Privacy Policy
Your privacy matters to us. This page explains what information we collect through this website, why we collect it, who processes it on our behalf, and how you can access, correct or delete it.
Last updated: 23 September 2026
Thank you for visiting the Change+ website. Our clients are at the heart of everything we do, and part of our commitment to you is to respect and protect the privacy of the personal information you give us. This page tells you what we collect, why we collect it, who else handles it, how long we keep it, and what you can ask us to do about it.
This notice is given under the Digital Personal Data Protection Act, 2023 and the rules made under it. In the language of that Act, you are the Data Principal and Change+ is the Data Fiduciary.
Who we are
Change+ is a leadership development practice at 001 Skyline Elysee, Richards Town, Bangalore 560005, India. We decide how the personal data described below is handled, and we are responsible for it — including for what the service providers listed further down do with it on our behalf.
For anything to do with your personal data, write to team@changeplus.co.in.
What we collect, and exactly why
The Act requires us to tell you, item by item, what we collect and the specific purpose each item serves. We do not ask for anything beyond what that purpose needs.
| What we collect | When | The specific purpose |
|---|---|---|
| Your name, work email address, telephone number, organisation and role | When you fill in our contact form | To reply to your enquiry and, if it leads somewhere, to scope and deliver the work |
| Your name, email address and chosen time slot | When you book a discovery call | To hold the appointment and send you the joining details |
| Anything you choose to tell us in an email, on a call or in a meeting | When you contact us directly | To answer you and to keep a record of our dealings with you |
| Your IP address and standard web request details | Every page you load | Kept in our host’s server logs to keep the site available, diagnose faults and guard against abuse |
| Your name, role and words | Only if you give us a testimonial | To publish it, and only after you have said yes in writing |
You can read every page of this website without telling us who you are. Nothing above is collected unless you contact us or we already work together.
We do not sell your personal data, we do not share it for anyone else’s marketing, and we do not use it to build advertising profiles or to make automated decisions about you.
Your consent, and how to take it back
When you send us a form, book a call or write to us, you are consenting to us using that information for the purpose stated against it above. That consent is yours to withdraw at any time, and the Act requires withdrawing to be as easy as giving it was.
To withdraw consent, email team@changeplus.co.in and say so — one line is enough, and you do not have to give a reason. We will stop using your data for that purpose and delete it, unless we are required by law to keep it or we need it to finish something you have asked us for. Withdrawing does not undo processing that was lawful before you withdrew.
Your rights
Under the Act you have the following rights, and you exercise all of them by emailing team@changeplus.co.in. We will not charge you and we will respond as promptly as we can.
- To know what we hold. You can ask for a summary of the personal data we hold about you, what we are doing with it, and the identities of anyone we have shared it with.
- To have it corrected or completed. If anything we hold is wrong, out of date or incomplete, tell us and we will fix it.
- To have it erased. You can ask us to delete your personal data. We will, unless a law requires us to keep it.
- To nominate someone. You can name another person to exercise these rights on your behalf if you die or become unable to act for yourself. Email us the nominee’s name and contact details.
- To complain and be answered. You can raise a grievance with our grievance officer, Ajit Sivaram, as set out in the next section, before going to the regulator.
We may need to confirm who you are before we act on a request, so that we do not hand your information to someone else.
Grievances
If you are unhappy with how we have handled your personal data or your request, contact our grievance officer. He is also the person able to answer questions on behalf of Change+ about how we process personal data:
Ajit Sivaram
Grievance Officer, Change+
001 Skyline Elysee, Richards Town, Bangalore 560005
ajit@changeplus.co.in
We will acknowledge your grievance and work to resolve it. If we do not resolve it to your satisfaction, you may complain to the Data Protection Board of India. The Act asks you to come to us first.
Who else handles your data
We use a small number of service providers to run this website and our enquiry process. They act on our instructions as data processors, under contract, and we remain answerable to you for what they do with your data. Each has its own privacy policy.
| Service | What it does for us | What it receives |
|---|---|---|
| HubSpot | Runs our contact form and holds our client records | Everything you type into the form, plus cookies it sets to recognise repeat submissions |
| Calendly | Handles discovery-call bookings | Your name, email address and chosen time |
| Netlify | Hosts this website | Server log data, including your IP address |
| Google Fonts | Serves the typefaces this site uses | Your IP address, as part of the font request |
We may also disclose personal data where the law requires it, for example to a court or a regulator acting within its powers.
Data leaving India
HubSpot, Calendly, Netlify and Google Fonts are operated from outside India, so the data described above is stored and processed abroad, mainly in the United States and the European Union. The Act permits this except to countries the Central Government has specifically restricted; if any of the countries involved is restricted in future, we will move or stop using that service.
Cookies
This website sets no advertising or analytics cookies of its own, and we do not track you across other websites. The HubSpot contact form and the Calendly booking widget set their own cookies when you interact with them, which they use to make those tools work. You can block or delete cookies in your browser settings, though the contact form may then not work properly.
Children and people who cannot act for themselves
This website and our services are meant for working adults. We do not knowingly collect personal data about anyone under 18, and we do not do behavioural advertising or tracking directed at children. If we discover we hold a child’s data without verifiable consent from a parent or lawful guardian, we will delete it. If you believe a child has sent us information, tell us at team@changeplus.co.in and we will remove it.
The same applies to anyone with a lawful guardian: we will only process their data with that guardian’s verifiable consent.
Keeping it accurate, and keeping it safe
We take reasonable steps to keep the personal data we hold complete, accurate and up to date, and we ask you to tell us when something changes.
We protect it with a combination of physical, technical and organisational measures, including restricting who inside Change+ can see client records. No transmission over the internet can be guaranteed completely secure, so while we work hard to safeguard your data once we have it, we cannot warrant the security of anything in transit to us.
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected person, as the Act requires.
How long we keep it
- Enquiries that do not become work: kept for up to three years from your last contact, so we can pick up a conversation you restart, then deleted.
- Client records: kept for as long as we work with you or your organisation, and for eight years afterwards, which is the period Indian tax and company law requires us to keep business records.
- Server logs: retained by our host for a short rolling period and then overwritten.
When the purpose we collected something for is finished and no law requires us to keep it, we erase it — and we ask our processors to do the same. If you withdraw consent or ask for erasure before these periods are up, we act on that instead.
Testimonials and client stories
We publish client stories and testimonials on this website, some of which name the person who gave them. We always ask for consent in writing before publishing anyone’s name alongside their words. If you would like yours taken down, email team@changeplus.co.in and we will remove it.
Links to other sites
This website links to third-party sites that are outside our control and are not covered by this policy. We encourage you to read the privacy policy of any site you visit.
If you are in the EU or the UK
If you contact us from the European Union or the United Kingdom, the GDPR may also apply to your data. The rights described above cover most of what it gives you. If you want to exercise a GDPR right specifically — including data portability or objecting to processing — email team@changeplus.co.in and we will deal with it on that basis.
Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. If the change is significant and we hold your contact details, we will tell you.
Contact
Change+
001 Skyline Elysee, Richards Town
Bangalore 560005, India
team@changeplus.co.in