1. Introduction

Hidden Door ("the Agency") respects your privacy. This policy explains how we collect, use and safeguard your personal information when you use our services or website. It is written to comply with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and other applicable Indian law.

2. Information we collect

We collect information you provide directly — name, contact details, identification documents, case-related information and any material necessary for the investigation, including photographs, video, location data and contact information. We may also collect limited technical data such as IP address and cookies when you use our website.

3. Use of information

Information is used strictly for investigative purposes, internal analysis and communication of findings to the client or authorised parties. We do not share personal data with third parties except as required by law, court order or lawful government request.

4. Data security

We implement industry-standard security measures to protect data from unauthorised access, disclosure, alteration or destruction. Access to sensitive information is limited to authorised personnel only.

5. Handling of highly sensitive material

On completion of a case, private documents and material — photographs, video, location information, contact information and similar data — are either securely destroyed or handed to the client, as appropriate. We do not retain such material except for the case diary or case summary, held in secure digital storage. The case diary is not shared with any third party except as required by law or court order.

6. Client rights

Clients may access, update or request deletion of their personal information by contacting us directly. Requests for deletion of case diaries or summaries are considered in accordance with legal and regulatory retention requirements.

7. Legal basis for processing

We process personal data on the basis of (a) your explicit consent given at engagement, (b) the necessity of performing our contractual obligations to you, and (c) compliance with legal obligations under Indian law. You may withdraw consent at any time by contacting us, subject to any ongoing legal or contractual obligation.

8. Your rights under the DPDP Act, 2023

Under the Digital Personal Data Protection Act, 2023 you have the right to access your personal data held by us, request correction of inaccurate data, request erasure subject to legal retention requirements, receive information about how your data is processed, and file a complaint with the Data Protection Board of India.

9. Cookies and tracking

Our website may use cookies to remember your preferences. You can disable cookies in your browser settings; some site functionality may be affected.

10. Changes to this policy

We may update this policy periodically and will notify clients of significant changes by email or website announcement.

11. Contact

For questions about this Privacy Policy or your personal data, contact [email protected].

Questions about this document can be sent to [email protected]. Registered in Guwahati, Assam · Jurisdiction: Courts of Kamrup (Metropolitan).