Introduction
DiscoverLogix IT Services Private Limited (“we,” “us,” or “our”) is a private limited company registered in India, specializing in website development, mobile application development, and custom software solutions. We are committed to protecting the privacy and security of your personal information in compliance with the Information Technology Act, 2000, IT Rules 2011, and the Digital Personal Data Protection Act, 2023.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or engage with our software development solutions. By accessing our services, you agree to the collection and use of information in accordance with this policy.
1. Types of Information We Collect
We collect personal data and Sensitive Personal Data or Information (SPDI) as defined under the IT Rules 2011 and Digital Personal Data Protection (DPDP) Act 2023, including:
1.1 Personal Information :
- Full name and contact details (email address, phone number, postal address)
- Company name and designation
- IP address, browser type, device information
- Website usage data and cookies
- Communication records and correspondence
1.2 Sensitive Personal Data or Information :
- Financial information (for payment processing, if applicable)
- Passwords and login credentials
- Project specific technical information and business requirements
- Any other data requiring heightened protection under applicable law
2. Purpose and Legal Basis for Data Collection
We collect and process your personal data only for specified, explicit, and legitimate purposes with your informed consent:
- Responding to service inquiries and quote requests
- Executing project contracts for website, mobile app, or software development
- Providing customer support and technical assistance
- Processing payments and maintaining financial records
- Improving our services and conducting business analytics
- Sending project updates, newsletters, and promotional communications (with your consent)
- Complying with legal obligations under Indian law
- Protecting against fraud and security threats
Data collection is limited to what is reasonably necessary for these purposes in accordance with the data minimisation principle.
3. How We Collect Information
We collect information through the following methods:
- Contact forms and inquiry submissions on our website
- Email communications and business correspondence
- Project consultation meetings and requirement gathering
- Cookies, web beacons, and analytics tools
- Third-party integrations (CRM systems, payment gateways)
- Voluntary information provided during service agreements
4. Consent Mechanism
Your consent is free, specific, informed, unconditional, and unambiguous. By providing your personal data through our website, contact forms, or business communications, you consent to its collection and processing for the purposes stated herein.
You have the right to withdraw your consent at any time by contacting our Grievance Officer. However, withdrawal of consent may affect our ability to provide certain services.
For Sensitive Personal Data or Information, we obtain express written consent via email or signed agreements before collection and processing.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:
- Service Providers: Third-party vendors who assist in website hosting, payment processing, email services, analytics, or CRM systems under strict confidentiality agreements.
- Legal Compliance: When required by law, court order, or government authorities
- Business Transfers: In connection with mergers, acquisitions, or asset sales, with prior notice to you
- Your Consent: With your explicit permission for specific purposes
All third-party processors are contractually bound to maintain data security and confidentiality.
6. International Data Transfers
As we serve clients worldwide, your personal data may be transferred to and processed in countries outside India. We ensure adequate safeguards are in place, including:
- Standard contractual clauses
- Data processing agreements with international clients and vendors
- Compliance with GDPR for EU clients and applicable international data protection laws
You will be informed of cross-border transfers and can choose not to proceed if you do not consent.
7. Data Security Measures
We implement reasonable technical, operational, and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or alteration:
- Encryption of sensitive data during transmission and storage
- Secure servers with firewall protection
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Employee training on data protection practices
While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
8. Data Retention
We retain your personal data only for as long as necessary to full fill the purposes outlined in this policy or as required by law:
- Client project data: Duration of the project plus 5 years for legal and accounting purposes
- Communication records: 3 years from last interaction
- Marketing data: Until you withdraw consent or request deletion
- Financial records: As per applicable tax and accounting regulations in India
Upon expiry of the retention period, we will securely delete or anonymity your personal data.
9. Your Rights as a Data Principal
Under the Digital Personal Data Protection Act 2023 and IT Rules, you have the following rights:
- Right to Access: Obtain a summary of your personal data being processed
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Grievance Redressal: File a complaint with our Grievance Officer or the Data Protection Board of India
- Right to Nominate: Designate another individual to exercise your rights in case of death or incapacity
To exercise these rights, contact our Grievance Officer at info@discoverlogix.com We will respond within the time frame prescribed by law.
10. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyse traffic, and personalise content:
- Essential Cookies: Required for website functionality
- Analytics Cookies: Track website performance and user behavior (Google Analytics)
- Marketing Cookies: Used for promotional campaigns (with your consent)
You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
12. Children’s Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent as required under the Digital Personal Data Protection (DPDP) Act 2023.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or business operations. Any material changes will be notified through email or a prominent notice on our website.
Your continued use of our services after such modifications constitutes acceptance of the updated policy.
14. Grievance Redressal
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact our Grievance Officer at info@discoverlogix.com, we will address your concerns within 30 days.
15. Compliance with Indian Laws
This Privacy Policy is governed by and construed in accordance with the laws of India, including:
- Information Technology Act, 2000
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Digital Personal Data Protection Act, 2023
Any disputes arising from this policy shall be subject to the exclusive jurisdiction of courts in Ahmedabad, Gujarat, India.
Acknowledgment:
By using our website or services, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.