Privacy Policy

We collect information you provide directly, data we generate when you use our services, and data from third-party sources. Categories of personal data we may collect include:

• Full name and job title
• Business email address
• Phone and mobile number
• Company name and website URL
• Project requirements and budget range
• IP address and approximate location
• Browser type and OS version
• Pages visited and session duration
• Device and screen resolution data
• Contact form submissions
• Uploaded files or documents
• Referral source (how you found us)

We collect this when you fill out contact forms, request a quote, subscribe to our newsletter, schedule a consultation, or interact with our website or customer support.

Chandak Infotech uses the information we collect for the following legitimate business purposes:

• Respond to inquiries and deliver services
• Send project updates and progress reports
• Process payments and generate invoices
• Improve our website functionality and services
• Send marketing communications (with your consent)
• Analyse usage trends and website behaviour
• Comply with applicable legal obligations
• Prevent fraud, abuse, and security threats
• Personalise your website experience
• Conduct surveys and service research
• Provide ongoing customer support
• Meet our contractual obligations to clients

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Trusted service providers (hosting, email, analytics) under strict data processing agreements
• Payment processors for secure transaction handling
• Law enforcement or government authorities when legally required
• Business transfers during a merger or acquisition, with advance notice
• Professional advisors (lawyers, auditors) bound by strict confidentiality
• With your explicit written consent for any other purpose

All third-party service providers we engage are contractually required to handle your data securely and only for the specific purposes we define.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. Below is a summary of the types of cookies we use:

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality.

Protecting your information is a top priority. We implement comprehensive technical and organisational security measures including:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls and strict permissions
• Regular security audits and vulnerability scans
• Secure development practices (OWASP guidelines)
• Staff data protection training and awareness programs
• Incident response and breach notification procedures
• Two-factor authentication for all internal systems

While we implement robust security measures, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and report any suspected security issues to us immediately.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Our retention principles are:

• Contact and inquiry data: 3 years from last interaction
• Client project data: 7 years (legal and accounting requirements)
• Marketing consent records: until withdrawal plus 1 year
• Website analytics data: 26 months (Google Analytics default)
• Cookie data: as specified per cookie type above
• Support tickets: 2 years after resolution

When your data is no longer required, we securely delete or anonymise it so it can no longer be associated with you.

Depending on your location, you may have the following rights regarding your personal data. We honour these rights promptly and without charge:

To exercise any of these rights, email us at hello@chandakinfotech.com. We will respond within 30 days.

Our website may contain links to third-party websites, plugins, and applications. Clicking those links may allow third parties to collect or share data about you. We are not responsible for their privacy statements. Third-party services we currently integrate include:

• Google Analytics — website traffic analytics
• Meta Pixel — advertising performance measurement
• Google Ads — paid advertising platform
• Tawk.to — live chat and customer support
• Calendly — appointment scheduling
• Nodemailer / SMTP — transactional email delivery
• WhatsApp Business — client communication

We encourage you to review the privacy policies of every third-party service you interact with through our website.

Our services are intended for business professionals and are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16.

If we become aware that we have collected personal information from a child without verifiable parental consent, we will take steps to delete that information immediately. If you believe we may have collected data about a child, please contact us at hello@chandakinfotech.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the Last Updated date at the top of this page
• Post the revised policy on our website immediately
• Notify you via email for material changes (where we hold your email address)
• Display a notice banner on our website for 30 days post-update

Your continued use of our website or services after the effective date of the revised policy constitutes your acceptance of the changes.