1. Introduction

Hidden Door ("the Agency") respects your privacy. This policy explains how we collect, use and safeguard your personal information when you use our services or website. It is written to comply with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other applicable Indian law.

2. Information we collect

We collect information you provide directly — name, contact details, identification documents, case-related information and any material necessary for the investigation, including photographs, video, location data and contact information. We may also collect limited technical data such as IP address and cookies when you use our website.

3. Use of information

Information is used strictly for investigative purposes, internal analysis and communication of findings to the client or authorised parties. We do not share personal data with third parties except as required by law, court order or lawful government request.

4. Data security

We implement industry-standard security measures to protect data from unauthorised access, disclosure, alteration or destruction. Access to sensitive information is limited to authorised personnel only.

5. Handling of highly sensitive material

On completion of a case, private documents and material — photographs, video, location information, contact information and similar data — are either securely destroyed or handed to the client, as appropriate. We do not retain such material except for the case diary or case summary, held in secure digital storage. The case diary is not shared with any third party except as required by law or court order.

6. Client rights

Clients may access, update or request deletion of their personal information by contacting us directly. Requests for deletion of case diaries or summaries are considered in accordance with legal and regulatory retention requirements.

7. Legal basis for processing

We process personal data on the basis of (a) your explicit consent given at engagement, (b) the necessity of performing our contractual obligations to you, and (c) compliance with legal obligations under Indian law. You may withdraw consent at any time by contacting us, subject to any ongoing legal or contractual obligation.

8. Your rights under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023 you have the right to access your personal data held by us, request correction of inaccurate data, request erasure subject to legal retention requirements, receive information about how your data is processed, and file a complaint with the Data Protection Board of India.

9. Cookies and browser storage

This website sets no tracking cookies and runs no third-party advertising or analytics scripts. It stores two things locally in your own browser, which never reach us: your light or dark display preference, and a count of enquiries submitted from that device so the form can rate-limit itself. Clearing your browser data removes both. Fonts are served by Google Fonts, which receives your IP address as part of that request; if you would rather avoid it, a content blocker will stop the request without breaking the site.

10. Retention and destruction

Enquiry messages that do not become engagements are deleted within 90 days. During an engagement, working material is held only as long as the work requires. On closure, photographs, video, location data, recordings and third-party contact details are returned to you or securely destroyed within 30 days. What we keep beyond that is the case diary — a dated summary of what was done and why — retained for eight years in encrypted storage to meet limitation periods under Indian law and to answer any later challenge to our conduct. You may request earlier destruction of the case diary; we will comply unless a legal or regulatory obligation prevents it, and we will tell you which.

11. Transfers outside India

Some engagements require work in another country. Where that happens, the minimum personal data needed to carry out the enquiry is shared with a vetted correspondent agency in that jurisdiction, under a written instruction that binds them to confidentiality and to lawful collection. We do not transfer personal data to any territory that the Central Government has restricted under Section 16 of the Digital Personal Data Protection Act, 2023, and we do not accept work in countries where investigators cannot operate lawfully. You are told at intake if your matter will involve a transfer abroad, and to which country, before any data leaves India.

12. Grievances and how to reach a person

If you believe your personal data has been mishandled, write to the Grievance Officer, Hidden Door Investigation Agency, at [email protected] with GRIEVANCE in the subject line, or call +91 93956 41273. We acknowledge within 72 hours and respond substantively within 30 days. This is also the contact point for any question about how your data is processed, as required of a Data Fiduciary. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

13. Security incidents

If personal data we hold is lost, accessed without authority or disclosed in error, we will notify the affected individuals and the Data Protection Board of India as required under the DPDP Act, and tell you what happened, what data was involved and what we are doing about it. We will not delay notification to complete an internal investigation first.

14. What we do not do

We do not sell, rent or trade personal data. We do not use enquiry content for marketing. We do not build profiles for advertising. We do not use client case material to train machine-learning systems. We do not disclose that someone is a client to anyone who asks, including to other clients.

15. Changes to this policy

We may update this policy periodically and will notify clients of significant changes by email or website announcement. The date at the top of this page always reflects the current version.

16. Contact

For questions about this Privacy Policy or your personal data, contact [email protected].

Questions about this document can be sent to [email protected]. Registered in Guwahati, Assam · Jurisdiction: Courts of Kamrup (Metropolitan).