Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• • Contact Form Data: Name, email address, phone number, company name, and message content when you fill our contact or inquiry forms.
• • Newsletter Subscription: Email address when you subscribe to our newsletter or marketing communications.
• • Career Applications: Resume/CV, educational background, work experience, and other details submitted via career application forms.
• • Client Onboarding: Business details, billing information, and project requirements provided during client engagement.

1.2 Information Collected Automatically

• • Usage Data: Pages visited, time spent, referring URLs, click paths, and browser session information.
• • Device Information: IP address, browser type and version, operating system, and device identifiers.
• • Cookies and Tracking: We use cookies, web beacons, and similar technologies as described in our Cookie Policy section below.

1.3 Information from Third Parties

• • Analytics data from Google Analytics and Google Search Console.
• • Advertising data from Google Ads and Meta Ads platforms when running paid campaigns on your behalf.
• • Social media information if you connect via LinkedIn, Facebook, or Instagram for business inquiries.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, we process your personal data on the following lawful bases:

• • Consent: Where you have given explicit consent (e.g., newsletter subscription, marketing communications).
• • Contract Performance: To fulfil our obligations under service agreements with clients.
• • Legitimate Interests: For analytics, security, fraud prevention, and business operations where not overridden by your rights.
• • Legal Obligation: Where required to comply with Indian law or court orders.

4. Sharing of Information

We do not sell, rent, or trade your personal information. We may share it with:

• • Service Providers: Trusted third-party vendors (e.g., hosting, CRM, email marketing tools) who process data on our behalf under strict data processing agreements.
• • Analytics Platforms: Google Analytics, Google Search Console, Meta Business Suite — for performance measurement.
• • Legal Authorities: Government bodies or courts when required by law, regulation, or valid legal process.
• • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity with notice to you.

5. Cookies & Tracking Technologies

We use the following types of cookies:

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal data only for as long as necessary:

• • Prospect/Inquiry Data: Up to 2 years from last contact, unless a client relationship is established.
• • Client Data: For the duration of the engagement plus 7 years for accounting and legal compliance under the Companies Act 2013.
• • Analytics Data: Aggregated analytics retained for up to 26 months (default Google Analytics retention period).
• • Newsletter Subscriptions: Until you unsubscribe or request deletion.

7. Your Rights Under DPDP Act 2023

As a data principal under India's DPDP Act 2023, you have the following rights:

To exercise any of these rights, contact our Data Protection Officer at hr@bafnadigitechsolution.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including:

• • SSL/TLS encryption for all data transmitted between your browser and our servers.
• • Access controls limiting staff access to personal data on a need-to-know basis.
• • Regular security assessments and vulnerability testing.
• • Secure cloud infrastructure with regular backups and disaster recovery procedures.

While we take all reasonable precautions, no internet transmission is 100% secure. We cannot guarantee absolute security of data transmitted via the internet.

9. Children's Privacy

Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently received personal data from a person under 18, we will delete that information immediately. If you believe we have inadvertently collected information from a minor, please contact us at hr@bafnadigitechsolution.com.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies independently. Our Privacy Policy applies only to information collected on our website.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email. We encourage you to review this policy periodically.

12. Contact Us