Privacy policy

This policy explains how ETEBAS ([Registered legal name — TBC]), a business advisory firm based in Bengaluru, Karnataka, India, handles personal information when you visit this website, register for a profile, contact us, or work with us under an advisory mandate. It applies to the website at etebas.com and to the registration and profile services that sit behind it.

ETEBAS is a business advisory firm. We are not an investment company, fund manager, broker or registered financial adviser, and nothing in this policy should be read as a description of regulated financial services.

We collect only what is needed to run the site, respond to you and, where a mandate is signed, deliver advisory work. Depending on how you use the site, this may include:

• Identity and contact details: your name, email address and mobile number, and the company or organisation you register on behalf of.
• Profile information you choose to give us: the capacity in which you engage with us (for example as a company, a family office or an adviser), the sectors and areas you are interested in, and your stated objectives.
• What you tell the assistant: if you use the guided conversation on the home page after signing in, the answers you give and the transcript of that conversation are stored against your profile so that it can be resumed on a later visit.
• Verification records: one-time passcodes sent to your email or mobile, when they were sent, and whether they were confirmed. The passcodes themselves expire and are not reusable.
• Sign-in data: if you sign in with Google, we receive your Google account identifier, email address and name from Google. We do not receive your Google password.
• Technical data: IP address, browser type, device and operating system, the pages you visit and approximate timing, collected through standard server logs.
• Correspondence: emails, calls and meeting notes when you contact us or we contact you.

We use a small number of essential cookies to keep you signed in and to remember which regional edition of the site you are reading. These are necessary for the site to function and cannot be switched off without losing that functionality.

Analytics cookies are not set unless you allow them in the consent bar. Your choice is stored in your browser, and you can change it by clearing that stored preference. We do not use advertising or cross-site tracking cookies.

We use personal information for the following purposes:

• To create and secure your profile, including verifying your email address and mobile number.
• To respond to an enquiry or a request to schedule a call.
• To understand your interests and objectives so that conversations with our team are relevant to you.
• To assess fit for an advisory engagement and, where a mandate is signed, to deliver the services agreed under it.
• To send service messages about your profile, such as sign-in links and verification codes.
• To operate, secure and improve the website, including detecting misuse and limiting automated abuse of sign-in and verification routes.
• To meet legal, regulatory and record-keeping obligations that apply to us.

Where a legal basis is required, we rely on: your consent, for optional analytics cookies and for the information you volunteer in your profile and the assistant conversation; the performance of a contract or steps taken at your request before entering into one, for registration, enquiries and engagements; our legitimate interests in running a secure and useful website; and compliance with legal obligations.

You can withdraw consent at any time. Doing so does not affect processing that took place before you withdrew it.

We do not sell personal information, and we do not share client identity or the terms of any engagement with third parties without written permission. We share information only in the following cases:

• Service providers that help us run the site: email delivery, SMS and WhatsApp verification messaging, Google sign-in, cloud hosting and database services. Each acts on our instructions and only to the extent needed to provide its service.
• Licensed professionals engaged under a mandate: chartered accountants, company secretaries, registered valuers and law firms, where your engagement requires their work and under confidentiality terms.
• Counterparties to a transaction or partnership, only with your agreement and only the information you have approved for sharing.
• Regulators, courts and law-enforcement bodies, where we are required to do so by law or a valid legal request.
• A successor entity in the event of a merger, reorganisation or transfer of our business, subject to the same commitments.

ETEBAS works across India, the UAE and GCC, Singapore, the United States and the United Kingdom, and our service providers may process information in those or other countries. Where information leaves the country in which it was collected, we rely on the transfer mechanisms available under the applicable law, such as contractual safeguards with the receiving party, and we take reasonable steps to ensure it receives an equivalent level of protection.

We keep personal information for as long as your profile is active or as needed to provide the services you have asked for. Verification codes expire within minutes of being issued, and sign-in sessions expire and must be renewed. Records relating to an advisory engagement are kept for as long as required by the mandate and by applicable professional, tax and record-keeping rules, after which they are deleted or anonymised.

If you ask us to delete your profile, we remove it and the information associated with it, except where we are required to retain a record by law or to resolve a dispute.

Access to your profile requires a verified email address and a verified mobile number. Sessions are held in secure, HTTP-only cookies and refresh tokens are single-use. Personal data is stored in access-controlled databases, transmitted over encrypted connections, and available to our team only on a need-to-know basis. Requests to send verification messages are rate-limited to guard against abuse.

No system is entirely secure. If we become aware of a breach affecting your information, we will notify you and the relevant authorities where the law requires it.

Depending on where you are resident, you may have rights under India's Digital Personal Data Protection Act 2023, the UAE Personal Data Protection Law, Singapore's Personal Data Protection Act, the UK GDPR and Data Protection Act 2018, the EU GDPR, or applicable US state privacy laws. These may include the right to:

• Access the personal information we hold about you and receive a copy.
• Correct information that is inaccurate or incomplete. Much of your profile can be edited directly after signing in.
• Ask for your information to be deleted.
• Object to, or ask us to restrict, certain processing.
• Receive your information in a portable format.
• Withdraw consent where processing is based on it.
• Complain to the data protection authority in your jurisdiction.

This website and our services are directed at businesses and professionals. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us and we will remove it.

The site may link to external websites, including those of professional bodies, regulators and service providers. Those sites have their own privacy practices, which we do not control and for which we are not responsible.

We may update this policy as the site, our services or the law change. The date at the top of this page shows when it was last revised. Where a change is material, we will draw attention to it on the site or, for registered users, by email.