01Who we are
Orach Advisors (“Orach”, “we”, “us”, “our”) is a brand of TechAlpha Global Innovations Private Limited (CIN: U72900TG2019PTC137147), a company incorporated in India with its registered place of business at Unit 409, PR Elite Co-Working Space, 4th Floor, Jain Sadguru Images Capital Park, VIP Hills, Madhapur, Hitech City, Hyderabad – 500081, Telangana, India.
This Privacy Policy explains how we collect, use, share and protect personal data when you visit orachadvisors.com, request a consultation, create an Explorer account, use the Orach client workspace, or engage us for a client-acquisition program (together, the “Services”).
For personal data processed under this Policy, TechAlpha Global Innovations Private Limited is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the controller for the purposes of the UK GDPR, where it applies.
02Scope of this policy
Orach works with businesses — staffing and IT services companies. This Policy covers personal data of the individuals who interact with us on behalf of those businesses (founders, directors, sales leaders, authorised signatories and team members), and of visitors to our website.
It does not cover third-party websites linked from our site. Business information about a company (for example, turnover or team size) is not personal data, but we protect it with the same care.
03Personal data we collect
Information you give us
| When | What we collect |
|---|---|
| Talk to an Advisor / consultation request | Full name, designation, work email, phone number, company name, head office / location, team size, approximate annual turnover, company website and LinkedIn page, target market, segment and client size, preferred call date and time, selected program. |
| Explorer account sign-up | Full name, designation, work email (company domain), phone number, country of registration, registered company name, location, growth objective and password (stored only in hashed form by our authentication provider). |
| Company profile | Company legal identity and business details, and documents you upload — such as Certificate of Incorporation, PAN and (optionally) GST certificate — which may contain names and identifiers of directors or signatories. |
| Engagement & agreement | Authorised signatory name and designation, agreement acceptance date/time and related audit records, target client preferences, engagement updates and communications with your Growth Advisor. |
| Payments | Billing name, company, GSTIN and billing address, payment amount, order and transaction references. Card, UPI and bank details are entered on our payment partner’s page — Orach does not see or store full card numbers. |
Information collected automatically
- Basic technical data such as IP address, browser type, device and pages requested, recorded in server and security logs by our hosting and infrastructure providers.
- Session data stored in your browser (local storage) so you stay signed in to your account.
Information from other sources
- Public company records — for example, Ministry of Corporate Affairs (MCA) data available through data.gov.in — used to look up and verify the company you register.
- Professional information that is publicly available (such as a company website or LinkedIn page you share with us).
04How and why we use it
| Purpose | Basis |
|---|---|
| Respond to your enquiry, schedule an advisor call and recommend a program | Your consent / taking steps at your request before a contract |
| Create and secure your account; verify your company and work email | Your consent / performance of contract |
| Deliver programs — target market strategy, enterprise access, opportunity development, progress tracking and reporting | Performance of contract |
| Prepare, accept and record service agreements | Performance of contract; legal obligation |
| Process payments, issue GST invoices and keep accounting records | Performance of contract; legal obligation |
| Send service messages (account, engagement, payment and security notices) | Performance of contract; legitimate uses |
| Prevent fraud and misuse, keep our systems secure, and enforce our terms | Legitimate uses permitted by law / legitimate interests |
| Comply with law, court orders and lawful requests from authorities | Legal obligation |
We do not sell personal data, and we do not use it for third-party advertising.
Where we rely on consent, you can withdraw it at any time (see “Your rights”). Withdrawal does not affect processing already carried out, and some Services may no longer be available without that data.
06International transfers
We are based in India and serve clients in India and the United Kingdom. Some of our service providers may store or process data outside your country. Where personal data is transferred outside India, we do so in line with the DPDP Act and any restrictions notified by the Government of India. For UK data subjects, transfers outside the UK are made with appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum, where required.
07How long we keep it
- Enquiries that do not lead to an account or engagement — only as long as needed to respond and follow up, after which they are deleted or anonymised.
- Accounts — while your account is active. If you ask us to close it, we delete or anonymise personal data unless we must keep it for the reasons below.
- Engagement, agreement, invoice and payment records — for the period required by Indian tax, company and accounting laws and to establish or defend legal claims.
- Security logs — for a limited period, in line with our providers’ retention and applicable law.
08How we protect it
We use reasonable security practices, including encrypted connections (HTTPS), access controls and role-based permissions in our platform, hashed passwords, and access limited to people who need it to deliver the Services. Documents you upload are stored in access-controlled storage.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify affected users and the authorities as required by applicable law. Please keep your password confidential and tell us immediately if you suspect unauthorised use of your account.
10Your rights
Subject to applicable law, you have the right to:
- Access a summary of the personal data we hold about you and how it is used.
- Correct, complete or update inaccurate or incomplete data — much of it can be edited directly in your profile.
- Erase personal data that is no longer needed, unless we must keep it by law.
- Withdraw consent at any time, as easily as you gave it.
- Nominate another person to exercise your rights in case of death or incapacity (DPDP Act).
- Grievance redressal through our Grievance Officer, and, if unresolved, to approach the Data Protection Board of India.
UK users also have the rights to object to processing, restrict processing and data portability, and may complain to the Information Commissioner’s Office (ICO).
To exercise any right, email info@techalphaglobal.com with the subject “Privacy Request”. We may need to verify your identity before acting on a request, and we will respond within the timelines required by applicable law.
11Children
The Services are for businesses and are not directed to children. We do not knowingly collect personal data of anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
12Changes to this policy
We may update this Policy from time to time. The “Last updated” date at the top shows when it was last changed. If changes are significant, we will notify account holders by email or through the platform before they take effect.
13Contact & Grievance Officer
For questions, requests or complaints about this Policy or your personal data, please contact: