Privacy Policy

Last updated: 22 July 2026

This website is operated by Siddartha Bahri, sole proprietor, trading as Echelon Consulting, 729, Udyog Path, RK Developers & Infrastructures Pvt Ltd, Sector 22A, Chandigarh 160022, India ("we", "us"). This policy explains what personal data we collect, why, and what you can do about it. It is written to meet our obligations under the Digital Personal Data Protection Act, 2023.

Who to contact

Siddartha Bahri, trading as Echelon Consulting, acts as the Data Fiduciary for the data described here. For any question, request or grievance regarding your personal data, write to sid@sidbahri.com or call +91 70877 65555.

What we collect

When you contact us. Your name, email address, organisation if you provide one, your area of interest, and whatever you write in the message field.

When you take a diagnostic. Your name and email address, your written responses to the assessment scenarios, and a cohort or partner code if you arrived through one. Diagnostic responses are free text you compose yourself; please do not include personal information about yourself or others that the assessment does not ask for.

When you enrol or express interest in a programme. Your name, email address, phone number, organisation if provided, the programme you selected, and any cohort, capability or coupon code carried in the link you followed.

When you pay. Payments are processed by PayU Payments Private Limited. We receive confirmation of the transaction and the details you supply for invoicing. We do not receive or store your card number, UPI PIN, CVV, or bank credentials.

Automatically. We use Google Analytics, which sets cookies and collects usage data including approximate location, device and browser type, and pages visited. You can opt out using Google's browser add-on or by blocking cookies in your browser.

Why we collect it

To respond to your enquiry; to score your diagnostic and send you your report; to process your enrolment, take payment and deliver the programme you bought; to send you information about programmes you have asked about; to meet our tax and accounting obligations; and to understand how the site is used so we can improve it.

Consent, and withdrawing it

Where we rely on your consent, you give it by submitting the relevant form, and the notice at that point tells you what you are consenting to. You may withdraw consent at any time by writing to sid@sidbahri.com. Withdrawal does not affect processing already carried out, and it may mean we can no longer provide a service you have asked for.

Where your data is processed

Diagnostic responses are scored on our own hardware in India. They are not sent to any third-party AI service for scoring.

Data is stored on Google Firebase in the asia-south2 region, in India. Some service providers we use may process data outside India: Resend (email delivery), Formspree (contact form handling) and Google Analytics. Payment data is processed by PayU in India.

Who we share it with

We do not sell your personal data. We share it only with the service providers named above, to the extent needed to run the service, and with tax or legal authorities where the law requires it.

How long we keep it

Enquiries: up to 24 months from your last contact with us. Diagnostic responses and reports: up to 24 months, after which they are deleted or anonymised. Enrolment and payment records: as long as tax and accounting law requires, currently eight years. You may ask us to delete your data sooner and we will do so unless we are required to keep it.

Your rights

Under the DPDP Act you may ask us for a summary of the personal data we hold about you and how we process it; ask us to correct anything inaccurate or incomplete; ask us to erase data we no longer need; and nominate another person to exercise these rights on your behalf if you die or become incapacitated.

Write to sid@sidbahri.com. We will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

Security

We use access controls, encrypted connections and restricted credentials to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

Changes

We may update this policy. The date at the top shows when it last changed. Material changes affecting how we use your data will be notified by email where we hold your address.