Privacy Policy

1. Introduction & Scope

IndTech Solutions ("we", "us", "our", or the "Data Fiduciary"), having its principal place of business at IT Park, Sahastradhara Road, Dehradun, Uttarakhand - 248001, India, respects your privacy and is committed to protecting your personal data. This Privacy Policy details how we collect, process, store, disclose, and erase your personal data when you access our website (www.indtechsolutions.com) or utilize our software development, cloud hosting, AI consulting, and data analytics services.

2. Personal Data We Process

We process personal data provided directly by you or collected automatically during your visit, strictly for specified, lawful purposes:

• Contact Data: Full name, professional email address, telephone number, job title, and organization name submitted via contact or project inquiry forms.
• Technical & Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, pages viewed, referring URLs, and telemetry data collected automatically via security and analytics logs.
• Communication Data: Records of inquiries, project specifications, support requests, and feedback submitted to our team.

3. Specified Purpose & Basis of Processing

Pursuant to Section 4 and Section 6 of the DPDP Act 2023, personal data is processed solely on the basis of your free, specific, informed, unconditional, and unambiguous consent given by a clear affirmative action, or for legitimate uses permitted by law:

• To respond to inquiries and provide custom software and technology consulting services.
• To deliver dashboard demos, project proposals, and contractual communications.
• To maintain website security, prevent fraudulent activity, and ensure infrastructure stability.
• To fulfill statutory obligations under applicable Indian laws.

4. Statutory Rights of Data Principals (Under DPDP Act 2023)

As a Data Principal under Indian law, you are entitled to exercise the following statutory rights regarding your personal data:

5. Withdrawal of Consent

Under Section 6(4) of the DPDP Act 2023, you have the right to withdraw your consent for data processing at any time. Withdrawal of consent can be initiated by emailing our Data Protection Officer at dpo@indtechsolutions.com. Upon receiving your withdrawal request, we will cease processing your personal data within 30 days, unless continued processing is required or authorized under Indian law. Please note that withdrawing consent may limit our ability to provide certain custom software services or respond to ongoing inquiries.

6. Processing of Children's Personal Data (Section 9)

We do not knowingly collect or process personal data of individuals under eighteen (18) years of age ("children") without verifiable consent from a parent or lawful guardian. We do not engage in behavioral monitoring, tracking, or targeted advertising directed at children. If we become aware that a child's data has been collected without parental consent, we will take immediate steps to erase such data.

7. Technical Safeguards & Breach Notification

Pursuant to Section 8(5) of the DPDP Act 2023, we implement reasonable security safeguards—including SSL/TLS encryption, access controls, firewalls, and regular vulnerability audits—to protect personal data against unauthorized access, loss, or alteration. In the event of a personal data breach, we will notify the Data Protection Board of India (DPBI) and affected Data Principals in accordance with statutory rules.

8. Retention & Erasure of Personal Data

Under Section 8(7) of the DPDP Act 2023, personal data is retained only for as long as necessary to fulfill the specified purpose for which it was collected or to comply with applicable legal obligations. Once the purpose is satisfied or consent is withdrawn, personal data is permanently deleted or anonymized.

9. Cross-Border Data Transfers

In accordance with Section 16 of the DPDP Act 2023, we may transfer personal data to countries outside India for cloud hosting and international service delivery, except to any territories or countries restricted by notification of the Central Government of India.

10. Grievance Redressal Officer & Data Protection Officer (DPO)

If you have questions, feedback, or wish to exercise your rights or file a grievance under the DPDP Act 2023, please contact our designated Grievance Officer:

We acknowledge receipt of any privacy grievance within 24 hours and resolve complete inquiries within thirty (30) business days.

11. Complaint to Data Protection Board of India (DPBI)

If you are not satisfied with the resolution provided by our Grievance Officer, or if your grievance remains unaddressed after 30 days, you have the statutory right under Section 13(3) of the DPDP Act 2023 to register a complaint with the Data Protection Board of India (DPBI) in the manner prescribed by the Central Government.