At AzureRift, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our computer consultancy, software development, and IT facilities management services.

We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules) and the Digital Personal Data Protection Act, 2023 (DPDP Act). By using our services or accessing our website, you consent to the practices described in this policy.

1. Information We Collect

We may collect the following types of personal data and information:

• Identity Data: Name, designation, company name, and professional title.
• Contact Data: Email address, phone number, postal address, and emergency contact details.
• Technical & Usage Data: IP address, browser type, device ID, operating system, session identifiers, cookie data, and website interaction logs.
• Professional & Employment Data: Resumes, qualifications, work history, and references (for recruitment purposes).
• Project Data: Information provided during consultancy engagements, including business requirements, system specifications, and technical documentation.
• Communication Data: Queries, feedback, support tickets, and correspondence with our team.
• Sensitive Personal Data (where explicitly consented): We do not generally collect sensitive personal data (such as financial information, passwords, or health data) unless required for a specific project and with your explicit consent.

2. How We Collect Information

We collect information through:

• Direct Interactions: When you fill out forms on our website, correspond with us via email or phone, request a consultation, or enter into a service agreement.
• Automated Technologies: As you navigate our website, we may automatically collect technical data about your equipment, browsing actions, and patterns using cookies and similar technologies.
• Third Parties: We may receive information from business partners, analytics providers, or recruitment platforms.

3. Purpose of Collection and Usage

We use your personal data only for legitimate business purposes, including:

• To provide computer consultancy, IT facilities management, and software development services as outlined in our MOA.
• To respond to your inquiries, requests, or consultation needs.
• To administer and protect our business and website (including troubleshooting, data analysis, testing, and security monitoring).
• To manage our relationship with you, including notifying you about changes to our terms or policies.
• To improve our website, services, and client experience.
• To comply with legal obligations, regulatory requirements, or lawful government requests.
• To send you relevant marketing communications (only where you have provided consent).

We do not use your personal data for purposes incompatible with those described above.

4. Lawful Basis for Processing

Under the DPDP Act, we process your personal data based on:

• Consent: Where you have explicitly agreed to the processing (e.g., for marketing communications or collection of sensitive data).
• Legitimate Uses: For purposes such as fulfilling your specific request, performing a contract, complying with legal obligations, or for employment-related processing where permitted.

5. Disclosure of Information

We may share your personal data with:

• Our Team: Employees and contractors who require access to perform their roles (subject to confidentiality obligations).
• Service Providers: Third-party vendors who assist us in operating our business (e.g., cloud hosting providers, analytics tools, email services). These providers are contractually bound to protect your data.
• Professional Advisors: Lawyers, auditors, and insurers where necessary.
• Government Authorities: Where required by law, regulation, or legal process (e.g., court orders, government requests).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Cross-Border Data Transfers

As an IT consultancy serving clients in India and abroad, your personal data may be transferred to, and processed in, countries outside India where our team members or service providers are located. Where such transfers occur, we ensure:

• The transfer is necessary for the performance of our services or contract with you; and
• Appropriate safeguards are in place to protect your data in accordance with the DPDP Act and applicable laws.

By engaging our services, you consent to such transfers where necessary.

7. Data Storage and Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• To provide you with services and maintain your account/relationship with us.
• To comply with legal, tax, or regulatory obligations.
• To establish, exercise, or defend legal claims.

Our retention periods are determined based on the nature of the data and the purpose of collection. When data is no longer required, we securely delete or anonymize it.

8. Security Practices

We implement reasonable security practices and procedures to protect your personal data from unauthorized access, loss, disclosure, or destruction. These include:

• Encryption of data in transit and at rest where appropriate.
• Access controls and authentication mechanisms.
• Regular security audits and monitoring.
• Staff training on data protection and confidentiality.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Under the DPDP Act, you have the following rights regarding your personal data:

• Right to Access: Request confirmation of whether we process your data and obtain a copy.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where the purpose has been fulfilled or consent is withdrawn.
• Right to Withdraw Consent: Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
• Right to Grievance Redressal: Lodge a complaint regarding our handling of your data.
• Right to Nominate: Nominate a representative to exercise your rights in the event of incapacity or death.

To exercise these rights, please contact our Grievance Officer using the details in Section 12 below.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, analyze site traffic, and improve performance. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential Cookies: Necessary for website functionality (e.g., security, session management).
• Analytics Cookies: To understand how visitors interact with our site (e.g., Google Analytics).
• Functional Cookies: To remember your preferences.

You can control cookies through your browser settings. Disabling cookies may affect website functionality. By continuing to use our website, you consent to our use of essential cookies. For non-essential cookies, we seek your explicit consent via a cookie banner.

11. Third-Party Links

Our website may contain links to third-party websites, plugins, or services (e.g., social media platforms, cloud providers). Clicking on those links may allow third parties to collect or share data about you. We do not control these websites and are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party sites you visit.

We acknowledge that you have the right to lodge a complaint with the Data Protection Board of India if you are not satisfied with our response.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. Any updates will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Your continued use of our services after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• AzureRift
• Email: support@azurerift.in
• Phone: +91 9083080448
• Website: https://azurerift.in