Privacy policy

Who we are

Aitish Technologies (OPC) Private Limited, trading as Aitishtech, is the Data Fiduciary for personal data collected through aitishtech.com and through direct enquiries by email or telephone. We are registered in India and based at HAL, Bengaluru 560093, Karnataka, India.

This policy is written to meet the requirements of India's Digital Personal Data Protection Act, 2023 (the DPDP Act). Terms such as Data Principal (you), Data Fiduciary (us) and Data Processor are used as defined in that Act.

What we collect

• Information you send us. If you contact us by email, telephone or through our enquiry form, we receive whatever you choose to include — typically your name, company, role, contact details and a description of your requirement.
• Recruitment data. If you apply for a role, we receive your CV and any supporting information you send.
• Technical data. Our hosting provider records standard server information such as IP address, browser type and requested URL, for security and operational purposes.

We do not collect personal data from children, and this site is not directed at them. We do not knowingly process the personal data of anyone under 18 without verifiable parental consent as required by section 9 of the DPDP Act.

Why we process it, and on what basis

Under the DPDP Act, personal data may be processed only for a lawful purpose for which you have given consent, or for certain legitimate uses. Our purposes are:

• Responding to your enquiry — your consent, given when you contact us.
• Delivering and supporting services we have been engaged to provide — performance of our contract with you or your employer.
• Considering job applications — your consent, given when you apply.
• Meeting legal, tax and accounting obligations — compliance with law.

We do not sell personal data. We do not share it with third parties for their own marketing, and we do not use it for automated decision-making or profiling.

Withdrawing consent

Where we rely on your consent, you may withdraw it at any time, and withdrawing it is as easy as giving it — email [email protected] and say so. Withdrawal does not affect processing carried out before you withdrew, and we may still keep what the law requires us to keep.

Who else processes your data

We use a small number of Data Processors, each engaged under contract and only for the purposes above:

• Cloudflare — website hosting and delivery.
• Google — our enquiry form is currently hosted on Google Forms, so submissions are processed by Google under their own terms in addition to this policy. If you prefer not to use it, email or telephone us directly.
• Microsoft — our business email.

Some of these providers operate infrastructure outside India. Transfers are made in accordance with section 16 of the DPDP Act and are limited to what is necessary to run the service.

How long we keep it, and how to have it deleted

You can ask us to delete your personal data at any time, and we will. Write to [email protected] and say what you want removed. That is the reliable route, and it does not depend on you waiting for anything.

Beyond that, we keep personal data only while it still serves the purpose it was given for. Enquiries are kept while they remain commercially relevant. Records relating to an engagement are kept for the period our contract with you and the law require — tax and accounting rules set that floor, not us. Job applications are kept while the role or a comparable one is live.

Where the DPDP Act requires erasure — you withdraw consent, or the purpose is no longer being served — we erase the data unless the law requires us to retain it. We deliberately do not publish a fixed timetable for that, because a date we did not honour would be a worse promise than none: your request is the reliable trigger, and it always works.

Keeping it secure

We apply reasonable security safeguards to prevent personal data breaches, including access control, encryption in transit, and limiting access to those who need it. If a breach occurs, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.

Your rights as a Data Principal

Under the DPDP Act you have the right to:

• Access — obtain a summary of the personal data we process about you and the processing activities undertaken.
• Correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, and data erased where it is no longer needed.
• Grievance redressal — raise a grievance with us, using the contact below, before approaching the Data Protection Board of India.
• Nominate — nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

You also have a duty under the Act not to make a false or frivolous complaint and to provide authentic information when exercising the right to correction.

Grievance officer

Questions, requests and grievances about this policy or about how we handle your personal data go to:

Ashok Kamat, Grievance Officer
Aitish Technologies (OPC) Private Limited
HAL, Bengaluru 560093, Karnataka, India
[email protected] · +91 63600 21176

We aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

If you are in the EU or UK

Where we process the personal data of individuals in the European Economic Area or the United Kingdom — which can arise on a European rollout engagement — we do so as processor on our client's instructions, or as controller under the lawful bases in Article 6 of the GDPR. Data subject rights under the GDPR can be exercised using the same contact details above.

Cookies and tracking

This website sets no advertising or tracking cookies and runs no analytics. Fonts are self-hosted rather than loaded from a third-party font service, so visiting this site does not disclose your visit to an external provider.

Changes

If this policy changes materially we will update the date at the top of this page and, where the DPDP Act requires it, notify you directly.