1. Who controls the data
Aristocrat Research is a research-services unit of Aristocrat IT Solutions Private Limited, headquartered in Chennai, India. The contracting entity shown on your quotation and invoice is responsible for personal data processed for the engagement. Privacy enquiries and grievance requests may be sent to support@aristocratresearch.com.
2. What we collect
- Identity and contact details, including name, email, telephone or WhatsApp number, country and institution.
- Qualification details such as discipline, university category, research stage, deadline and support requested.
- Commercial and transaction records, including quotation, invoice, tax and payment status. Payment-card credentials remain with the payment provider.
- Research files voluntarily supplied after a secure route is issued, including proposals, chapters, manuscripts, datasets, reviewer comments and university guidelines.
- Communications, consultation notes, consent records, version history, access logs and security events.
- Basic device and server logs required for security and service reliability. Optional analytics will not be enabled without an appropriate notice and consent control.
3. Why we process it
We use data to answer enquiries, qualify scope, prepare quotations, schedule consultations, deliver and review agreed milestones, maintain confidentiality and version control, prevent fraud, secure our systems, meet accounting or legal duties, resolve complaints and improve service quality using de-identified information. We do not sell personal data or research files.
4. Consent and choice
Enquiry and marketing consent are separate. You may withdraw optional consent at any time. Withdrawal does not invalidate processing already completed or records that must be retained by law. Do not submit confidential research through an open enquiry form; wait for the approved transfer route.
5. Service providers and international transfers
Data may be processed by authorised research specialists and contracted providers supporting email, scheduling, customer records, cloud storage, security and payments. Access is limited to the stated purpose and protected contractually. Where a provider processes data outside India, we apply the contractual, security and transfer measures required by applicable law.
6. Retention
- Unconverted enquiries: normally 90 days after the last meaningful contact.
- Working research files: normally 180 days after the relevant milestone closes, unless the signed schedule sets another period or an active dispute requires preservation.
- Operational backups: deleted through the backup cycle, normally within a further 30 days.
- Contracts, invoices and compliance records: retained for the period required by tax, corporate and limitation laws.
- Consent and complaint records: retained long enough to demonstrate lawful handling.
7. Security
Controls include role-based access, least-privilege permissions, encrypted transfer, protected storage, multi-factor access for administrators, access logging, malware scanning, version control, confidentiality obligations and a documented incident process. No internet system is risk-free; material incidents will be handled and notified as required by applicable law.
8. Your rights
Subject to applicable law, you may request access to a summary of processing, correction, completion, erasure, withdrawal of consent, grievance handling and nomination of another person to exercise rights in relevant circumstances. We may verify identity before acting. We aim to acknowledge grievances within 72 hours and provide a substantive response within 30 days.
9. Children and third-party data
This PhD service is intended for adults aged 18 or above. Do not provide another person’s personal data, confidential institutional data, patient data or restricted datasets unless you have authority and the engagement specifically permits it.
10. Updates
Material changes will be dated and published here. Where the change materially affects an active engagement, we will use the available contact channel to provide notice.