1.1 Section 5 of the Act requires a notice, given before or with every request for consent, and Rule 3 sets its content. The following table lists each requirement and points to where this notice satisfies it.

This is the full notice that appears at the link each block carries. It is published at https://trust.pensievelabs.org and at the collection-notice address on the website.

2.1 Who is collecting your data. Edsol Edtech Pvt. Ltd., a Private Limited Company trading as Pensieve Labs, is the Data Fiduciary for the personal data collected on the surfaces at the head of this notice. Its contact for privacy is info@pensievelabs.org.

2.2 What is collected and why. The exact data, purpose and goods or services enabled are itemised block by block at 3. Pensieve Labs collects only what the stated purpose needs.

2.3 What Pensieve Labs never does with it. It does not sell, rent, licence or trade your personal data; it does not use it for behavioural advertising; and it does not use it to train, fine-tune or evaluate any machine-learning model. These commitments are stated in full in POL-GL-053 clause 2.3.

2.4 Who else processes it. The service providers that operate Pensieve Labs's own systems, and the data each touches, are listed in the Subprocessor Register (DIS-GL-009). This notice does not restate that list.

2.5 Your lawful basis. Where you send Pensieve Labs your data for a purpose you have chosen, it is processed as a legitimate use under Section 7(a). Where the purpose is marketing, including the newsletter, it rests only on your consent under Section 6, withdrawable at any time. The Act provides no marketing legitimate-use ground and no legitimate-interests basis, and Pensieve Labs relies on none.

2.6 Withdrawing consent. Where processing rests on consent, you may withdraw it at any time, and withdrawal is as easy as giving it was: the unsubscribe link in any marketing message, the preference route in POL-GL-072, or the rights request form (FRM-GL-505). Withdrawal does not affect processing already done, or processing on a different basis, such as records a law requires Pensieve Labs to keep.

2.7 Exercising your rights. You have the rights to access, correction, completion, updating, erasure, grievance redressal and nomination. Exercise them through FRM-GL-505; Pensieve Labs does not restate the mechanics here.

2.8 Grievance and the Board. The Grievance Officer, the acknowledgement and response timelines, and the route to escalate to the Data Protection Board of India once it is operational, are all in POL-GL-066. That contact is repeated in every response Pensieve Labs sends you.

2.9 Language. English and Hindi today, and any other Eighth Schedule language on request: see 4.

3.1 Each row below is a collection point on a Pensieve Labs surface. The block at that point shows the short text at 3.3, which is written to render beside a form field. The retention trigger is stated here; the retention period for each category is owned by POL-GL-053 clause 7.2 and is not restated, so the two cannot drift apart.

3.2 The itemised description.

3.3 The block text. This is the text rendered at each point, with Edsol Edtech Pvt. Ltd. as the Data Fiduciary in each. The data collected is in the table above; each block stays short.

NB-01 Marketing contact form. Used to answer your enquiry and assess fit. Never sold and never used to train a model. Exercise your rights or withdraw, as easily as you gave the data: FRM-GL-505. Full notice: POL-GL-053.

NB-02 Demonstration request. Used to arrange and run a demonstration. Rights and withdrawal: FRM-GL-505. Full notice: POL-GL-053.

NB-03 Newsletter signup. Sent only on your consent. Unsubscribe from a link in every issue, as easily as you subscribed. How marketing and withdrawal work: POL-GL-072. Rights: FRM-GL-505.

NB-04 Trust Center email gate. Used to unlock email-tier documents and record what was released. Access is governed by POL-GL-500 and POL-GL-052. Rights: FRM-GL-505.

NB-05 Trust Center access request. Used to decide your request and provision or decline a credential, and the decision is recorded. Form and rules: FRM-GL-504. Rights: FRM-GL-505.

NB-06 Careers application. Used to assess you for the role. The full candidate notice, including verification and retention, is POL-IN-320. Rights: FRM-GL-505.

NB-07 Support ticket. Used to resolve your issue. Do not include patient or clinical data; if it reaches us it is treated as the hospital's data under DPA-GL-001, not ours. Support: POL-GL-056. Rights: FRM-GL-505.

NB-08 Event registration. Used to register you for and run the event. We contact you afterwards only where you asked, or on consent. Rights: FRM-GL-505.

NB-09 Security report. Used to triage and fix the issue, reach you, and credit you where you wish. Disclosure terms and safe harbour: POL-GL-059. Rights: FRM-GL-505.

4.1 The requirement. Sections 5(3) and 6(3) of the Act require Pensieve Labs to give you the option to access this notice and the consent request in English or in any language specified in the Eighth Schedule to the Constitution of India. The Eighth Schedule lists 22 languages: Assamese, Bengali, Bodo, Dogri, Gujarati, Hindi, Kannada, Kashmiri, Konkani, Maithili, Malayalam, Manipuri, Marathi, Nepali, Odia, Punjabi, Sanskrit, Santhali, Sindhi, Tamil, Telugu and Urdu. The duty sits in the Act, not in Rule 3.

4.2 Pensieve's position today. The standing notice and every block are available in English and Hindi now. The remaining Eighth Schedule languages are provided on request to info@pensievelabs.org, and the collection surfaces carry a language selector so the choice is offered at the point of notice, not only afterwards.

4.3 An open design point. [UNVERIFIED: no binding Board or Government guidance was located confirming whether all 22 Eighth Schedule languages must be pre-rendered by default or may be offered on selection; Pensieve Labs builds to the conservative reading, that the choice must be genuinely available at the point of notice, and will pre-render further languages if guidance requires it.]

5.1 How consent is captured. Where consent is the basis, it is taken by a clear affirmative action, is not bundled with anything unnecessary, uses no pre-ticked box, and is limited to the personal data necessary for the stated purpose, as Section 6(1) of the Act requires.

5.2 What the consent record contains. Section 6(10) places on Pensieve Labs the burden of proving that a valid notice was given and valid consent obtained. To meet it, each consent is recorded with: the notice block identifier and the version of the notice shown; the itemised personal data and the specified purposes; the language in which the notice and request were presented; the affirmative action you took; your identifier and a timestamp; and, on withdrawal, the withdrawal event and the resulting cessation. The record is held in the Consent and Lawful Basis Register (REG-GL-207).

5.3 The reference you receive. On giving consent you receive a unique consent reference, of the form CNS-<year>-<serial>, by which you can later identify and withdraw that specific consent. Quote it when you write to info@pensievelabs.org or use FRM-GL-505, though you are not required to have it.

5.4 How long the record is kept. The consent and withdrawal record is retained for as long as the consent is relied on and for the evidence period after withdrawal stated in POL-GL-053 clause 7.2, so that Pensieve Labs can show that a withdrawal was honoured.

6.1 The statutory position. Sections 6(7) to 6(9) let a Data Principal give, manage, review and withdraw consent through a Consent Manager, a company registered with the Board that meets the First Schedule conditions. Rule 4, which governs that registration, commences on or about 14 November 2026.

6.2 Pensieve's own tools are not a Consent Manager. Pensieve Labs's preference centre and the routes in this notice are its own capture; they are not a Consent Manager in the statutory sense, and this notice does not describe them as one. Where a registered Consent Manager exists and you route consent through it, Pensieve Labs will honour a give or withdraw instruction received that way once the mechanism is available.