We collect what we need.
We retain what we must.

1. Who we are

SFHL Innovations Private Limited (CIN under SFHL · GSTIN 07ABNCS7462D1Z1), with registered office at Innov8, 44, Backary Portion, 2nd Floor, Regal Building, Connaught Place, New Delhi 110001. Reach: contact@sfhl.space.

2. What we collect

When you fill our consultation form or email us, we collect: your name, email address, company name, area of interest, and any message you send. When you visit any sfhl.space page, our hosting provider's logs may briefly store IP, browser, OS, and referrer for security and abuse prevention.

We do not place advertising, analytics, or tracking cookies that profile you across sites. We do not run third-party advertising trackers. The only first-party cookies we may set are functional (session, CSRF, theme preference).

3. Why we collect it

• To respond to your consultation request
• To deliver the work, if we engage
• To send the operational emails the engagement requires
• To maintain audit trails as required by law (DPDP, GST, IT Act)
• To prevent abuse, fraud, and security incidents on our infrastructure

We do not use your data to train models. We do not sell, rent, or syndicate your data. We do not enrich your data against third-party data brokers.

4. Where it lives

Form submissions and operational data are stored on India-region cloud infrastructure by default. Hosting and email run on Indian-region or Indian-presence providers. We will tell you if a specific engagement requires us to use a non-Indian-region service for technical reasons; we will not change region without explicit consent.

5. Who else sees it

The minimum set of processors required to operate the studio: hosting (Cloudflare Pages, Indian-region origin), email (the SMTP provider on the From: address you reach), accounting (the registered CA firm engaged for SFHL Innovations Pvt Ltd's compliance), and the legal/CS firm engaged for ROC compliance. Each of these has a contract with us bound to the same standards described here.

We do not share your data with marketing partners, advertising platforms, or any third party that does not have a direct delivery role in the engagement.

6. How long we keep it

• Form submissions that don't lead to engagement: 12 months, then deleted.
• Engagement records: for the life of the engagement plus the period required by tax / accounting law (typically 7 years in India).
• Server logs: 30 days, then rotated out.

7. Your rights under DPDP 2023

The Act gives you the right to:

• Access your personal data we hold
• Correct inaccuracies in it
• Delete data we no longer need a lawful basis to retain
• Withdraw consent for processing (where consent is the basis)
• Nominate a person to exercise your rights in your absence
• Grievance redress within statutory timelines

To exercise any of these, email contact@sfhl.space with the subject line "DPDP request". We respond inside 30 days, faster if we can.

8. Children's data

sfhl.space is a B2B engagement surface and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe we hold data on a minor, email us and we'll delete it.

9. Sub-processors and international transfers

The current list of sub-processors is available on request to contact@sfhl.space. We do not transfer personal data outside India for any purpose other than the technical operation of services that are inherently global (DNS resolution, CDN edge caching). Where India-region operation is offered by a provider, we use it.

10. Updates to this policy

We will update this page as the law, our practices, or our sub-processor list change. The "last updated" date at the top reflects the current version. Material changes will be flagged on the home page for at least 30 days.

11. Contact us

Privacy queries, DPDP requests, or concerns: contact@sfhl.space. Postal: SFHL Innovations Private Limited, Innov8, 44, Backary Portion, 2nd Floor, Regal Building, Connaught Place, New Delhi 110001.