Privacy notice
How we use what you share on this website
A short, plain notice for the forms on dpdpatrustos.com. The TrustOS product has its own terms, agreed with each customer.
Who we are
This website is run by Code Colonies Private Limited, 1214 to 1217, i-Square Corporate Park, Science City Road, Ahmedabad 380060, India. We decide how the personal data you share here is used, so we are the Data Fiduciary for it.
What we collect, and why
When you request a demo, enquire about the partner programme, take the gap assessment, download the readiness checklist, send a result from one of the free tools, ask for a proposal or sign up for DPDP updates, we collect your name, work email, organisation, and anything else you choose to tell us, such as your phone number, role, organisation size, message, tool result or assessment answers. A sign up for updates needs only your email.
We use these details to reply to your request, arrange the conversation you asked for, send you your assessment result or the checklist, keep a record of it in our CRM and, if you signed up for them, send DPDP updates. We do not sell them, and we do not use them for unrelated marketing.
If you use Colony, the guide on this website, your questions may be sent to our AI provider to produce the answers. Please do not enter personal data you do not want to share. If you choose WhatsApp, the conversation runs on WhatsApp under its own terms.
If you arrived through a link with campaign tags or from another website, we record that source with your request so we know which channels people find us through. It is kept in your browser for that session only and sent with your form.
Your consent
We ask for your consent with a checkbox before any form is sent. You can withdraw it at any time by emailing us, and we will stop using your details for that purpose. Withdrawal does not affect what was done before it.
Spam protection on forms
Forms on this website use Cloudflare Turnstile to check that a visitor is human. Cloudflare processes technical signals from your browser and device for this, such as your IP address, under its own privacy policy. When you submit a form, we also check that the domain of your email address can receive mail, by looking up its public mail records.
Who else handles it
These services process your details for us, each for the purpose given:
Our hosting provider delivers the website and receives the standard information every browser sends with a request, such as your IP address.
Resend sends your enquiry to our team by email and, once we switch it on, an automatic reply to you confirming that we received it.
HubSpot is our customer relationship management (CRM) system. We record your enquiry there so the right person can follow it up and we keep a record of our conversation with you.
Cloudflare Turnstile checks that a form is sent by a person, using technical signals from your browser and device, such as your IP address.
Google Calendar and Google Meet are used when you book a meeting. Your name, email and the time you chose go into a calendar invitation with a Google Meet link.
Vercel Web Analytics and Speed Insights count page views and measure how fast pages load while the website is hosted on Vercel. When the website is self-hosted, we use Umami analytics, run on our own server, instead. None of them sets cookies or identifies you.
Anthropic provides the AI model that writes Colony's answers, when Colony is connected to it. The question you type is sent to it, so please do not type personal details into Colony.
Pexels serves some of the photographs and receives your browser's standard request information when an image loads.
Some of these providers may process your data outside India.
Gap assessment answers are also recorded in the TrustOS platform, which we run.
How long we keep it
We keep enquiry details for as long as we are in conversation with you, and for up to two years after our last contact, unless you become a customer, in which case your contract sets the period. If you signed up for DPDP updates, we keep your email until you unsubscribe or ask us to stop. You can ask us to erase your details sooner.
Your rights
Under the Digital Personal Data Protection Act, 2023 you can ask for a summary of the personal data we hold about you, ask us to correct, complete, update or erase it, nominate someone to act for you, and raise a grievance. Email us and we will respond within the time the law requires.
Grievances
Write to the Grievance Officer, Code Colonies Private Limited, at consulting@codecolonies.com, or by post to the address above. If you are not satisfied with our response, you may approach the Data Protection Board of India.
Changes
If we change this notice, we will update the date below. Last updated 11 October 2026.