Privacy Policy
01 Introduction
Welcome to Octech (Octecxh Digital Labs Pvt. Ltd.) ("we", "us", "our"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or interact with our services.
This policy is compliant with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian regulations.
We process your personal data only when you actively provide it to us with your consent, or as otherwise required by law. Mere browsing of this website does not constitute consent to personal data processing.
02 Information We Collect
We collect the following categories of personal data solely for the purposes stated below:
- Contact details: Name, email address, phone number, company name (collected via contact form, when you voluntarily submit them)
- Technical data: IP address, browser type, device information, usage analytics (collected via cookies, with your consent)
- Communication data: Messages and queries shared through our contact forms or email
03 Purpose and Legal Basis for Processing
We process your personal data only for specific, stated purposes. We do not use your data for any purpose beyond what you consented to:
| Data Collected | Purpose | Basis |
|---|---|---|
| Name, Email, Phone, Company | Responding to your project enquiry | Your explicit consent at form submission |
| Email address (newsletter) | Sending marketing updates and newsletters | Your explicit opt-in consent at subscription |
| IP, browser, analytics data | Improving site performance | Your consent via cookie preferences |
| Contact form data | Preventing fraud and ensuring compliance | Legitimate interest / legal obligation |
04 Cookies and Tracking
We use cookies to enhance site functionality, analyse performance, and personalise user experience. Non-essential cookies (analytics, advertising, functionality) are only activated after you provide explicit consent via our Cookie Preferences banner. You may update your preferences at any time.
Please refer to our full Cookie Policy for detailed information.
05 Data Retention
We retain your personal data only as long as necessary for the stated purpose:
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 12 months from date of submission |
| Newsletter subscriber data | Until unsubscription + 6 months |
| Analytics / cookie data | 24 months |
| Legal / compliance records | As required by applicable law (up to 7 years) |
Once the retention period expires, your data is securely deleted or anonymised.
06 Data Sharing and Disclosure
We may share your data with:
- Third-party service providers acting as Data Processors on our behalf (e.g., Google Analytics for website analytics, email marketing platforms for newsletters, CRM tools for enquiry management). All processors are bound by Data Processing Agreements and are required to process data only per our instructions.
- Legal authorities, if required by law or court order.
- Successor entities, in the event of a business merger, acquisition, or restructuring.
We do not sell, rent, or trade your personal data to any third party for commercial purposes.
07 Data Security
We implement SSL encryption, secure servers, access controls, and periodic security reviews to protect your personal data. While we take all reasonable precautions, no digital system is entirely immune to risk. In the event of a data breach that is likely to cause harm to Data Principals, we will notify the affected individuals and the Data Protection Board of India as required under the DPDP Act.
08 Your Rights Under the DPDP Act, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:
- Right to access information (Section 11): You may request a summary of the personal data we hold about you and the purposes for which it is being processed.
- Right to correction and erasure (Section 12): You may request correction of inaccurate or incomplete data, or erasure of data that is no longer necessary for the stated purpose or where consent has been withdrawn.
- Right to grievance redressal (Section 13): You may raise a complaint with our Grievance Officer (details in Section 12). If unresolved, you may escalate to the Data Protection Board of India.
- Right to nominate (Section 14): You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.
- Right to withdraw consent: You may withdraw your consent for data processing at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact our Grievance Officer at grievance@octech.in (see Section 12) or submit a self-serve request through our Data Rights Request form.
09 Protection of Children's Data
We do not knowingly collect or process personal data of individuals under the age of 18, as specified under the Digital Personal Data Protection Act, 2023. Processing data of minors requires verifiable parental or guardian consent. If we discover that personal data of a person under 18 has been collected without verifiable parental consent, we will delete it promptly.
If you are a parent or guardian and believe we have inadvertently collected data about a minor, please contact us immediately at grievance@octech.in.
10 Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices. We recommend reviewing the respective privacy policies of any third-party sites you visit.
11 International Data Transfers
We are an India-based entity and process your data primarily within India. In limited cases, certain third-party tools or processors may transfer data to other jurisdictions. We ensure that adequate contractual protections are in place for such transfers, consistent with DPDP Act provisions and any rules/notifications issued by the Central Government on cross-border data transfer.
We periodically assess whether our processing volumes and risk profile may require treatment as a Significant Data Fiduciary under applicable DPDP notifications. Where such obligations apply, we will implement the mandated controls, including Data Protection Impact Assessments (DPIAs), independent data audits, and in-house Data Protection Officer governance.
12 Grievance Officer
In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address any privacy-related concerns:
- Grievance Officer: Kundan B.
- Designation: Data Protection Officer / Grievance Officer
- Email: grievance@octech.in
- Address: Octecxh Digital Labs Pvt. Ltd., 2nd Floor, Arun Arch, 160, 9th Cross Rd, Indiranagar 1st Stage, Bengaluru, Karnataka 560038
- Response Time: Acknowledgement within 48 hours; Resolution within 30 days
If your grievance is not resolved within 30 days, you may escalate the matter to the Data Protection Board of India once it is constituted and operational.
13 Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in law, technology, or our business practices. The updated version will always be available at https://octech.in/privacy-policy. We encourage you to review this page regularly.
14 Contact Us
For any questions or requests regarding this Privacy Policy:
- Email: business@octech.in
- Grievance Email: grievance@octech.in
- Entity: Octecxh Digital Labs Pvt. Ltd., Bengaluru, India