Privacy Policy & Data Protection

1. Introduction & Corporate Overview

This Privacy Policy governs the manner in which Padma Technologies ("Company", "we", "our", or "us"), having its registered and operating offices in Chhattisgarh, India, collects, uses, maintains, protects, and discloses personal and technical data collected from users, visitors, and corporate clients ("User", "you") of the website https://padmatechnologies.com and all related IT services.

We operate in strict compliance with the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection (DPDP) Act, 2023, and recognized global privacy principles including the General Data Protection Regulation (GDPR) for our international clients.

2. Information We Collect

We collect information to provide high-quality technological services, process business inquiries, and ensure server infrastructure reliability:

A. Information You Voluntarily Provide

• Contact & Identification Data: Full name, professional email address, telephone/WhatsApp number, designation, and company/organization name provided via quotation inquiry forms, contact forms, or direct correspondence.
• Project Specifications: Business requirements, scope documents, digital assets, branding guidelines, and server/hosting credentials shared voluntarily during project initiation.
• Billing & Transaction Information: Tax identification numbers (GSTIN), billing addresses, payment milestone receipts, and purchase records. (Note: We do not store sensitive credit card numbers or UPI PINs on our servers; payments are processed securely through certified third-party payment gateways).

B. Automatically Collected Technical Data

• Server Log Files: IP addresses, browser vendor and version, device type, operating system, referring URLs, access timestamps, and page interaction metrics.
• Performance & Telemetry Data: Page load speeds, network latency metrics, and error logs collected to maintain optimal website availability and firewall protection.

3. How We Use Collected Information

Padma Technologies processes collected personal and operational data for lawful purposes only, including:

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user navigation and assess traffic patterns. A cookie is a small data file stored on your computer or mobile device.

• Strictly Necessary Cookies: Essential for secure login sessions, load balancing, and CSRF token protection.
• Analytics Cookies: Anonymized tools (such as Google Analytics) to understand visitor volume, popular service offerings, and bounce rates.
• Preference Cookies: Storing temporary UI settings (e.g. font scale, form cache) for an uninterrupted browsing experience.

You can instruct your web browser to refuse all cookies or notify you when a cookie is being sent. However, certain dynamic interactive elements on our website may not function optimally without essential cookies.

5. Data Sharing, Confidentiality & Third Parties

We do NOT sell, rent, trade, or monetize your personal or business data under any circumstance.

We only share information with trusted third-party service providers who assist us in operating our digital infrastructure, subject to strict confidentiality agreements:

• Cloud & Data Center Providers: Tier-3/4 data center partners (Hostinger Cloud, AWS, Google Cloud) hosting server instances with encrypted storage.
• Payment Processors: RBI-licensed payment gateways (Razorpay, Paytm, Cashfree) adhering to PCI-DSS Level 1 compliance standards.
• Communication Integrations: Official WhatsApp Business API and transactional SMTP mail providers to deliver project updates.
• Legal Authorities: We may disclose information if required to do so by law or in response to valid legal requests by public authorities (e.g. court order or government subpoena).

6. Security Architecture & Encryption Standards

Padma Technologies implements comprehensive physical, electronic, and procedural safeguards to protect your personal data from unauthorized access, accidental alteration, disclosure, or destruction:

• Transport Layer Security (TLS/SSL): 256-bit encryption on all data transmitted between your browser and our servers.
• Firewall & DDoS Hardening: Network-level web application firewalls (WAF), automated rate limiting, and intrusion detection systems.
• Access Controls: Strict role-based least-privilege administrative access controls with SSH key authorization and multi-factor authentication (MFA).
• Confidential Client Environments: Staging and development environments are segregated from production servers, ensuring client credentials remain isolated.

7. Data Retention Policy

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, execute project contracts, resolve billing disputes, and comply with mandatory legal, tax, and accounting retention periods (typically up to 7 years for financial records under Indian commercial law). Temporary staging credentials and diagnostic log files are purged regularly within 90 days of project deployment.

8. Your Privacy Rights & Choices

Under applicable data protection frameworks (including India's DPDP Act 2023 and the GDPR), you have specific statutory rights:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal records.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where retention is no longer legally required.
• Right to Withdraw Consent: You may withdraw your consent for future marketing communications at any time.

To exercise any of these rights, please email our grievance desk at amit.chaubey@nabhyasolutions.com. Requests will be acknowledged and addressed within thirty (30) business days.

9. Children's Privacy Protection

Our website and IT services are intended solely for businesses, professionals, and adults over eighteen (18) years of age. Padma Technologies does not knowingly solicit or collect personal identification information from children under 18. If you believe your child has submitted personal details on our website, please notify us immediately and we will promptly remove such records.

10. Changes to This Privacy Policy

Padma Technologies reserves the right to amend or update this Privacy Policy at our discretion to reflect technical enhancements, service changes, or statutory amendments. When updates are published, the "Last Updated" date at the top of this document will be modified accordingly. We encourage users to frequently review this page to stay informed about our data security practices.

11. Grievance Redressal & Contact Details

If you have any questions, clarifications, grievances, or feedback concerning this Privacy Policy, please reach out to our official Grievance Desk: