Privacy Policy

1. Data Fiduciary Information

Laxhar Tech, a proprietorship registered in India (GST: 27EFMPS4211A1ZM), acts as a Data Fiduciary under the DPDPA 2023. As a Data Fiduciary, we determine the purpose and means of processing your personal data and are responsible for compliance with applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Contact Data: Name, email, phone number when submitting inquiries or subscribing to newsletters.
• Identity Verification: Government-issued IDs for KYC purposes, stored securely and accessed only by authorized personnel.
• Career Data: Resume and qualifications if applying for positions.

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, device information, collected via cookies (see Cookie Policy).
• Usage Data: Pages visited, navigation patterns, collected for website improvement.

3. Purpose and Legal Basis for Processing

Under DPDPA 2023, we process personal data based on:

• Consent: For newsletter subscriptions, marketing communications, and non-essential cookies. You may withdraw consent at any time.
• Certain Legitimate Uses (Section 7, DPDPA): For responding to inquiries you initiate, employment purposes, and compliance with court orders.
• Legal Obligation: KYC verification under Prevention of Money Laundering Act, tax records under Income Tax Act.

4. Your Rights as Data Principal

Under DPDPA 2023, you have the following rights:

• Right to Access (Section 11): Obtain summary of personal data processed and processing activities.
• Right to Correction and Erasure (Section 12): Request correction of inaccurate data or erasure when no longer necessary.
• Right to Grievance Redressal (Section 13): File complaints with our Grievance Officer or the Data Protection Board of India.
• Right to Nominate (Section 14): Nominate any individual to exercise your rights in case of death or incapacity.

To exercise these rights, email [email protected].

5. Data Sharing and Processors

We do not sell your data. We share with:

• Cloud Infrastructure: Hosting providers with servers in India for data residency compliance.
• Analytics: Google Analytics (data may transfer to US under Google's data processing terms).
• Legal Authorities: When required by law, court order, or government request.

6. Cross-Border Data Transfers

Personal data is primarily stored in India. Where transfer outside India is necessary (e.g., Google Analytics), we ensure transfers only to countries notified by the Central Government under DPDPA Section 16, or pursuant to contractual safeguards compliant with applicable law.

7. Data Retention

Data is retained only as long as necessary for the purpose collected:

• Contact inquiries: 3 years (Limitation Act, 1963 - contract claims).
• KYC documents: 5 years post-relationship (PMLA Rules).
• Tax records: 8 years (Income Tax Act, Section 149).
• Newsletter subscriptions: Until consent withdrawn.

8. Children's Privacy

This Website is not intended for persons under 18 years. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately. Parents/guardians may contact us at[email protected].

9. Grievance Redressal

In accordance with IT Act, 2000, IT Rules, 2011, and DPDPA 2023:

If unsatisfied with our response, you may file a complaint with the Data Protection Board of India under DPDPA 2023.

10. Changes to This Policy

We may update this Policy periodically. Material changes will be notified via email or website notice before taking effect.