This Privacy Policy explains how Desqcon Software Pvt. Ltd., which operates the Desqcon Consulting brand (“Desqcon”, “we”, “us”), collects, uses, shares and protects personal data when you visit https://desqcon.com (the “Website”), contact us, take one of our maturity assessments, buy a paid assessment, or deal with us in any other way connected to the Website. Please read it together with our cookie banner settings, which let you choose which optional cookies we use.

Last updated: 4 October 2026.

1. Who we are

Desqcon Software Pvt. Ltd., trading as Desqcon Consulting, is an IT service management (ITSM), IT operations management (ITOM) and IT asset management consultancy. For the personal data described in this policy, Desqcon Software Pvt. Ltd. decides why and how the data is used. You can reach us at info@desqcon.com. Please put “Privacy” in the subject line so your message reaches the right person.

2. What personal data we collect

The data we collect depends on how you use the Website.

  • Enquiries and contact forms. When you fill in a contact, enquiry or request form, we collect your name, work email address, company, phone number if you give one, and the message you write.
  • Free maturity assessments. When you take a free assessment, we collect the answers you choose, the scores calculated from them, and the name, email address and company you enter to receive your results.
  • Paid maturity assessments. When you buy a paid assessment, we collect your name, email address and company, your answers and scores, and a record of your purchase (the assessment bought, the amount, the date, an order reference and a private access link we email to you so you can return to your assessment).
  • Payment details. Payments are processed by PayPal or Razorpay. You enter your card or account details on their pages, not on ours. We do not receive or store your full card number. We receive confirmation that the payment succeeded, the amount and an order or transaction reference.
  • Newsletters and follow-up emails. If you subscribe, or if you ask us for information or take an assessment and agree to hear from us, we keep your name, email address and your subscription and email activity so we can send and manage those emails.
  • Events, courses and accounts. If you register for an event, buy a ticket, enrol in a course or create an account on the Website, we collect the details needed to provide that service, such as your name, email address and the items you register for.
  • Comments. If you leave a comment, we collect the name, email address and website you enter, together with your IP address and browser details to help us detect spam.
  • Technical data collected automatically. When you visit the Website, our systems and our service providers receive your IP address, browser type and version, device type, operating system, language, the pages you view, the page you came from, and the date and time of your visit. If you agree to analytics cookies, we also see aggregated information about how visitors use the Website.

3. Why we use your data, and our legal basis

We use personal data only for the purposes below. Where the law of your country requires a legal basis, we rely on the one shown.

  • To respond to your enquiries and provide the services you ask for, including calculating and showing your assessment results and sending your access link (performance of a contract, or steps you request before entering one).
  • To take payments, issue receipts and keep accounting records (performance of a contract and compliance with legal obligations).
  • To send you emails you have asked for, and, where you have agreed, news and marketing about our services (your consent; you can withdraw it at any time).
  • To run, secure and improve the Website, prevent spam, fraud and abuse, and understand which content is useful (our legitimate interests in operating a safe and effective website; for analytics cookies, your consent where required).
  • To follow up on assessments and enquiries with relevant information about our services, where you have given your details to us for that purpose (our legitimate interests, or your consent where required).
  • To meet legal and regulatory obligations and to establish, exercise or defend legal claims (legal obligation and legitimate interests).

We do not use your personal data to make decisions about you that have legal or similarly significant effects by purely automated means.

4. Cookies and similar technologies

Cookies are small files stored on your device. We use a cookie consent tool (CookieYes) that shows a banner on your first visit and lets you accept, reject or customise optional cookies. You can change your choice at any time using the cookie settings control on the Website, and you can also block or delete cookies in your browser settings. If you block cookies, some features may not work.

The Website uses these types of cookies and similar technologies:

  • Necessary. Needed for the Website to work, for example to remember your cookie choice, keep a session open, protect forms from spam and keep the Website secure.
  • Functional. Used to remember preferences such as the language you choose when you use the translation feature, and to support features such as the paid assessment access link in your browser.
  • Analytics. We use Google Analytics and Google Search Console through the Site Kit plugin to understand how visitors find and use the Website. These cookies are set only if you consent where the law requires it.
  • Third party content. Features such as spam protection (Google reCAPTCHA), payment buttons (PayPal and Razorpay), translation and social media links may set their own cookies or receive your IP address when they load. Their use of your data is governed by their own privacy policies.

5. Maturity assessments

Our assessments ask you to describe how your organization manages IT services and operations. You choose what to answer, and you can mark a question as “not sure” or skip it. Please do not enter personal data about other people, passwords, security credentials or other confidential information into assessment answers.

We use your answers to calculate your score and recommendations and to follow up with you where you asked us to. We do not publish your individual results or share them with other organizations. If we ever use assessment data for benchmarking or research, we will use it only in aggregated form that does not identify you or your organization.

6. Who we share your data with

We do not sell your personal data. We share it only with the following kinds of recipients, and only as needed:

  • Service providers that help us run the Website and our business, such as web hosting and security providers, email delivery services, and the customer relationship and email marketing tools we use to manage enquiries and emails.
  • Payment processors: PayPal and Razorpay, which process payments for paid assessments under their own privacy policies.
  • Google, for analytics, Search Console and reCAPTCHA spam protection.
  • Translation, cookie consent and similar plugin providers whose services run on the Website.
  • Professional advisers such as accountants, auditors and lawyers, where needed.
  • Authorities and other third parties where we are required to do so by law or to protect our rights, and any buyer or successor if our business is reorganised or sold, in which case this policy will continue to apply to your data unless you are told otherwise.

Our service providers may only use your data to provide services to us and are expected to protect it.

7. International transfers

Desqcon Software Pvt. Ltd. is based in India, and the providers we use may process data in India, the United States, the European Union and other countries. Where we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country that is not recognised as providing adequate protection, we rely on appropriate safeguards such as standard contractual clauses or our providers’ own transfer mechanisms.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes in this policy. In particular: enquiries sent through our contact forms and submissions to our free assessments are kept for 90 days and then deleted or made anonymous, unless you become a customer or ask us to keep them for longer; purchase and payment records are kept for as long as tax, accounting and other laws require; assessment results linked to a paid purchase are kept so you can return to them through your access link; and marketing contact details are kept until you unsubscribe or ask us to delete them. When data is no longer needed, we delete it or make it anonymous.

9. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted (HTTPS) connections, access controls, login attempt limits and spam protection. Card details are handled only by our payment processors. No website or transmission over the internet can be completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will tell you and the relevant authority where the law requires.

10. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

  • to know what personal data we hold about you and to get a copy of it;
  • to have inaccurate data corrected and to have data deleted or erased;
  • to restrict or object to certain uses of your data, including direct marketing, and to withdraw consent you have given at any time (withdrawal does not affect use before you withdrew);
  • to receive your data in a portable format, where applicable;
  • to nominate another person to exercise your rights in the event of your death or incapacity, where your law provides for this;
  • to complain to a data protection authority. In the European Economic Area and the United Kingdom, this is your local supervisory authority. In India, you may contact the Data Protection Board of India once it is in operation after raising your concern with us first.

Residents of California have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will not discriminate against you for using your rights.

To use any of these rights, email info@desqcon.com with “Privacy request” in the subject line. We may ask you to confirm your identity before acting. We aim to respond within one month, or sooner where the law requires.

11. Marketing emails

We send marketing emails only where you have agreed, or where the law otherwise allows. Every marketing email contains an unsubscribe link, and you can also email us to opt out. We will still send service messages, such as receipts and access links for paid assessments.

12. Children

The Website and our services are aimed at business users and are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

13. Links to other websites

The Website may link to other websites, such as social media pages and our partners. We are not responsible for the privacy practices of those sites, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will change the “Last updated” date at the top. If a change is significant, we will take reasonable steps to tell you, for example by a notice on the Website.

15. Contact and complaints

Questions, concerns or complaints about how we handle personal data can be sent to Desqcon Software Pvt. Ltd. (Desqcon Consulting) at info@desqcon.com (subject: “Privacy”). This is also the contact point for grievances under applicable Indian law. We will look into every complaint and reply as soon as reasonably possible.