Privacy Policy

1. Who we are

This Privacy Policy explains how Cloudsect Solutions ("Cloudsect", "we", "us") collects, uses and protects personal data when you visit this website, contact us, or engage us for services. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.

2. Data we collect

• Information you give us: your name, work email, phone number, company and the contents of messages you send through our contact form, email or phone.
• Information collected automatically: IP address, browser type, device information, pages visited and referral source, collected through server logs and cookies (see our Cookie Policy).
• Client project data: data we process on behalf of clients under a contract. That processing is governed by the contract with the client, who remains the Data Fiduciary.

3. How we use your data

• To respond to enquiries and provide proposals and services you request.
• To send newsletters where you have subscribed; every email includes an unsubscribe link.
• To operate, secure and improve this website.
• To comply with legal obligations, including tax and accounting records.

We do not sell personal data, and we do not use it for automated decisions that produce legal effects for you.

4. Legal basis and consent

We process personal data on the basis of your consent (for example when you submit the contact form or subscribe to our newsletter) or for legitimate uses permitted under the DPDP Act, such as complying with law. You may withdraw consent at any time by writing to us; withdrawal does not affect processing already carried out.

5. Sharing

We share personal data only with service providers that help us operate — such as hosting, email delivery and analytics providers — under contracts that require them to protect it, or where disclosure is required by law. Some providers may store data outside India; where they do, we take reasonable steps to ensure equivalent protection and comply with any restrictions notified by the Government of India.

6. Retention

Enquiry and correspondence data is kept for up to 24 months after our last interaction, unless a contract or law requires longer. Newsletter data is kept until you unsubscribe. Server logs are retained for up to 180 days for security purposes.

7. Security

We use encryption in transit, access controls, least-privilege permissions and regular security testing to protect personal data. More detail is available on our Security page. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India as required by law.

8. Your rights

• Access a summary of the personal data we hold about you.
• Correct, complete or update inaccurate data.
• Erase data that is no longer needed for the purpose it was collected.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India.

9. Contact and grievances

For any privacy request or complaint, email contact@cloudsect.com with the subject "Privacy Request", or write to: STPI-Incubation Center, UPTRON Building, Lucknow, 226010. We aim to respond within 30 days.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be highlighted on this website.