Privacy Policy
Last Updated: 3 September 2026
1. WHO WE ARE
Alchasys Technologies (“Company,” “we,” “us,” “our”) is an IT services company based in Gujarat, India. We provide website/application design and development, SEO, website hosting, IT support services, and CTO As A Service.
This Privacy Policy explains how we as a Data Fiduciary collect, use, store, share, and protect your personal data when you visit our website (www.alchasys.com), use our services, or interact with us.
Data Fiduciary: Alchasys Technologies
Address: Gujarat, India
Email: support@alchasys.com
2. LEGAL FRAMEWORK
We process personal data in accordance with the laws of the Republic of India, specifically:
- The Digital Personal Data Protection Act, 2023 (DPDP Act)
- The Information Technology Act, 2000
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
- All other applicable Indian federal and state data protection regulations.
3. PERSONAL DATA WE COLLECT
We collect and process the following categories of personal data:
Information you provide to us:
- Name, email address, phone number, and business details when you request a quote, place an order, or contact us.
- Content, images, login credentials, and other materials you provide for your projects.
- Payment and billing information.
- Communications between you and us (emails, support tickets, phone calls).
Information we collect automatically:
- IP address, browser type, operating system, and device information.
- Pages visited, time spent, referral source, and browsing behaviour on our website.
- Cookie and similar technology identifiers (see Section 9).
Information from third parties:
- Analytics data from tools such as Google Analytics.
- Payment confirmation from payment processors.
4. HOW AND WHY WE USE YOUR DATA
We process your personal data only where we have a lawful basis to do so under the DPDP Act. The lawful bases we rely on are:
- Consent: Where you have given explicit, clear, and affirmative consent for the processing of your personal data for a specified purpose (e.g., to deliver our services, process payments, or send marketing communications).
- Certain Legitimate Uses: Where you have voluntarily provided your personal data to us for a specific purpose and have not indicated that you do not consent to its use (e.g., reaching out to us for a business inquiry).
- Legal Obligation: To comply with Indian laws and regulations, respond to lawful requests from authorities, and maintain business and tax records as required by the state.
You may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
5. DATA SHARING
We do not sell your personal data. We may share your data with:
- Data Processors: Service providers who help us deliver our services (e.g., hosting providers, payment processors, analytics tools, email platforms). They are bound by valid contracts to protect your data and only act upon our instructions.
- Professional Advisors: Legal, accounting, and auditing professionals where necessary.
- Government & Law Enforcement: Indian government authorities, regulatory bodies, or law enforcement agencies where strictly required by law.
- Business Transfers: A successor entity in the event of a merger, acquisition, or sale of our business assets, with prior notice to you.
6. CROSS-BORDER DATA TRANSFERS
Some of our service providers may process data outside India. Under the DPDP Act, we may transfer personal data outside of India for processing, provided that the destination country has not been specifically restricted by the Central Government of India via official notification, and that appropriate contractual safeguards are in place to ensure your data remains protected.
7. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the specified purposes for which it was collected, or until you withdraw your consent, including:
- Active client data: For the duration of our business relationship plus the legally required timeframe to defend against potential claims.
- Financial and billing records: Up to 8 years as required by the Companies Act, 2013, and applicable tax laws in India.
- Marketing consent records: Until consent is withdrawn.
When data is no longer required for its specified purpose and retention is no longer necessary for legal or business purposes, we securely delete or anonymise it.
8. DATA SECURITY
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (SSL/TLS).
- Access controls limiting data access strictly to authorised personnel.
- Regular security assessments of our systems.
- Secure storage of physical and digital records.
No system is completely secure. In the event of a data breach that affects your personal data, we will notify the Data Protection Board of India, CERT-In (Computer Emergency Response Team - India), and affected individuals without undue delay, as required by Indian law.
9. COOKIES AND TRACKING TECHNOLOGIES
Our website uses cookies and similar technologies to:
- Ensure the website functions properly (essential cookies).
- Analyse website traffic and usage patterns (analytics cookies).
- Remember your preferences (functional cookies).
Essential cookies are necessary for the website to operate. For analytics and functional cookies, we will obtain your consent before placing them. You can manage cookie preferences through your browser settings.
10. YOUR RIGHTS (AS A DATA PRINCIPAL)
Under the DPDP Act, you have the following rights regarding your personal data:
- Right to Information: Request summary details of the personal data we process about you, the processing activities, and the identities of any Data Processors with whom we have shared your data.
- Right to Correction and Erasure: Request the correction of inaccurate or incomplete data, updating of your data, or the deletion of your data where it is no longer necessary for the purpose it was collected (subject to our legal retention obligations).
- Right of Grievance Redressal: The right to readily available means of grievance redressal provided by us.
- Right to Nominate: The right to nominate another individual to exercise your rights in the event of your death or incapacity.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at support@alchasys.com. We may ask you to verify your identity before processing your request.
11. CHILDREN’S PRIVACY
Our website and services are intended for a general business audience and are not directed at children under the age of 18. We do not knowingly collect personal data from children. Under the DPDP Act, processing data of individuals under 18 requires verifiable consent from a parent or lawful guardian, and we strictly prohibit any tracking, behavioural monitoring, or targeted advertising directed at children.
If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at support@alchasys.com so we can delete the information.
12. DIRECT MARKETING
We may send you marketing communications about our services if you are an existing client or have given us your explicit consent. Every marketing communication will include a clear option to unsubscribe. You can opt out at any time by:
- Clicking the unsubscribe link in any marketing email.
- Contacting us at support@alchasys.com.
13. GRIEVANCE OFFICER
In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your concerns regarding the processing of your personal data.
Name: Hritik Chakraborty
Email: support@alchasys.com
Address: Alchasys Technologies, Gujarat, India
The Grievance Officer will acknowledge your complaint within 24 hours and resolve it within timelines prescribed by Indian law.
14. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes in our practices or applicable Indian law. When we make material changes, we will:
- Post the updated policy on our website with a revised “Last Updated” date.
- Notify you by email or through our website where the changes are significant.
15. CONTACT US
If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, contact us at:
Alchasys Technologies
Gujarat, India
Email: support@alchasys.com
Website: www.alchasys.com