Privacy Policy

1. Introduction

KAUSTYA INFOTECH PRIVATE LIMITED ("KAUSTYA", "we", "our", or "us") is committed to protecting the privacy and security of every visitor, client, and stakeholder who engages with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit www.kaustya.com (the "Site") or engage our products and services.

By using the Site or our services, you consent to the practices described in this Policy. If you do not agree, please discontinue use of the Site and our services.

2. Information We Collect

We collect information in the following ways:

2.1 Information you provide directly

• Contact details: name, email, phone number, company name, job title.
• Enquiry content: messages, project briefs, and any files or attachments you share.
• Account information: for clients using our platforms — login credentials, billing information, and preferences.
• Career applications: resume, cover letter, employment history, and educational qualifications.

2.2 Information collected automatically

• IP address, browser type, operating system, referring URL, pages visited, and time spent on the Site.
• Device identifiers, screen resolution, and language preferences.
• Cookies, pixel tags, and similar tracking technologies (see Section 6).

2.3 Information from third parties

• Publicly available business information from directories, LinkedIn, or industry publications.
• Referral information from clients, partners, or third-party service providers.

3. How We Use Information

We use collected information for the following purposes:

• To respond to enquiries, provide quotes, and deliver requested services.
• To manage client relationships, invoicing, and project delivery.
• To improve, personalise, and secure the Site and our services.
• To send service updates, newsletters, or marketing communications (only where permitted).
• To comply with legal obligations, respond to lawful requests, and enforce our agreements.
• To conduct research, analytics, and business planning.

4. Legal Basis for Processing

Where applicable law requires a legal basis, we rely on one or more of the following:

• Consent: where you have provided explicit consent for a specific purpose.
• Contract: where processing is necessary to perform a contract with you or to take pre-contract steps at your request.
• Legal obligation: where we must process data to comply with applicable law.
• Legitimate interest: where processing is necessary for our legitimate business interests, balanced against your rights.

5. Sharing & Disclosure

We do not sell, rent, or trade personal information. We may share information with:

• Service providers: trusted vendors who help us operate our business — cloud hosting (AWS, Azure, GCP), CRM platforms, payment processors, and communication tools — under strict confidentiality obligations.
• Business partners: where necessary to deliver a jointly offered solution, with your knowledge.
• Regulators & authorities: where required by law, court order, or governmental request.
• Successors: in connection with a merger, acquisition, restructuring, or sale of assets, subject to equivalent protections.

6. Cookies & Tracking

The Site uses cookies and similar technologies to remember your preferences, analyse traffic, and improve user experience. For details on the types of cookies used and how to manage them, please see our Cookie Policy.

7. Data Security

We implement industry-standard technical and organisational safeguards, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Role-based access controls and multi-factor authentication.
• Regular vulnerability assessments and secure development practices.
• ISO-certified processes for information security management.
• Incident response and breach notification procedures.

No method of transmission or storage is 100% secure. We strive to protect your information but cannot guarantee absolute security.

8. Data Retention

We retain personal information only for as long as needed to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. When information is no longer required, we securely delete or anonymise it.

9. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your information ("right to be forgotten"), subject to legal retention requirements.
• Restrict or object to certain processing activities.
• Withdraw consent at any time where processing is based on consent.
• Data portability — receive your data in a structured, machine-readable format.
• Lodge a complaint with the Data Protection Board of India or an applicable regulator.

To exercise any of these rights, please contact us at md@kaustya.com. We will respond within the timeframe required by applicable law.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us immediately and we will delete it.

11. International Data Transfers

We may transfer, store, and process information in countries other than your own. Where such transfers occur, we implement appropriate safeguards, including standard contractual clauses, to ensure the same level of protection.

12. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before providing any personal information.

13. Policy Changes

We may update this Privacy Policy periodically. Material changes will be notified via a prominent notice on the Site or by email where appropriate. The "Last updated" date at the top indicates the most recent revision.

14. Contact Us

For any questions, requests, or concerns regarding this Privacy Policy or your personal information, please contact our Grievance Officer: