Privacy Policy

1. Introduction & Compliance Framework

This Privacy Policy outlines how TechHertz ("we", "our" "or "us") collects, stores, processes, and transfers your personal information. We are strictly committed to complying with Indian regulations, including:

• The Information Technology Act, 2000 (IT Act), specifically Section 43A and Section 72A.
• The IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
• The Digital Personal Data Protection Act, 2023 (DPDPA 2023).

2. Collection of Information & Consent

We collect personal information that is necessary to deliver our services, including:

• Contact details: Name, email address, phone number, and physical address.
• Service data: Requirements provided via lead forms and communication history.
• Technical logs: IP addresses, browser types, and access timestamps.

By submitting your details via our website forms or interactive chat assistant, you provide your explicit, specific, and revocable consent to our processing of your personal data as outlined in this policy.

3. Purpose of Processing & Storage Limitation

We process personal data strictly for:

• Fulfilling services, contacting you regarding lead requests, and administering client relationships.
• Improving site security, prevention of DDoS attacks, and system audit logs.

We retain personal data only for as long as necessary to fulfill the purposes of processing or to meet statutory auditing requirements under Indian law.

4. Rights of the Data Principal

In accordance with the Digital Personal Data Protection Act (DPDPA), 2023, you hold the following rights:

• Right to Access & Summary: Request details of your personal data processed by us.
• Right to Correction & Erasure: Rectify inaccuracies or request the complete deletion of your data when it is no longer required.
• Right to Withdraw Consent: Revoke consent at any time. Processing before withdrawal remains valid.
• Right to Grievance Redressal: Register complaints or seek resolution for any violations of your data rights.

5. Security Practices (Section 43A Compliance)

We implement industry-grade technical and organizational measures (including encryption of sensitive fields, secure JWT session verification, token rotation, and strict access controls) to prevent unauthorized access, alteration, or leaks.

6. Grievance Officer & Data Protection Officer (DPO)

In accordance with Rule 5(9) of the SPDI Rules 2011 and the DPDPA 2023, we have appointed a Grievance Officer. For queries, access requests, or complaints, please reach out to:

Attention: Grievance Officer / DPO, TechHertz
Email: info@techhertz.com
Address: Alwar (Raj.) 301001, India
Timeline: All grievances will be acknowledged within 36 hours and resolved within 15 days of receipt.