Privacy policy

Last updated: 21 October 2026

This policy explains how GRCWorks ("we", "us") handles personal data when you visit grcworks.io or contact us. It covers this website only; client engagements and the GRCWorks platform are governed by their own agreements.

What we collect

Messages you send us. If you email us or use the contact form (which opens your own email app), we receive your name, email address, company and message.
Call bookings. If you book a call, our scheduling provider collects the details you enter to arrange the meeting.
Technical data. Our hosting and content delivery provider processes IP addresses and request logs to deliver and secure the site.

This website does not use advertising or tracking cookies.

How we use it

Only to reply to you, arrange and hold calls, prepare proposals you ask for, and keep the website secure. We don't sell personal data or use it for unrelated marketing.

Service providers

We use trusted providers for website hosting and delivery, email, call scheduling and web fonts (Google Fonts). They process data on our behalf and only as needed to provide their service.

How long we keep it

Enquiries are kept for up to 24 months, or longer if we start working together, in which case the engagement agreement applies.

Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the GDPR, you can ask to access, correct or delete your personal data, withdraw consent, or raise a grievance. Email hello@grcworks.io and we'll respond within 30 days.

Contact

Questions or grievances about this policy: hello@grcworks.io.