Privacy Policy

Version: 2.0  |  Effective Date: 4 March 2026  |  Last Review: 4 March 2026

1. Data Fiduciary Identity

Codesaint Technologies Pvt. Ltd. ("Codesaint", "we", "us") is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Our registered office is at Mahipalpur, New Delhi – 110037. CIN: U72200DL2017PTC321288.

2. Information We Collect

We collect personal data that you provide directly to us, including:

• Contact information: name, email address, phone number, company name
• Service-related data: project requirements, budget preferences, timeline
• Technical data: IP address, browser type, device information (collected automatically)
• Cookie data: browsing behaviour, preferences (see our Cookie Policy)

3. Lawful Purpose for Processing

Under Section 4 of the DPDP Act, 2023, we process your personal data only for lawful purposes:

• To provide, maintain, and improve our services
• To communicate with you about projects and inquiries
• To send service updates and transactional messages
• To comply with legal obligations under applicable Indian laws
• For legitimate business interests where your rights are not overridden

4. Consent

We obtain your free, specific, informed, unconditional, and unambiguous consent before collecting personal data. You may withdraw consent at any time by contacting us or using the Data Rights portal. Withdrawal of consent does not affect the lawfulness of processing done prior to withdrawal.

5. Data Principal Rights (Sections 11–14, DPDP Act 2023)

As a Data Principal, you have the following rights:

• Right to Access (Section 11): Obtain a summary of your personal data and the processing activities
• Right to Correction & Erasure (Section 12): Request correction of inaccurate data, completion of incomplete data, or erasure of data no longer necessary
• Right to Grievance Redressal (Section 13): File a complaint with our Grievance Officer
• Right to Nominate (Section 14): Nominate any person to exercise your rights in case of your death or incapacity

To exercise any of these rights, visit our Data Subject Rights page or email privacy@codesaint.in. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.3) and at rest
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training on data protection practices

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form data is retained for 3 years. Cookie consent records are retained for 5 years.

8. Cross-Border Data Transfer

Your personal data may be transferred to and processed in countries outside India where our service providers operate. Such transfers comply with Section 16 of the DPDP Act and are made only to jurisdictions notified by the Central Government, or under appropriate safeguards.

9. Children's Data

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us for immediate deletion.

10. Grievance Officer

For any concerns regarding data privacy, you may contact our Grievance Officer:

Om Prakash Sharma
Email: privacy@codesaint.in
Phone: +91-11-43791919
Address: B-14, Mansarovar Building, 90 Nehru Place, New Delhi – 110019

11. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this page periodically.

12. Applicable Law

This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.