject to applicable legal and contractual limitations.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share personal data with the following categories of recipients, only as necessary and subject to appropriate safeguards:

• Service providers: vendors that support hosting, email delivery, analytics, customer support, IT administration, document management, payment processing, and other operational services.
• Professional advisers: lawyers, auditors, accountants, consultants, and similar advisers, where necessary for business, compliance, or legal purposes.
• Business partners: where required for the delivery of consulting services or joint engagements, subject to confidentiality obligations.
• Authorities and regulators: government bodies, law enforcement agencies, courts, or other third parties where disclosure is required by law or necessary to protect rights, safety, or security.
• Corporate transactions: in connection with a merger, acquisition, restructuring, sale of assets, financing, or similar transaction, subject to confidentiality and legal requirements.

All third parties are expected to process personal data only for authorized purposes and to implement reasonable security measures consistent with applicable law.

6. Data Transfer to Third Countries

Depending on the location of our service providers, partners, or infrastructure, your personal data may be transferred to and processed in countries outside India. Such countries may have different data protection laws than India.

Where we transfer personal data outside India, we will take reasonable steps to ensure that appropriate safeguards are in place, including contractual protections, confidentiality obligations, and security measures, as required by applicable law.

By using our website or services and submitting personal data to us, you acknowledge that such cross-border transfers may occur where necessary for the purposes described in this Privacy Policy.

7. Storage Duration

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on factors such as:

• the nature of the data and the purpose of processing;
• the duration of our relationship with you;
• legal, tax, accounting, or regulatory retention requirements;
• the need to resolve disputes, enforce agreements, or maintain records for legitimate business purposes.

When personal data is no longer required, we will delete, anonymize, or securely archive it in accordance with our internal retention practices and applicable law.

8. User Rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: the right to request confirmation of whether we process your personal data and to obtain a copy of such data.
• Rectification: the right to request correction of inaccurate, incomplete, or outdated personal data.
• Erasure: the right to request deletion of personal data, subject to legal and contractual limitations.
• Restriction: the right to request that we limit the processing of your personal data in certain circumstances.
• Data portability: the right to receive certain personal data in a structured, commonly used, and machine-readable format, where applicable.
• Objection: the right to object to certain processing activities, including processing based on legitimate interests or direct marketing, where applicable.

To exercise any of these rights, please contact us using the details provided in this Privacy Policy. We may request information to verify your identity before responding to your request. We will respond within a reasonable time and in accordance with applicable law.

9. Withdrawal of Consent

Where we rely on your consent to process personal data, you may withdraw that consent at any time by contacting us at [email protected].

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. In some cases, if you withdraw consent, we may be unable to provide certain services or continue a particular relationship with you.

10. Right to Complain

If you believe that your personal data has been processed in a manner that is unlawful, unfair, or inconsistent with this Privacy Policy or applicable law, you may contact us first so that we can address your concern.

You may also have the right to lodge a complaint with the appropriate regulatory or supervisory authority under applicable Indian law, including any authority established or designated under the Digital Personal Data Protection Act, 2023 or other applicable laws.

11. Data Security

We implement reasonable security practices and procedures designed to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These measures may include:

• access controls and role-based permissions;
• encryption or secure transmission methods where appropriate;
• firewalls, malware protection, and system monitoring;
• confidentiality obligations for personnel and contractors;
• regular review of security practices and incident response procedures.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, please contact:

• GIRIMALIKA LAYERS PRIVATE LIMITED
• Address: 3rd Floor, Unit 304, Prestige Polygon, Langford Road, Shantinagar, Bengaluru, Karnataka 560027, India
• Email: [email protected]
• Phone: +91 80 4127 6384

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any revised version will be posted on our website at burxingox.pro with an updated effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes become effective will constitute your acknowledgment of the updated Privacy Policy, to the extent permitted by law.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy.