Preamble and definitions
This Privacy Policy (Policy) is issued by ByteWeb IT Solutions Private Limited, a company incorporated under the Companies Act, 2013 and having its registered office at Vadodara, Gujarat, India (the Company, we or us).
This Policy is published in accordance with the provisions of the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023. It applies to this website and to the Services rendered by the Company. Where a separate agreement has been executed between you and the Company, that agreement shall govern the engagement, and this Policy shall govern the treatment of personal information thereunder.
In this Policy, personal information means any data about an individual who is identifiable by or in relation to such data; Data Principal means the individual to whom the personal information relates; Client means a person or entity engaging the Company for Services; and Services means the design, development, migration, maintenance or support services rendered by the Company.
Information furnished by you
This website may be browsed without furnishing any personal information. Personal information is collected only when you elect to furnish it.
Enquiries submitted through this website
The enquiry form provides for your name, email address, company name, phone number, what you need, budget range and the description of your project. Only your name, email address and a description of your requirement are mandatory; the remaining fields are optional. Such information shall be used to respond to your enquiry, to seek clarifications and to propose an approach.
Subscription to publications
Where you subscribe to receive our articles, we shall retain your email address, and your name and organisation where furnished, for the purpose of sending the material subscribed for. Every communication shall carry the means to unsubscribe.
Applications for employment and direct correspondence
Where you correspond with us by email or telephone, we shall retain the correspondence and our response as a record of the communication. A curriculum vitae furnished to us shall be used solely for the purpose of considering your candidature.
Information collected automatically
Analytics
Subject to your consent, this website loads Google Tag Manager, which in turn loads Google Analytics. These record the pages visited, the approximate geographic region, the category of device and browser used, and the link or advertisement through which you arrived. Such information is used to ascertain the utility of our pages. Your name, email address, telephone number and the contents of your enquiry are not transmitted to analytics.
Advertising measurement
Subject to your separate consent to the marketing category, Google Tag Manager additionally loads the Meta pixel, operated by Meta Platforms, and the LinkedIn insight tag, operated by LinkedIn. These record the pages visited on this website and report them to the respective platform, so that we can measure the results of advertising placed there and direct advertisements to persons who have visited this website. Each platform processes such data as a controller in its own right in accordance with its own terms, and each may match the record to an account held with it. Neither tag is loaded, and no such record is created, unless you consent to the marketing category.
Source of your visit
Subject to your consent, this website reads the campaign parameters appearing in the address through which you arrive (utm_source, utm_medium, utm_campaign, utm_content, utm_term, gclid, msclkid, fbclid), together with the first page visited and the referring website. Your browser retains this for a period of 90 days and appends it to an enquiry if one is submitted. The record remains in your browser and is removed when you clear your browsing data.
Server records
On submission of an enquiry, the server temporarily retains your internet protocol address for the limited purpose of restricting the number of submissions originating from a single source and preventing duplicate recording of the same enquiry. This constitutes a security measure against automated misuse and is not used for any other purpose.
Cookies and browser storage
A cookie is a small file which a website causes to be stored in your browser. This website does not set cookies of its own. Subject to your consent, Google sets cookies to distinguish repeat visits and to measure campaigns, and, where you consent to the marketing category, Meta Platforms and LinkedIn set cookies to measure advertising. The particulars of each are set out in the respective provider's own privacy documentation.
We additionally use the local storage and session storage facilities of your browser, which operate in a manner similar to a cookie but are not transmitted with every request. These are used for the campaign and referral information aforesaid and to retain minor interface preferences. The same may be cleared at any time through your browser settings, and this website shall continue to function without them.
Categories of cookies used
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Required for the website to function, including security measures and abuse protection on our forms. | Not required |
| Analytics | Google Analytics, loaded through Google Tag Manager, together with the record of the campaign or link through which you arrived. | Required |
| Marketing | The Meta pixel and the LinkedIn insight tag, loaded through Google Tag Manager, which measure advertising and allow advertisements to be directed to people who have visited this website. | Required |
The analytics and marketing categories are consented to separately. Accepting one does not accept the other, and either may be turned off later without affecting the other.
Management and withdrawal of consent
No cookie or storage other than the strictly necessary category is set unless and until you signify your consent through the consent panel displayed on your first visit. You may review your preferences, or withdraw a consent previously granted, at any time and with the same facility with which it was granted:
Withdrawal shall not render unlawful any processing carried out prior thereto. On withdrawal, analytics shall cease to load on subsequent page views, and any cookies already set by Google may be removed through your browser settings.
Purposes of processing and lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and discussing a proposed engagement | Your request, and steps taken towards entering into a contract |
| Rendering the Services agreed and supporting them thereafter | Performance of the contract between the parties |
| Sending publications subscribed for | Your consent, which may be withdrawn at any time |
| Measuring use of this website and the efficacy of campaigns | Your consent to the analytics category |
| Measuring advertising and directing advertisements to persons who have visited this website | Your consent to the marketing category |
| Maintaining books of account, raising invoices and meeting statutory obligations | Compliance with law, including the Companies Act, 2013 and applicable tax legislation |
| Protecting this website and our systems against misuse | Our legitimate interest in maintaining the security and availability of the Services |
We do not sell personal information, nor do we disclose it to any person for the purpose of enabling such person to market its own products or services to you.
Disclosure of personal information
Personal information is disclosed only to the extent necessary for operating this website or rendering the Services:
- Google (Tag Manager and Analytics). Google Tag Manager loads the tags below. Google Analytics measures how the site is used and which campaigns bring people to it. Engaged on your consent to the analytics category.
- Meta Platforms (the Meta pixel). Measuring the results of advertising on Facebook and Instagram, and allowing advertisements to be shown to people who have visited this website. Engaged on your consent to the marketing category.
- LinkedIn (the LinkedIn insight tag). Measuring the results of advertising on LinkedIn, and allowing advertisements to be shown to people who have visited this website. Engaged on your consent to the marketing category.
- Hosting and electronic mail providers. Such providers host this website and carry our correspondence, and data consequently passes through their systems.
- The system maintained for management of enquiries. Enquiries submitted through this website are recorded therein to enable follow-up.
- Professional advisers and statutory authorities. Where disclosure is required under law, or where advice is sought from our auditors or legal advisers.
In the event of any sale, merger, amalgamation or reorganisation of the Company's business, information relating to clients and enquiries may be transferred as part thereof. You shall be intimated prior to any change in the purpose for which your information is used.
Transfer outside India
The Company is situated at Vadodara, Gujarat, India, and information furnished to us is handled there. Certain service providers on whom we rely, including analytics and electronic mail providers, store data on servers situated outside India. Where information is transferred outside the country in which it was collected, we take reasonable measures to ensure that it continues to be protected to the standard set out in this Policy. We do not transfer personal information to any country or territory restricted for that purpose by notification of the Central Government.
Retention
Personal information shall be retained only for so long as the purpose for which it was collected subsists, or for such longer period as may be required under any law in force. Enquiries which do not result in an engagement shall be retained while a reasonable prospect of further discussion subsists and shall thereafter be erased. Records pertaining to an engagement shall be retained for the duration thereof and thereafter for the period prescribed under applicable company, tax and accounting legislation. Subscription particulars shall be retained until you unsubscribe.
You may request erasure at an earlier date, and the Company shall give effect thereto save where retention is required under law.
Rights of Data Principals
You are entitled to require the Company to:
- furnish a summary of the personal information held about you and the processing undertaken in respect thereof;
- correct, complete or update any information which is inaccurate or out of date;
- erase information which the Company is no longer required to retain;
- cease processing your information for any particular purpose, including for marketing; and
- give effect to the withdrawal of a consent previously granted.
Where you are situated in India, these rights are conferred by the Digital Personal Data Protection Act, 2023, which further entitles you to nominate another individual to exercise them on your behalf. Where you are situated in the United Kingdom or the European Economic Area, the UK GDPR and the GDPR confer these rights together with the right to receive your information in a portable form and to complain to the supervisory authority.
Any such request shall be addressed to [email protected]. No fee shall be levied. The Company may seek such particulars as are reasonably necessary to verify your identity prior to giving effect to the request. The manner in which the Company meets its obligations under the said Act is set out in its DPDP Act compliance policy.
Data processed on behalf of Clients
The development, migration or support of a website or application ordinarily entails access to systems containing personal information of third parties, including a Client's customers, subscribers and order records. In such cases the Client determines the purpose and means of processing, and the Company acts upon the Client's instructions.
- Such data shall remain the property of the Client. The Company shall not use it for any purpose of its own and shall not retain copies once the work no longer requires them.
- The Company shall seek the minimum access necessary, and shall use anonymised or test data in place of live records wherever the work so permits.
- Personnel of the Company are bound by obligations of confidentiality which survive the engagement.
- The Company shall execute a data processing agreement where required.
- Where a request is made to a Client in respect of data held by the Company, the Company shall assist the Client in responding thereto.
- On becoming aware of any breach affecting a Client's data, the Company shall intimate the Client without undue delay.
Security safeguards
The Company implements reasonable security practices and procedures, including encryption of data in transit, access restricted to authorised personnel on a need-to-know basis, individual credentials, and review of access upon change of role or cessation of employment. No system can be warranted to be wholly secure; in the event of a breach affecting you, intimation shall be given to you and to the competent authority as required under law.
Children
This website is intended for business users and is not directed at children. The Company does not knowingly collect the personal information of any person below the age of eighteen years. Should you believe that a child has furnished personal information to us, kindly intimate us and the same shall be erased.
Third-party websites
This website may contain links to websites operated by other persons. The Company exercises no control over such websites and this Policy shall cease to apply upon your following any such link. You are advised to peruse the privacy policy of any website you thereafter use.
Grievance redressal
Any grievance in respect of this Policy or the processing of your personal information may be addressed to the Grievance Officer of the Company:
- Email: [email protected], marked for the attention of the Grievance Officer
- Telephone: +91 85110 00222
- Address: ByteWeb IT Solutions Private Limited, Vadodara, Gujarat, India
The Company shall acknowledge every grievance upon receipt and shall dispose of the same within the period prescribed under applicable law.
Governing law and jurisdiction
This Policy shall be governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. Any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Vadodara, Gujarat, India.
Amendment
The Company reserves the right to amend this Policy from time to time. The effective date and the date of last revision are stated at the head of this document. Where an amendment materially affects the manner in which information already furnished by you is used, intimation shall be given to you.