Privacy policy

1. Who we are

Anappara Group is a diversified business group headquartered in Poonoor, Kozhikode, Kerala, India. This website is operated by Anappara Associates & Developers Pvt Ltd (CIN U74999KL2017PTC050766) on behalf of the Group. In this policy, “we”, “us” and “our” mean that company and, where your enquiry or application concerns one of them, the other Anappara Group companies.

This policy explains what personal data we collect through this website, why we collect it, who we share it with, how long we keep it, and the rights you have. It is written to meet the Digital Personal Data Protection Act, 2023 (the “DPDP Act”), the Information Technology Act, 2000 and the rules made under them. For the purposes of the DPDP Act, we are the data fiduciary for the personal data described here.

2. The short version

• You can browse this website without telling us who you are.
• We collect personal data only when you fill in a form, plus the limited technical data needed to keep the website and its forms secure.
• We use it to reply to you, to consider your job application and to keep proper records. We do not sell it and we do not use it for advertising.
• Analytics cookies are set only if you allow them.
• You can ask us to show you, correct or delete your data at any time.

3. What we collect

When you send an enquiry: your name, email address and phone number, the type of enquiry, your message, and, if you choose to give them, your organisation and the Group company you are interested in. We also record which page the enquiry was sent from.

When you apply for a job: your name, email address and phone number, the role you are applying for, and, if you choose to give them, your current location, years of experience and a cover note.

When you use the website: your IP address and basic information about your browser and device. Our hosting provider records these in server logs, and our security services use them to block spam and abuse of the forms.

Only if you allow analytics cookies: the pages you visit, how you reached the website, your approximate location (country or city, worked out from a shortened IP address), and your device and browser type.

We do not ask for passwords, bank or card details, health information, biometric data or identity documents through this website. Please do not include them in a message. If you contact us by phone, email or WhatsApp, the information you share is handled under this policy too. WhatsApp is run by Meta, and its own privacy policy applies to messages sent through it.

4. How we use it

We use your personal data only for the purpose for which you gave it, namely to:

• reply to your enquiry and give you the information or quotation you asked for;
• pass your enquiry to the Group company best placed to answer it;
• consider your job application, contact you about the role and arrange interviews;
• protect the website and its forms from spam, fraud and misuse;
• keep the records the law requires, and establish or defend legal claims;
• understand, in aggregate, how the website is used so that we can improve it, but only if you have allowed analytics cookies.

We will not send you marketing messages unless you have asked to receive them.

Our legal basis. When you send us a form, you give us your details voluntarily for a stated purpose: a reply, or consideration of your application. We process them for that purpose as a legitimate use under Section 7(a) of the DPDP Act. We rely on your consent for analytics cookies. You can withdraw your consent at any time. Withdrawal does not affect anything we did with your data before you withdrew it.

5. Who we share it with

We share your personal data only as follows:

• Anappara Group companies: the company your enquiry or application concerns, and the Group head office.
• Service providers who process data on our instructions and under contract, and who may not use it for their own purposes. These cover website hosting (Vercel), database storage (Neon), email delivery (Resend), security and spam protection (Cloudflare), form rate limiting (Upstash) and, only with your consent, website analytics (Google Analytics).
• Authorities: government bodies, regulators, courts or the police, where the law requires it or where it is needed to protect the rights, property or safety of any person.
• A successor business: if a Group company or its business is reorganised, merged or sold, the data relating to it may pass to the new owner, who must protect it as this policy describes.

We do not sell or rent personal data to anyone.

6. Where your data is stored

Some of our service providers store or process data on servers outside India. Where they do, we use providers that follow recognised security standards, and we transfer data only as Indian law allows, including any restriction the Central Government places on transfers under Section 16 of the DPDP Act.

7. How long we keep it

• Enquiries: up to 24 months after our last contact with you. If the enquiry leads to business with a Group company, the records of that business are kept for the periods the law requires.
• Job applications: up to 12 months after the role is filled or closed, so that we can consider you for similar openings. Ask us and we will delete your application sooner. If you join us, your application becomes part of your employment records.
• Security data: the counters used to limit repeated form submissions expire within an hour. Server logs are kept for the short period set by our hosting provider.
• Analytics data: no longer than 14 months.

After these periods, we delete your personal data or make it anonymous so that it can no longer identify you.

8. Cookies

Cookies are small files a website stores in your browser. We use as few as we can.

• ag_consent (necessary, 6 months): remembers your cookie choice so that we do not ask you on every visit.
• _ga and _ga_<id> (analytics, up to 2 years, only if you allow them): set by Google Analytics to count visits and tell one visitor from another, without identifying you by name.

When you use a form, Cloudflare Turnstile runs a short security check to tell people from automated programs. Cloudflare processes your IP address and browser signals for this purpose only.

Where analytics is in use, the website asks for your choice when you first visit, and nothing beyond necessary cookies is set until you decide. Rejecting is as easy as accepting. You can change your choice at any time with the “Cookie settings” link at the foot of every page, or clear cookies in your browser settings.

9. How we protect it

The website uses an encrypted (HTTPS) connection. Form submissions are stored in a secured database, and only authorised staff can see them, through a password-protected administration area. Our forms are guarded against spam and automated abuse. No system is completely secure. If a personal data breach occurs, we will inform the people affected and the Data Protection Board of India, as the law requires.

10. Your rights

Under the DPDP Act, you have the right to:

• a summary of the personal data we hold about you, what we do with it and who we have shared it with;
• have inaccurate or incomplete data corrected, completed or updated;
• have your data erased, unless we are required by law to keep it;
• withdraw any consent you have given, for example to analytics cookies;
• have a complaint about how we handle your data resolved by us;
• nominate another person to exercise these rights on your behalf if you die or are unable to act.

To use any of these rights, email info@anappara.com with the subject “Privacy request”. We may ask you to confirm your identity before we act. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have used our grievance process.

In return, the law asks you to give us accurate information, not to impersonate anyone, and not to make false or frivolous complaints.

11. Children

This website is not intended for children. If you are under 18, for example a student interested in study abroad counselling, please ask a parent or legal guardian to contact us on your behalf. If we learn that we have collected a child’s data without verifiable consent from a parent or guardian, we will delete it.

12. Other websites

This website links to other sites, such as the websites of individual Group companies, maps and WhatsApp. We are not responsible for how those sites handle personal data. Please read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated. If a change materially affects how we use data you have already given us, we will tell you where we reasonably can.

14. Grievance Officer and contact

For any question, request or complaint about your personal data, please contact our Grievance Officer:

Grievance Officer
Anappara Group, Anappara Associates & Developers Pvt Ltd
Anappara Building, IX/644
Unnikulam P.O., Poonoor
Kozhikode, Kerala 673574
India
Email: info@anappara.com
Phone: +91 96056 10011 (Mon–Sat, 9:30 am – 6:00 pm)

See also our Terms of use.