Codesaint Technologies

Privacy Policy

Codesaint Technologies Pvt. Ltd. (“Codesaint”, “we”, “us”) respects your privacy. This policy explains what information we collect through this website and how we use it.

Information we collect

When you submit a contact form, audit request, or message us on WhatsApp, we collect the information you provide — typically your name, business name, phone or WhatsApp number, email, website URL, and the details of your enquiry. This website does not currently run any third-party analytics or tracking scripts.

Cookies

This site does not set advertising or third-party tracking cookies. Any cookies in use are strictly limited to what's needed for the site to function. If that changes — for example, if we add analytics in future — we will update this policy first.

Compliance with India's Digital Personal Data Protection Act, 2023

We process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA). We collect only the data you knowingly provide for a stated purpose (responding to your enquiry, preparing a requested audit, or delivering an engaged service), do not use it for any other purpose without your consent, and will honour requests to access, correct, or erase your personal data to the extent required by law. To exercise these rights, contact us using the details below.

Our legal basis for processing

  • Your consent — for enquiry and audit forms. You give it with the checkbox on the form, we record which version of this notice you agreed to and when, and you may withdraw it at any time as easily as you gave it (DPDP s.6(6) / GDPR Art. 7(3)). Withdrawal does not affect processing already carried out.
  • Performance of a contract — to deliver a service you have engaged us for (GDPR Art. 6(1)(b)).
  • Legitimate interests — keeping our systems secure and available, including server logs retained for 90 days (GDPR Art. 6(1)(f)).
  • Legal obligation — where tax, accounting, or other statutory record-keeping requires us to retain records (GDPR Art. 6(1)(c)).

We do not carry out automated decision-making or profiling, and we do not sell personal data.

Who else processes your data, and where

We use a small number of service providers who process data only on our instructions and under contract:

  • Cloudflare, Inc. (USA) — CDN, DNS, and TLS termination for all of our sites.
  • OVH Hosting (Canada) — the server that runs our helpdesk at support.codesaint.in.
  • Microsoft (Microsoft 365) — email.
  • Our payment provider, for online payments.

Because some of these operate outside India and the EEA, transfers rely on the safeguards required by GDPR Chapter V — Canada holds a partial adequacy decision for commercial organisations, and US transfers rely on Standard Contractual Clauses — and on DPDP s.16, under which the Government may restrict specified destinations. We keep a register of these providers and review it quarterly.

How we use it

We use the information you provide solely to respond to your enquiry, prepare the audit report you requested, or deliver the service you've engaged us for. We do not sell or rent your information to third parties.

Data retention

We set a period for each kind of data rather than keeping it indefinitely, and we delete automatically when it expires:

  • Enquiry and audit-request details — 24 months from last contact.
  • Support tickets — 36 months after the ticket is closed.
  • Server and application logs — 90 days.
  • Client records — for the life of the engagement, then as long as tax and accounting law requires.

Grievance Officer

In accordance with s.13 of the Digital Personal Data Protection Act, 2023, data-related complaints and grievances can be directed to the Grievance Officer, Codesaint Technologies Pvt. Ltd., at privacy@codesaint.in. We respond within 30 days.

If you are not satisfied with our response you may complain to the Data Protection Board of India. If you are in the EU or UK, you may instead lodge a complaint with your local supervisory authority (GDPR Art. 77).

To exercise any of your rights — access, correction, erasure, portability, or withdrawal of consent — use our data request page.

Contact

For questions about this policy or to request access to or deletion of your data, email contact@codesaint.in.