Privacy Policy

This Privacy Policy explains how Elephant Song Consulting collects, uses, stores, shares, and protects personal information when you visit elephantsongconsulting.com, contact me, use a quiz or scorecard, submit a deck link or other material, download a resource, purchase a product, or engage my services.

For this policy, "I", "me", "my", "we", "us", or "our" refers to Navin Mangalat, operating under the trade name Elephant Song Consulting, based in India.

This policy is intended to explain how information is handled. Where consent is required, it will be requested separately through the relevant form, opt-in, cookie banner, payment process, agreement, or other appropriate step.

1. Information I collect

1.1 Contact and identity information

I may collect:

• name;

• email address;

• phone number;

• company name;

• job title or role;

• LinkedIn profile or other professional profile;

• country or region;

• any message or enquiry you submit.

1.2 Quiz, scorecard, and form responses

If you complete a quiz, scorecard, contact form, intake form, or similar tool, I may collect:

• your answers;

• your stated deck purpose;

• raise stage or business context;

• timeline, urgency, or deadline information;

• current deck status;

• challenge areas or self-assessment responses;

• result category or recommended next step;

• email address and follow-up preferences.

Forms may be operated through Framer forms, Google Apps Script forms, or similar tools.

1.3 Deck links, documents, and business materials

If you choose to share a deck link, file, document, data room link, or other business material, I may collect and review the information contained in or linked from that material.

This may include:

• pitch decks;

• business plans;

• traction, usage, revenue, pipeline, or financial information;

• investor, funder, grant, customer, or partner materials;

• market, customer, product, strategy, or positioning information;

• comments, notes, or related communications.

You should only share information that you are authorised to share.

Please do not submit highly sensitive personal data, regulated data, third-party confidential information, or information you are not authorised to share unless we have agreed on the handling requirements in writing before submission.

If you choose to submit a deck, document, link, file, data room, or other material, you confirm that you have the right to share it with me and that your submission does not breach any duty owed to another person or organisation.

I am not responsible for your decision to share material that you were not authorised to share, or for claims arising from that unauthorised submission, except to the extent caused by my own unlawful handling of the material after receipt.

1.4 Service and project information

If you become a client, I may collect:

• project briefs;

• correspondence;

• meeting notes;

• call recordings or transcripts where agreed or enabled;

• invoices;

• payment status;

• feedback;

• revision requests;

• deliverables;

• project files;

• related working notes and reference materials.

1.5 Payment and transaction information

At present, payments may be made by bank transfer.

I may collect or receive limited payment and transaction information, including:

• name;

• company name;

• email address;

• billing details;

• invoice reference;

• transaction amount;

• payment date;

• payment status;

• bank transfer reference or confirmation details.

I do not intentionally collect or store full payment card details on my own website.

If online payment links or payment processors are added later, payment information may be processed by third-party payment providers under their own terms and privacy practices.

1.6 Website and technical data

When you visit the website, some technical information may be collected automatically or through website, analytics, performance, security, advertising, or tracking tools.

This may include:

• IP address;

• browser type;

• device type;

• operating system;

• pages visited;

• time spent on pages;

• referring website;

• general location inferred from technical data;

• cookie, analytics, advertising, or tracking identifiers, if enabled.

The website may use first-party or third-party tools to understand website performance, improve user experience, measure engagement, monitor technical issues, support security, or assess the effectiveness of content, advertising, and marketing activity.

If non-essential analytics, advertising, or tracking tools are enabled, the website may display a cookie banner, consent tool, or similar mechanism where required.

1.7 Testimonials and public professional information

If you provide a testimonial, recommendation, public endorsement, or LinkedIn recommendation, I may collect and use:

• your name;

• role;

• company;

• testimonial text;

• LinkedIn recommendation or public profile details;

• approved photo or profile image, if separately permitted.

I may use snippets from publicly visible LinkedIn testimonials where appropriate. Other testimonials, recommendations, or endorsements may be used with client approval where required.

2. How I use your information

I may use your information to:

• respond to enquiries;

• provide quiz or scorecard results;

• prepare and send reports, recommendations, or follow-ups;

• review deck links or submitted materials where you ask me to do so;

• scope potential work;

• provide consulting services;

• manage projects, files, meetings, and deliverables;

• send invoices and payment instructions;

• confirm payments;

• deliver digital products, webinars, downloads, or resources;

• improve the website, quiz, resources, and services;

• maintain records for business, tax, accounting, legal, and administrative purposes;

• protect against misuse, fraud, unauthorised access, disputes, or legal claims;

• comply with applicable laws and regulations.

If you opt into marketing emails, newsletters, resources, or updates, I may use your email to send those communications. You may unsubscribe or opt out at any time.

At present, marketing communication may be managed manually through Gmail or similar email tools. A dedicated email marketing platform may be added later.

3. Legal basis and purpose of processing

Depending on your location and the applicable law, I may process personal information on one or more of the following bases:

• your consent;

• performance of a contract or steps before entering into a contract;

• legitimate business interests, such as responding to enquiries, improving services, protecting my business, and maintaining records;

• compliance with legal, tax, accounting, or regulatory obligations.

Where consent is required, you may withdraw it by contacting privacy@elephantsongconsulting.com.

Withdrawal of consent may affect my ability to provide certain services, resources, reports, or follow-ups.

4. AI tools and automated support

I may use AI-based tools to support work such as:

• analysis;

• summarisation;

• drafting;

• editing;

• quality checks;

• research support;

• internal organisation;

• consistency checks;

• preparation of working notes or draft materials.

These may include tools provided by OpenAI/ChatGPT, Anthropic/Claude, Google/Gemini, NotebookLM, Grammarly, and similar providers.

AI tools are used as assistive tools. They do not replace my final judgement.

Where feasible, I use settings or workflows intended to reduce the risk that confidential client materials are used to train public models. However, AI tools and cloud services are third-party systems with their own policies, security practices, and data-processing arrangements.

If you do not want AI tools used on confidential materials you share, tell me in writing before submitting those materials or before the engagement begins. I will confirm whether the requested restriction is workable for the service.

If a restriction is not workable, I may decline the engagement or suggest a modified scope.

5. Third-party service providers

I may use third-party providers to operate the website, manage communications, store files, run meetings, process payments, schedule calls, analyse website usage, deliver services, and support business operations.

These may include, depending on the context:

• Google Workspace, including Gmail, Drive, Docs, Sheets, Slides, Forms, Meet, Calendar, and Google Apps Script;

• website, hosting, CMS, analytics, performance, security, advertising, and tracking tools;

• meeting, recording, transcription, note-taking, scheduling, or calendar tools;

• bank transfer providers and banking systems;

• ChatGPT/OpenAI, Claude/Anthropic, Gemini/Google, NotebookLM, Grammarly, and similar AI or writing-support tools;

• Microsoft 365 tools where relevant;

• cloud storage, file transfer, backup, security, automation, or productivity tools;

• freelancers, contractors, or specialist collaborators, where needed for a project.

These providers may process information on my behalf or as independent service providers/controllers, depending on the service.

I do not sell your personal information.

6. Confidential business materials

Decks, data, business plans, financial information, strategy materials, customer information, and other non-public business materials shared for scorecards, enquiries, proposals, or services are treated as confidential by default.

Access is limited to the purpose for which the material was shared, such as:

• responding to an enquiry;

• preparing a scorecard or report;

• scoping a project;

• delivering agreed services;

• maintaining necessary business records;

• protecting against disputes or legal claims.

If specialist contractors or freelancers are involved, they will only receive access where needed for the project and subject to appropriate confidentiality expectations.

Confidentiality does not apply to information that:

• is already public;

• was already known to me without restriction;

• is independently developed without using your confidential information;

• is lawfully received from another source;

• must be disclosed by law, court order, regulator, or legal process.

7. International transfers and processing

Because I am based in India and may use global software and cloud providers, your information may be processed or stored in India and other countries where my service providers operate.

These countries may have data protection laws different from those in your country.

Where required, I take reasonable steps to use reputable providers and appropriate safeguards.

8. Cookies and analytics

The website may use cookies or similar technologies.

Cookies are small files placed on your device that help websites function, remember preferences, understand usage, improve performance, support security, measure engagement, and support marketing or advertising activity where enabled.

The website may use:

• essential cookies required for the website to work;

• preference cookies that remember settings;

• analytics or performance cookies to understand website usage and improve the website;

• security cookies or similar technologies to protect the website and prevent misuse;

• marketing, advertising, pixel, or tracking cookies if enabled.

Analytics, performance, advertising, security, or tracking tools may be provided directly by the website platform or by third-party providers. These tools may collect or receive technical information such as page views, device information, referral sources, interaction events, cookie identifiers, or similar usage data.

If non-essential analytics, advertising, pixel, or similar tracking tools are enabled, the website may display a cookie banner, consent tool, or similar mechanism where required.

You can also control or delete cookies through your browser settings. If you disable cookies, some parts of the website may not function properly.

9. How long I keep information

I keep information only as long as reasonably necessary for the purposes described in this policy, including service delivery, follow-up, business records, tax and accounting records, legal protection, and legitimate business needs.

Indicative retention periods:

• contact enquiries: up to 24 months after last meaningful contact;

• quiz and scorecard responses: up to 24 months, unless deleted earlier or needed for service history;

• deck links and submitted materials: as long as needed to respond, scope, or deliver services, then deleted or archived where reasonable;

• client project files: up to 7 years where needed for records, tax, legal, dispute, or business-continuity purposes;

• invoices and transaction records: as required by tax, accounting, and applicable law;

• marketing email data: until you unsubscribe or request deletion, subject to recordkeeping requirements;

• testimonials and public recommendations: for as long as they remain relevant, unless removal is requested and removal is reasonably possible.

These are indicative periods only. Information may be kept for a shorter or longer period where required by law, contract, dispute protection, accounting needs, technical backup, or legitimate business reasons.

10. Security

I use reasonable technical and organisational measures to protect information from unauthorised access, loss, misuse, alteration, or disclosure.

These may include:

• reputable cloud providers;

• password-protected accounts;

• restricted access;

• secure sharing practices;

• care in handling confidential business materials;

• reasonable controls around freelancers or contractors where used.

No online system, email platform, cloud service, AI tool, analytics tool, form tool, or file-sharing system is completely secure. You share information online at your own risk.

11. Your rights

Depending on your location and applicable law, you may have rights to:

• request access to personal information held about you;

• request correction of inaccurate information;

• request deletion of personal information;

• withdraw consent where processing is based on consent;

• object to or restrict certain processing;

• request a copy of your information;

• complain to a relevant authority.

To make a request, contact privacy@elephantsongconsulting.com.

I may need to verify your identity before acting on a request. I may also refuse or limit requests where permitted by law, including where information must be retained for legal, tax, contractual, security, accounting, dispute, or legitimate business reasons.

12. Marketing communications

If you sign up for updates, downloads, webinars, newsletters, or similar communications, I may contact you by email.

You can unsubscribe at any time using the unsubscribe link, if available, or by contacting privacy@elephantsongconsulting.com.

I do not sell mailing lists.

13. Children

The website and services are intended for business users and are not directed at children.

Do not submit personal information if you are under 18.

14. Testimonials

If you provide a testimonial, recommendation, or public endorsement, I may use it on the website, proposals, social media, sales materials, or other marketing materials, subject to your permission where required.

I may also use snippets from publicly visible LinkedIn recommendations where appropriate.

You may request that I stop using your testimonial in future materials by contacting privacy@elephantsongconsulting.com. This may not affect materials already published, printed, archived, cached, or shared.

Testimonials reflect individual experiences and do not guarantee similar outcomes.

15. Links to other websites

The website may contain links to third-party websites, scheduling pages, payment pages, forms, social profiles, videos, articles, or resources.

I am not responsible for the privacy practices, security, content, availability, fees, or policies of third-party websites or services. You should review their policies before using them.

16. Changes to this Privacy Policy

I may update this Privacy Policy from time to time.

The updated version will be posted on the website with a revised "Last updated" date.

If a material change is made, I may take reasonable steps to highlight the change where appropriate.

17. Contact

For questions about this policy, contact: navin.m@elephantsongconsulting.com

Last updated: 25 May 2026

Location: India