Privacy Policy
Last updated: October 1, 2026
New Horizons Consulting Engineers LLP (“New Horizons,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit newhrzn.com (the “Site”), how we use and share it, and the choices and rights you have.
Where this Policy describes rights that apply to individuals under privacy laws, we extend those rights to all visitors regardless of whether the law strictly requires it.
1. Information We Collect
Information you give us through our contact form. When you submit our contact form or otherwise reach out, we collect your name, email address, the company you represent, the type of project you are inquiring about, and the contents of your message. If you contact us by email or telephone directly, we receive whatever you include.
Information you give us when you apply for a role. Our Careers page has a separate application form, which collects considerably more. Section 2 describes it in full.
Information collected automatically. When you browse the Site, our hosting and security providers automatically record limited technical data, including your IP address, device and browser type, operating system, the pages you request and when you requested them. This is used to serve the Site, protect it against attack and abuse, and diagnose faults.
Information collected by our analytics provider. We use Google Analytics, loaded through Google Tag Manager, to understand how visitors find and use the Site — which pages are viewed, how long visitors stay, roughly where in the world they are, which site or campaign referred them, and actions such as clicking our phone number or email address or submitting a form. This is collected through cookies and similar technologies (see Section 6). We use it in aggregate to improve the Site. We do not run advertising on this Site, and we do not use advertising pixels, ad conversion tracking, or retargeting.
Spam protection. Every page of the Site loads Google reCAPTCHA, which collects device and behavior signals and sends them to Google in order to tell people apart from automated submissions. It runs site-wide rather than only on pages with a form.
We do not intentionally collect sensitive personal information (e.g., government IDs, financial account numbers, health data, precise geolocation) through the Site.
2. Job Applicants
If you apply for a role through our Careers page, we collect:
- your name, email address and telephone number;
- the position you are applying for;
- your degree, university or college, year of graduation, and CGPA or percentage;
- your résumé, and your academic transcripts if you choose to attach them;
- anything you write in the cover letter field.
We use this information solely to assess your application — to evaluate your suitability, to contact you about it, and to keep a record of our recruitment. We do not use application information for marketing or advertising, and we do not share it with advertising or analytics partners.
Your application is stored with our hosting provider in the United States and is reviewed by our team in India, as described in Section 14.
How long we keep applications. We retain applications for 12 months after a decision is made, so that we can answer questions about our decision and keep a record of our recruitment. You can ask us to delete your application at any time using the contact details in Section 17, and we will do so unless we are required to keep it.
3. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide the services you request;
- Assess applications for employment, as described in Section 2;
- Operate, maintain, and improve the Site and our marketing;
- Measure and analyze how the Site is used, so we can improve it;
- Send communications you have requested or that relate to our services;
- Detect, prevent, and address security issues, spam, and fraud; and
- Comply with legal obligations.
4. How We Share Your Information
We do not sell your personal information. We share information only as follows:
Service providers / processors who perform functions on our behalf — our digital agency, Riverbend Marketing LLC (dba Leadline Performance Marketing), which builds and operates this Site for us and holds the hosting account through which it runs; website hosting (Kinsta), content delivery and security filtering for that hosting (Cloudflare), web-font delivery (Google Fonts), contact-form and application-form processing (Gravity Forms), form spam protection (Google reCAPTCHA), website security monitoring (Wordfence), and email routing and delivery (Gravity SMTP and Twilio SendGrid).
Analytics. We share website usage information with Google, which provides Google Analytics and Google Tag Manager for us. Google processes that information under its own privacy policy.
We run no advertising on this Site. We do not use advertising pixels, ad conversion tracking, or retargeting, and we do not share personal information with advertising platforms. Our presence on LinkedIn is organic: we post there and link to it from this Site, which does not track you.
Job applications are excluded from the above. Application information is not shared with advertising or analytics partners.
Legal and safety — when required by law, subpoena, or to protect our rights, users, or the public.
Business transfers — in connection with a merger, acquisition, or sale of assets.
5. Legal Bases for Processing (EU/UK Visitors)
The Site is directed to visitors in the United States and Canada. We do not target or market to individuals in the European Economic Area or the United Kingdom. If you visit the Site from those regions, the analytics cookies described in Section 6 may be set unless you disable them through your browser controls.
Where the GDPR or UK GDPR applies, we process personal data on these legal bases: our legitimate interests (operating and improving the Site, marketing, security); performance of a contract or steps taken at your request (responding to inquiries and assessing applications); and compliance with legal obligations.
6. Cookies and Tracking Technologies
We use a small number of cookies and similar technologies to operate the Site and remember your preferences. These include:
Essential cookies — required for the Site to function, including hosting, caching and security cookies set by Kinsta and Cloudflare, and the cookie our cookie banner uses to remember that you have seen it.
Analytics cookies — set by Google Analytics, which we load through Google Tag Manager. Our Google Analytics property’s Measurement ID is G-4DC2XNX4S4. These record a randomly generated identifier for your browser, the pages you view, how you arrived, and actions such as clicking our phone number or email address or submitting a form, so we can see how the Site is used in aggregate. The main cookies are _ga and _ga_4DC2XNX4S4, which expire after two years.
Spam protection — Google reCAPTCHA loads on every page and collects device and behavior information to distinguish people from automated submissions. It is subject to Google’s privacy policy.
We do not set advertising cookies, and we do not use advertising pixels, ad conversion tracking, or retargeting.
How to control these. You can block or delete cookies through your browser settings — every major browser allows this, and doing so will stop the analytics cookies above being stored. You can also opt out of Google Analytics specifically, across every site that uses it, with Google’s browser add-on at tools.google.com/dlpage/gaoptout. Blocking essential cookies may stop parts of the Site working.
The banner you see on your first visit records that you have seen this notice. It does not currently switch analytics off — use your browser settings or the Google opt-out above to do that.
7. Third-Party Services
Our service providers and advertising and analytics partners process data under their own privacy policies:
- Riverbend Marketing LLC, dba Leadline Performance Marketing: leadlinemarketing.com
- Google (Analytics, Tag Manager, reCAPTCHA & Fonts): policies.google.com/privacy
- Kinsta: kinsta.com/legal/privacy-policy
- Cloudflare: cloudflare.com/privacypolicy
- Twilio SendGrid: twilio.com/legal/privacy
- Gravity Forms: gravityforms.com/privacy-policy
- Gravity SMTP: gravitysmtp.com/privacy-policy
- Wordfence: wordfence.com/privacy-policy
8. Your California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to: know/access the personal information we collect; delete it; correct inaccuracies; and opt out of the “sale” or “sharing” of personal information (which, under California law, can include cookie-based advertising). You also have the right not to be discriminated against for exercising these rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We run no advertising on the Site, so there is no such sharing to opt out of.
To exercise these rights, contact us using the methods in Section 17.
In the prior 12 months we may have collected the following categories: identifiers (name, email, phone, IP address), commercial/inquiry information, internet or other electronic network activity (server and security logs of the pages you requested, and analytics records of the pages you viewed, how you arrived, and actions such as clicking our phone number or email address or submitting a form), geolocation inferred from IP address at approximate city level, professional or employment-related information (from job applications), and education information (from job applications).
9. Your Rights Under Other U.S. State Privacy Laws
Many states have enacted consumer privacy laws. We honour the following rights for any U.S. resident who requests them:
- To confirm whether we are processing your personal data and to access it;
- To correct inaccuracies in your personal data;
- To delete personal data you provided or that we obtained about you;
- To obtain a copy of your personal data in a portable format;
- To opt out of the processing of your personal data for targeted advertising, for the sale of personal data, or for profiling that produces legal or similarly significant effects. (We do not engage in targeted advertising or in such profiling, and we do not sell personal data.)
To exercise any of these rights, use the methods in Section 17. We will respond within 45 days and may extend that period by a further 45 days where reasonably necessary, in which case we will tell you. We may need to verify your identity before acting on a request. We will not charge for a first request in any 12-month period.
Appeals. If we decline to act on your request, we will tell you why. You may appeal by replying to our decision or by writing to us at the address in Section 17 with “Privacy Appeal” in the subject line. We will respond to appeals within 45 days. If we deny your appeal, you may contact your state Attorney General.
10. Your Rights (EU/UK — GDPR)
If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability and to withdraw consent. You may also lodge a complaint with your local data protection authority. Contact us using the methods in Section 17 to exercise these rights.
11. Your Rights Under India’s Digital Personal Data Protection Act, 2023
New Horizons Consulting Engineers LLP is established in India and is the Data Fiduciary for the personal data described in this Policy. This section applies if you are a Data Principal under the Act — most commonly if you apply for a role with us from India.
How we process. Where you give us personal data yourself for a clear purpose — submitting the contact form, or applying for a role — we process it for that purpose. Where we rely on your consent, you may withdraw it at any time, and withdrawing is as straightforward as giving it. Withdrawal does not affect processing already carried out before you withdrew.
Your rights. You have the right to:
- Access — obtain a summary of the personal data we process about you and of our processing activities;
- Correction and completion — have inaccurate or misleading personal data corrected, and incomplete data completed or updated;
- Erasure — have your personal data erased where you withdraw consent, or where it is no longer needed for the purpose it was collected for, unless we are required by law to retain it;
- Grievance redressal — raise a grievance with us about our handling of your personal data or of a request you have made; and
- Nomination — nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
How to exercise them. Write to us using the contact details in Section 17. We may need to verify your identity before acting on a request, and we will respond within a reasonable period.
Grievances. Please contact us first, at newhrzn@newhrzn.com with “DPDP Grievance” in the subject line, so that we have the opportunity to put things right. If you are dissatisfied with our response, or we do not respond, you may complain to the Data Protection Board of India.
Erasure in practice. We erase personal data once the purpose it was collected for is no longer being served and we are not required to keep it. Job applications are subject to the specific period in Section 2.
12. Data Retention
We keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce agreements, after which we delete or anonymise it. Job applications are kept for the period stated in Section 2.
13. Data Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including the documents you upload with a job application. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
14. International Data Transfers
New Horizons Consulting Engineers LLP is based in Mumbai, India. The Site is hosted in the United States, and information submitted through it — including contact inquiries and job applications — is stored on servers located in the United States. Our team in India accesses that information to respond to you, and inquiries and applications are forwarded to us by email. Information is therefore processed in both the United States and India, as well as other countries where our service providers operate.
Where required, we rely on appropriate safeguards for transfers out of the EEA/UK.
15. Children’s Privacy
The Site is not directed to children, and we do not knowingly collect their personal information.
Different laws set different ages, and we apply whichever is stricter for you. Under India’s Digital Personal Data Protection Act, 2023, a child is anyone under 18: we do not knowingly process a child’s personal data without the verifiable consent of a parent or lawful guardian, and we do not track children or direct advertising at them. Under U.S. laws, we do not knowingly collect personal information from anyone under 16, and we do not sell or share, or use for targeted advertising, the personal information of any visitor we know to be under 16.
Our Careers page is intended for applicants of working age who have completed, or are completing, a degree. If you believe a child has provided us personal information, contact us using the details in Section 17 and we will delete it.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version with a new “Last updated” date, and where a change materially affects how we use personal information we already hold, we will take reasonable steps to notify affected individuals.
17. Contact Us
New Horizons Consulting Engineers LLP
D-124/126 Kailash Vaibhav Industrial Complex, Veer Savarkar Road,
Parksite, Vikhroli West, Mumbai-400079
Maharashtra, India
+91 22 4011 5008
newhrzn@newhrzn.com