Privacy Policy

Who we are

Digitechnique ("we" or "us") designs and builds software, apps, websites, online stores and AI systems, and runs search and marketing programmes for businesses in India. For personal data collected through this website and through our own business dealings, we are the Data Fiduciary. That means we decide why and how the data is used, and we are responsible for it.

To contact us about privacy, use the contact form and start your message with "Privacy request". You can also call us on +91 99966 88404.

Which laws apply, and when

The DPDP Act and the DPDP Rules are coming into force in stages. The Rules were notified in November 2025, and most duties for businesses start 18 months after that. Until then, section 43A of the IT Act and the SPDI Rules also apply. We follow both sets of rules now, so this policy is correct before and after the change.

What we collect

What you tell us. When you call us, use our contact form, book a call or apply to the Co-Founder Programme, we collect your name, your business, your phone number and any other contact details you give us. We also collect anything else you tell us, such as your budget and project details. If you become a client, we keep contract, billing, GST and project records too.

What your device tells us. When you visit the site, our servers record technical data such as your IP address, your browser and device type, the pages you open and when. If you agree to analytics or marketing cookies, those tools also record how you use the site. Our Cookie Policy lists each one.

What others tell us. We may receive business contact details from people who refer you to us, from partners we work with, and from public sources such as company websites, company records at the Ministry of Corporate Affairs (MCA) and professional networks.

What we do not ask for. We do not ask for sensitive personal data, such as passwords, bank account or card details, health information or biometric data. Please do not send it through the contact form. If a project needs access to your systems, we agree in writing how that access will work.

Why we use it, and on what basis

The DPDP Act lets us use personal data with your consent, or for certain "legitimate uses" listed in section 7 of the Act. Here is the basis for each use.

• To reply to your enquiry and prepare a quote. Basis: a legitimate use. You gave us the data for this purpose. You can tell us at any time that you do not want us to use it.
• To deliver work, send invoices and look after our clients. Basis: a legitimate use, for the purpose you or your employer gave us the data for, and our legal duties on tax and accounts.
• To review Co-Founder Programme applications. Basis: a legitimate use, for the purpose you gave us the data for.
• To keep the website and our systems secure. Basis: our legal duties, including keeping the logs that the CERT-In Directions and the DPDP Rules require.
• To measure and improve the website, and to measure our advertising. Basis: your consent, given through the cookie banner.
• To send you news about our services. Basis: your consent. Every message tells you how to stop them.
• To meet legal, tax and accounting duties, and to protect our legal rights. Basis: the legitimate uses and exemptions the DPDP Act allows for following the law and for enforcing legal rights and claims.

You do not have to give us any personal data. But without a way to contact you, we cannot reply, and without project details, we cannot give you a quote.

We do not make decisions about you by automated means alone that have a legal or similarly serious effect on you.

Your consent, and how to withdraw it

Where we rely on consent, we ask for it clearly, for a specific purpose, and only for the data we need. You can withdraw your consent at any time, and withdrawing is as easy as giving it. For cookies, use Cookie settings at the bottom of every page. For anything else, use the contact form or call us on +91 99966 88404.

When you withdraw consent, we stop using your data for that purpose within a reasonable time, and we tell our Data Processors to stop too. Withdrawing does not affect anything we did before you withdrew. Once Consent Managers registered with the Data Protection Board of India are available, you may also give, manage and withdraw consent through one of them.

Who we share it with

We share personal data only when we need to:

• Data Processors who run parts of our business for us, such as website hosting, phone and messaging, scheduling, analytics, advertising measurement, accounting and payments. They may use the data only to provide their service to us, under written contracts.
• Professional advisers, such as our lawyers and CAs, who must keep it confidential.
• Government authorities, such as the Income Tax Department, GST authorities, CERT-In or the police, when the law requires it.
• A buyer or successor, if our business is merged, reorganised or sold, under the same protections as this policy.

We do not sell personal data. If you accept marketing cookies, advertising platforms (Google, Meta and LinkedIn) receive data about your visit. You can stop that at any time by switching marketing cookies off in Cookie settings. If your browser sends a Global Privacy Control signal, we treat it as a refusal of marketing cookies.

Transfers outside India

Some of our Data Processors, such as cloud, analytics and advertising services, store or handle data outside India. Section 16 of the DPDP Act allows this, except to countries that the Government of India restricts by notification. We do not transfer personal data to a restricted country, and we follow any stricter Indian law that applies to a particular kind of data. You can ask us where your data is handled.

How long we keep it

• Enquiries that do not become projects: up to 24 months after our last contact.
• Client, contract and billing records: for as long as we work together, then for as long as Indian tax, GST and company law require, usually up to eight years after the end of the financial year they relate to.
• Co-Founder Programme applications that do not go ahead: up to 12 months, unless you ask us to delete them sooner.
• Server and security logs: for the period Indian law requires. Today that is 180 days under the CERT-In Directions. Once the DPDP Rules apply, it is at least one year.
• Analytics and marketing data: for the periods in our Cookie Policy.

When a period ends, or when the purpose is served and no law requires us to keep the data, we delete it or make it anonymous. We ask our Data Processors to do the same.

How we protect it

We use reasonable security safeguards, as the DPDP Act and the SPDI Rules require. These include encryption in transit, access only for the people who need it, logs of who accessed what, backups, systems that are kept updated and monitored, and confidentiality duties for our team and our Data Processors. No system is completely secure, but we work to keep the risk low.

If there is a personal data breach

If a breach affects your personal data, we will tell you without delay. We will explain what happened, the likely effect on you, what we are doing about it and what you can do to protect yourself. We will also report it to the Data Protection Board of India, and report cyber security incidents to CERT-In within six hours, as the law requires.

Your rights

Under the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you, what we do with it and who we have shared it with;
• correction, completion and updating of data that is wrong, incomplete or out of date;
• erasure of your data, unless we still need it for the purpose you gave it for or the law requires us to keep it;
• withdraw consent at any time, as explained above;
• grievance redressal, which means having your complaint about our use of your data handled by us, quickly and fairly;
• nominate another person to use these rights for you if you die or cannot act for yourself.

To use any of these rights, send a request through the contact form and start your message with "Privacy request". You can also call us on +91 99966 88404. We may ask for information to confirm who you are. We aim to reply within one month, and always within the time the law allows. If we cannot do what you ask, we will explain why.

Your duties

Section 15 of the DPDP Act also gives you some duties. When you use your rights, you must follow the law, not pretend to be someone else, not make false or frivolous complaints, and give only true information that can be checked when you ask us to correct or erase data.

Grievance Officer and complaints

Our Grievance Officer answers questions about this policy and handles complaints about how we use personal data. To reach the Grievance Officer, use the contact form and start your message with "Grievance". You can also call us on +91 99966 88404 and ask for the Grievance Officer. We acknowledge every complaint, look into it and resolve it within one month of receiving it.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India. The DPDP Act asks you to use our grievance process first, and we would welcome the chance to put things right.

Children

This website and our services are for businesses and adults. They are not meant for children. Under the DPDP Act, a child is anyone under 18. We do not knowingly collect personal data from children, and we do not track children or show them targeted ads. Before a child's data can be used, the law requires the verifiable consent of a parent or lawful guardian. The same applies to a person with a disability who has a lawful guardian. If we learn that we have a child's data without that consent, we delete it.

Cookies and your choices

We use strictly necessary cookies to run the site, and analytics and marketing cookies only if you agree. You can change your choice at any time through Cookie settings at the bottom of every page. Our Cookie Policy has the details.

This policy in other languages

You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India. Use the contact form and tell us which language you need.

Other websites

Our site links to other websites, such as social networks and government scheme pages. They have their own privacy practices, so please read their policies too.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is significant, we will say so clearly on the site before it takes effect, and we will ask for your consent again where the law requires it.