Privacy Policy

GDF Technologies ("we", "us", "our") operates the website gdftechnologies.in. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our Site or contact us for services.

We are committed to protecting your privacy in compliance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 applicable in India.

By using our Site or submitting your information through our project inquiry form, you consent to the practices described in this Privacy Policy.

We collect only the minimum information necessary to respond to your project inquiry and deliver our services. We do not collect sensitive personal data such as bank account numbers, national IDs, or passwords.

We collect personal data through our website's Project Requirement Builder Form (routed directly to us via WhatsApp), and through direct communication with you (WhatsApp, Telegram, email) while we manage and support your project.

We do not collect data through any of the following:

• Cookies or browser-based tracking
• Analytics platforms (e.g. Google Analytics, Hotjar)
• Advertising networks or retargeting pixels
• Automated background data collection or scraping
• Server-side session logging tied to personal identity

We use the personal information you provide solely for these purposes:

• To respond to your project inquiry and discuss your requirements
• To prepare and send a project estimate or proposal
• To communicate with you throughout a project engagement
• To send project updates, delivery notifications, or support messages
• To manage billing, EMI schedules, server renewals, and related payment reminders

We will never use your information to send unsolicited marketing, sell your data, profile you for advertising, or share your data with data brokers.

Your browsing activity on our Site is not tracked, stored, or analyzed by us in any form. Third-party services embedded in our Site (such as Google Fonts and cdnjs) may make network requests governed by their own privacy policies — see Section 06.

Our Site uses the following third-party services strictly for functionality — not advertising or tracking. Each operates under its own privacy policy:

GDF Technologies is not responsible for the data practices of these third-party services.

Your name, contact details, and project information — including pricing and payment status — may be accessed by GDF Technologies' own staff members who are directly involved in delivering, managing, or supporting your project. This is internal use by our own team, not third-party sharing, and all staff are bound by confidentiality obligations equivalent to those in our Terms & Conditions.

Your data may be disclosed to parties outside GDF Technologies only in these strictly limited circumstances:

• Legal obligation — if required by law, court order, or a valid request from a government authority under Indian law.
• Business protection — to protect the rights, safety, or property of GDF Technologies or others in good faith.

We take reasonable and appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Since your form submission is routed directly to our WhatsApp via an encrypted link, your data is handled through WhatsApp's end-to-end encrypted messaging infrastructure.

However, no method of transmission over the internet is 100% secure. If you become aware of any security concern related to your data, please contact us immediately at support@gdftechnologies.in.

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Non-client inquiries — retained for up to 6 months after your last communication, then deleted.
• Active project data — retained for the duration of the project, any active licence period, and up to 1 year after for support purposes.
• Completed project data — retained for up to 2 years for legal and financial record-keeping, then securely deleted.

You may request deletion of your data at any time by contacting us (see Section 13).

You have the following rights regarding your personal data held by GDF Technologies:

• Right to Access — Request a copy of the personal data we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete data.
• Right to Deletion — Request that we delete your data, subject to legal obligations.
• Right to Withdraw Consent — Withdraw consent to us processing your data at any time.
• Right to Object — Object to our use of your data for any specific purpose.

To exercise any of these rights, contact us at the details in Section 13. We will respond within 30 days.

Our website and services are not directed toward children. We do not knowingly collect personal information from anyone under the age of 13.

If you believe a child has submitted personal information to us without parental consent, please contact us immediately and we will take steps to remove such information from our records.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the Effective Date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of our Site after changes constitutes acceptance of the updated Policy.

For any questions, concerns, or data rights requests related to this Privacy Policy, reach out through any of the following. We respond to all privacy requests within 30 days as required by applicable law.

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Nainital, Uttarakhand, India.