Legal

Privacy Policy

Last updated: April 14, 2025Effective date: April 14, 2025

This policy explains how Tech N All collects, uses, and protects your personal data, and your rights under the Digital Personal Data Protection Act, 2023 and other applicable Indian law.

1. Introduction

Tech N All ("Company", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website technall.in, engage our services, or otherwise interact with us.

This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Information Technology Act, 2000 (IT Act), along with other applicable laws and regulations of India.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of our website and services.

2. Identity of the Data Fiduciary

For the purposes of the Digital Personal Data Protection Act, 2023, Tech N All is the Data Fiduciary responsible for your personal data.

Registered Name: Tech N All Primary Contact: hello@technall.in Jurisdiction: India

If you have any questions about this Policy or wish to exercise your rights, you may contact us at the email address above.

3. Personal Data We Collect

3.1 Information You Provide Directly

  • Name and contact details (email address, phone number)
  • Company name, job title, and professional information
  • Content of messages, enquiries, or project briefs submitted via contact forms
  • Payment and billing details (processed by third-party payment processors; we do not store card data)
  • Any other information you voluntarily provide to us

3.2 Information Collected Automatically

  • IP address and approximate geographic location
  • Browser type, version, and operating system
  • Pages visited, time spent, and referring URLs
  • Device identifiers and technical metadata
  • Cookies and similar tracking technologies (see Section 9)

3.3 Sensitive Personal Data or Information (SPDI)

We do not intentionally collect Sensitive Personal Data or Information as defined under the SPDI Rules, 2011 (including passwords, financial information beyond what is necessary for transactions, health data, biometrics, or sexual orientation). If any SPDI is shared with us, it will be handled with the higher standard of care required under applicable law and deleted as soon as the purpose is fulfilled.

4. Purpose and Legal Basis for Processing

We process your personal data only for specified, clear, and lawful purposes. Under the DPDPA 2023, processing requires either your consent or a legitimate use as defined by law.

PurposeLegal Basis
Responding to enquiries and service requestsConsent / Contractual necessity
Providing, managing, and improving our servicesContractual necessity
Sending project updates and communicationsContractual necessity
Sending marketing emails (newsletters, offers)Consent (you may withdraw at any time)
Processing payments and preventing fraudLegal obligation / Legitimate interest
Complying with legal and regulatory obligationsLegal obligation
Analytics and website improvementLegitimate interest
Enforcing our Terms of ServiceLegitimate interest

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may share it only in the following circumstances:

5.1 Service Providers and Data Processors

We engage trusted third-party vendors (cloud hosting providers, email delivery services, analytics platforms, payment processors) who process data on our behalf under contractual obligations consistent with this Policy.

5.2 Legal Requirements

We may disclose data if required by law, court order, government authority, or regulatory body, including under the IT Act, 2000 or any directive from CERT-In.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction. You will be notified via email or a prominent notice on our website.

5.4 With Your Consent

For any other purpose not listed above, we will seek your explicit consent before sharing your data.

6. Cross-Border Data Transfers

As a remote-first company, we may use service providers whose infrastructure is located outside India (for example, cloud servers in the United States or European Union).

Such transfers are made only to countries or entities that provide an adequate level of data protection, or under appropriate safeguards such as standard contractual clauses. These transfers comply with Section 16 of the Digital Personal Data Protection Act, 2023 and applicable rules notified by the Central Government from time to time.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Client project data is retained for a minimum of 3 years after project completion for legal and dispute resolution purposes. Enquiry data from non-clients is deleted within 12 months if no engagement follows. Marketing consent records are retained until you withdraw consent or for up to 3 years of inactivity, whichever is earlier.

Upon expiry of the retention period, data is securely deleted or anonymised.

8. Your Rights as a Data Principal

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access

You may request a summary of the personal data we hold about you and the purposes for which it is being processed.

Right to Correction and Erasure

You may request correction of inaccurate or incomplete data, or erasure of data that is no longer necessary for the purpose it was collected.

Right to Grievance Redressal

You have the right to have your grievances addressed by us within a reasonable time. If unsatisfied, you may approach the Data Protection Board of India once constituted.

Right to Nominate

You may nominate another individual to exercise your rights in the event of your death or incapacity.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at hello@technall.in. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our website. Cookies are small text files stored on your device.

Essential cookies

Required for core website functionality. Cannot be disabled.

Analytics cookies

Help us understand how visitors use our site (e.g., Google Analytics). You may opt out via your browser settings or the Google Analytics opt-out tool.

Marketing cookies

Used to serve relevant advertisements. We will seek your explicit consent before enabling these.

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

10. Security of Personal Data

We implement reasonable security practices and procedures as mandated by Rule 8 of the SPDI Rules, 2011, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest where applicable
  • Access controls and role-based permissions for staff
  • Regular security assessments of our infrastructure
  • Contractual security obligations on all third-party processors

In the event of a personal data breach, we will notify affected individuals and the Data Protection Board of India as required by the DPDPA 2023 and applicable CERT-In guidelines.

11. Children's Privacy

Our services are directed to businesses and professionals. We do not knowingly collect personal data from individuals below the age of 18 years (or below the age of digital consent as notified under the DPDPA 2023).

If we become aware that we have collected data from a minor without verifiable parental consent, we will delete that data promptly. Parents or guardians who believe their child has provided us with personal data may contact us at hello@technall.in.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently. This Policy applies solely to information collected through our own website and services.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our data practices, or our services. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.

Continued use of our website or services after the effective date of any changes constitutes acceptance of the revised Policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, a Grievance Officer has been designated:

Name: Grievance Officer, Tech N All Email: hello@technall.in Response time: Within 30 days of receipt of complaint

If you are not satisfied with the resolution, you may escalate to the Data Protection Board of India once it is constituted under the Digital Personal Data Protection Act, 2023.

Questions about this Policy?

Contact our Grievance Officer at hello@technall.in. We respond within 30 days.

Contact Us