1 Introduction
Tech Brains ("Company", "we", "us", or "our") is an IT services company based in India providing ERPNext implementation, IT talent outsourcing, and related technology services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or engage with our services.
By accessing our website or submitting your information, you consent to the practices described in this policy.
2 Information We Collect
We may collect the following categories of personal data:
- Identity & Contact Data: Full name, email address, phone number, company name, and designation.
- Enquiry & Communication Data: Service requirements, messages sent via our enquiry form, and communication records.
- Technical Data: IP address, browser type, device information, and pages visited (collected through analytics tools).
- Usage Data: Information about how you interact with our website and services.
We do not collect sensitive personal data (as defined under SPDI Rules 2011) such as financial information, health records, or biometric data unless explicitly required for a specific service and with your prior written consent.
3 How We Use Your Information
We process your personal data for the following legitimate purposes:
- To respond to your enquiries and provide the services requested.
- To schedule consultations and communicate about our offerings.
- To send relevant updates, service information, and follow-ups (you may opt out at any time).
- To improve our website and service quality through analytics.
- To comply with applicable legal and regulatory obligations.
4 Legal Basis for Processing (DPDPA 2023)
Under the Digital Personal Data Protection Act, 2023, we process your personal data based on:
- Consent: When you voluntarily submit information through our contact form or communications.
- Legitimate Use: For processing necessary to provide the services you have requested.
- Legal Obligation: Where required by applicable Indian laws.
5 Data Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your data in limited circumstances:
- With service providers (e.g., hosting, email, CRM) who are bound by confidentiality agreements.
- With prospective consultants or resources when required to match your talent requirement (with your explicit consent).
- With law enforcement or regulatory authorities if required by law.
- In the event of a merger, acquisition, or business transfer (with advance notice to you).
6 Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry data is typically retained for 3 years. You may request deletion of your data at any time by writing to us at rishi@techbrains.in.
7 Your Rights Under DPDPA 2023
As a Data Principal under the DPDPA 2023, you have the right to:
- Access and obtain a summary of your personal data held by us.
- Correct inaccurate or incomplete personal data.
- Erase your personal data (right to be forgotten), subject to legal obligations.
- Withdraw consent at any time without affecting prior lawful processing.
- Nominate a person to exercise rights in the event of your death or incapacity.
- File a grievance with our Data Protection Officer or the Data Protection Board of India.
To exercise any of these rights, please contact us at rishi@techbrains.in.
8 Cookies & Tracking
Our website may use cookies and similar technologies to enhance your browsing experience and analyse site traffic. You can control cookie preferences through your browser settings. Disabling cookies may affect certain features of the website.
9 Data Security
We implement reasonable technical and organisational security measures as required under the IT (SPDI) Rules, 2011, including SSL/TLS encryption, access controls, and data minimisation practices. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10 Links to Third-Party Websites
Our website may contain links to external sites (e.g., WhatsApp, LinkedIn). We are not responsible for the privacy practices of these third-party sites and encourage you to read their respective privacy policies.
11 Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be published on this page with a revised "Last Updated" date. Your continued use of our website after changes constitutes acceptance of the updated policy.
12 Contact & Grievance Officer
For any privacy-related concerns, requests, or grievances, please contact our Grievance Officer. We will acknowledge within 24 hours and resolve within 30 days per Rule 5(9) of the IT (SPDI) Rules, 2011.