Privacy Policy
How we collect, use and protect personal data, and how to exercise your rights under the DPDP Act.
This Privacy Policy explains how Dataflax ("Dataflax", "we", "us") collects, uses, shares and protects personal data when you visit our website, contact us, or use our data, compliance and security services. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and, where applicable, other data protection laws such as the GDPR.
Who we are
Dataflax is the Data Fiduciary for personal data we collect through this website and in the course of managing our customer relationships. For data we process on behalf of customers under a services agreement — for example, during a DPDP compliance review or a penetration test — we act as a Data Processor and follow our customer's instructions.
You can contact us about privacy at the email address listed on our Contact page.
Personal data we collect
- Information you give us: your name, work email, phone number, organisation, enquiry type and the message you send through our contact form or by email, phone or WhatsApp.
- Account and contract information: billing contacts, invoicing details and correspondence when you become a customer.
- Technical information: IP address, browser type, device information, pages viewed and referring URLs, collected through server logs and essential cookies.
We do not intentionally collect personal data from children through this website.
Why we use your data
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry or quote request | Data you voluntarily provide for that purpose / consent |
| Delivering contracted services and invoicing | Performance of our agreement and legitimate uses permitted by law |
| Sending occasional updates about our services | Consent, which you can withdraw at any time |
| Keeping our website secure and preventing misuse | Legitimate uses and our legal obligation to maintain security safeguards |
| Complying with tax, accounting and legal requirements | Compliance with law |
Sharing your data
We do not sell personal data collected through this website. We share it only with service providers who help us operate — such as hosting, email and accounting providers — under contracts that require them to protect it and use it only on our instructions, and with authorities where the law requires us to.
How long we keep it
We keep enquiry data for up to 24 months after our last interaction unless you become a customer, and customer records for as long as our contract runs plus the period required by tax and company law. Security logs are retained for at least one year, as required by the DPDP Rules. When data is no longer needed, we erase it or make it anonymous.
Your rights
Subject to the law, you can ask us to:
- give you a summary of the personal data we hold about you and who we have shared it with;
- correct, complete or update inaccurate data;
- erase data we no longer need;
- withdraw consent you have given — as easily as you gave it;
- nominate someone to exercise your rights in the event of your death or incapacity.
To make a request or raise a grievance, contact us using the details on our Contact page. We will acknowledge your request promptly and respond within 30 days, and in any case within the 90-day period permitted by the DPDP Rules. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Security
We protect personal data with safeguards appropriate to the risk, including encryption in transit, access controls, logging and monitoring, regular backups and periodic security testing. If a personal data breach affects you, we will notify you and the Data Protection Board as required by law.
Cookies
This website uses only cookies that are strictly necessary for it to function, such as a session cookie used by our contact form and administration area. We do not use advertising or cross-site tracking cookies.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Where changes are significant, we will notify you through the website or by email.