Privacy policy

Last updated 16 September 2026

This policy explains what ReCirculytics Sustainable Solutions LLP does with personal data in connection with EPR IQ. It is written to comply with the Digital Personal Data Protection Act, 2023.

1. The short version

2. What we collect

If you just use the tool

Nothing that identifies you. EPR IQ is a static site. We do not require an account and we do not set advertising or tracking cookies.

Our hosting provider processes standard request information, including IP address, to deliver the site and protect it from abuse. We do not use that to identify individuals.

If you report an error

The company, financial year and figure in question, what you say should be corrected, any evidence you supply, and your email address if you choose to give one. Email is optional; a report without it is accepted and acted on, we simply cannot reply.

We store a one-way hash of the sending IP address to detect abuse. The address itself is not retained.

If you contact us

Your name, email address, and optionally your company and phone number, together with what you tell us about your enquiry.

3. Why we hold it

• Error reports — to check the claim against the source filing, to reply to you, and to keep an auditable record of what was raised and what we did about it.
• Enquiries — to respond to you and, if you become a client, to provide the services you ask for.

We do not sell personal data, share it with advertisers, or use it to build profiles. We do not send marketing to people who contacted us about a correction.

4. Public information

The company data displayed on EPR IQ is drawn from filings made in the public domain under regulatory mandate. Where the name of an officer or a contact appears within a filing, it appears there because the filer published it. EPR IQ does not extract or display personal contact details from filings.

5. How long we keep it

• Error reports and their outcome: retained as part of the correction record, since a published correction must remain traceable.
• Enquiries that do not lead to an engagement: deleted within 24 months.
• Client records: retained as required by the professional and statutory obligations that apply to our work.

6. Where it is held

Enquiry and correction records are held with our service providers on infrastructure that may be located outside India. We use providers who offer appropriate safeguards.

7. Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to tell you what personal data of yours we hold, correct or complete it, erase it where we are not required to retain it, and withdraw consent you previously gave. You may also nominate another person to exercise these rights on your behalf.

Write to the address below and we will respond within a reasonable period.

8. Grievance Officer

If you have a question or a complaint about how we have handled your personal data, contact our Grievance Officer. We will acknowledge your request and respond within the period prescribed under the Digital Personal Data Protection Act, 2023.

If the matter remains unresolved you may approach the Data Protection Board of India.

9. Changes

We will update this page and the date above if our practices change.