Privacy Policy

1. Introduction

Sardiwal Tech ("Sardiwal Tech," "we," "our," or "us") respects your privacy and is committed to protecting the personal information we collect, use, store, and process through our website, business operations, and services.

We provide IT and digital solutions, including custom software development, web development, website design, UI/UX design, logo and graphic design, Search Engine Optimization (SEO), digital marketing, social media management, CRM development, business automation, e-commerce solutions, and related technology services.

This Privacy Policy explains what information we collect, how we use it, when we share it, how we protect it, and the choices and rights available to you.

This policy applies to visitors to our website, prospective clients, existing clients, business partners, and other individuals who interact with Sardiwal Tech.

By using our website or engaging our services, you acknowledge this Privacy Policy. Where consent is legally required for a particular processing activity, we will seek that consent separately where appropriate.

2. Information We Collect

We may collect the following categories of information, depending on how you interact with us and which services you use.

Personal and Contact Information

When you contact us, request a quotation, submit an enquiry, or engage our services, we may collect:

• Full name
• Email address
• Phone number and business contact details
• Company or organization name
• Job title or professional role
• Country, city, or business address
• Information submitted through contact forms, consultation requests, or other communications

Project and Business Information

To understand your requirements and deliver our services, we may collect:

• Project descriptions and technical specifications
• Business requirements and operational information
• Branding guidelines, design preferences, and marketing objectives
• Website content, images, documents, and other materials supplied by you
• Project timelines, quotations, invoices, and service agreements
• Feedback, approvals, support requests, and communication history

Account and Authentication Information

If we offer client portals, user accounts, or software applications, we may collect information such as:

• Account username and email address
• Authentication identifiers and securely stored password credentials
• Account preferences and configuration settings
• Login timestamps and security-related activity
• Role-based access and account permissions

We do not intend to collect or store plain-text passwords. Payment credentials and authentication secrets should be handled through appropriate secure systems rather than ordinary communication channels.

Technical and Usage Information

When you visit our website or use our online services, certain technical information may be collected automatically, depending on the website configuration and technologies enabled.

This may include:

• IP address
• Browser type and version
• Device type and operating system
• Referring website or source
• Pages visited and interactions with website features
• Date, time, and duration of visits
• Diagnostic information, server logs, and security events
• Approximate geographic location inferred from technical information

Marketing and Advertising Information

If we conduct marketing campaigns or use advertising and analytics tools, we may process information such as:

• Campaign interactions and advertising engagement
• Website visits attributed to marketing campaigns
• Conversion events and campaign performance data
• Advertising identifiers and cookie-related information, where applicable
• Communication preferences and marketing consent status

The information collected will depend on the platforms, tracking technologies, and consent settings actually implemented.

Payment and Billing Information

If you purchase our services, we may process billing details, invoice information, payment status, transaction references, and records necessary for accounting and business administration.

Payments may be handled by third-party payment processors. We do not intend to collect or store complete payment-card details when payment processing is handled by those providers.

Information Received from Other Sources

Where lawful and appropriate, we may receive business contact information or project-related information from:

• Business partners and professional referrals
• Publicly available business directories
• Platforms through which you contact us
• Third-party services that you authorize us to access
• Service providers supporting our business operations

We will handle such information in accordance with applicable law and the purposes for which it was obtained.

3. How We Use Your Information

Sardiwal Tech may use personal and business information for the following purposes:

Service Delivery

• Understanding project requirements
• Preparing quotations, proposals, and contracts
• Developing, designing, testing, and deploying software and websites
• Providing SEO and digital marketing services
• Managing client accounts and project communications
• Delivering technical support, maintenance, and troubleshooting

Communication

• Responding to enquiries and consultation requests
• Sending proposals, invoices, project updates, and service notifications
• Requesting approvals, feedback, or additional project information
• Responding to complaints, support requests, and privacy enquiries

Business Administration

• Processing payments and maintaining financial records
• Managing contracts, project schedules, and customer relationships
• Preventing fraud and investigating suspicious activity
• Maintaining internal records and improving operational efficiency

Website Improvement and Analytics

• Understanding website usage and visitor behavior
• Identifying technical errors and performance issues
• Improving website navigation, accessibility, and functionality
• Evaluating the effectiveness of our website and services

Marketing and Business Development

Where permitted by law and subject to applicable consent requirements, we may use relevant contact information to:

• Send service announcements and promotional communications
• Share information about our products, services, or offers
• Conduct market research and assess campaign performance
• Develop relevant business communications

You may opt out of promotional communications at any time using the unsubscribe mechanism provided or by contacting us.

Security and Legal Compliance

We may process information to protect our website and systems, enforce contractual rights, investigate misuse, comply with legal obligations, and respond to valid requests from competent authorities.

We will not use personal information for purposes materially incompatible with the purposes disclosed to you unless permitted by applicable law.

4. Legal Basis for Processing

Depending on the applicable jurisdiction and the nature of the processing, Sardiwal Tech may process information based on:

• Your consent, where required
• Steps requested by you before entering into a contract
• Performance of a contract or delivery of requested services
• Compliance with applicable legal obligations
• Other lawful grounds available under the relevant privacy legislation

Where consent is the applicable basis for processing, you may withdraw it in accordance with applicable law. Withdrawal does not affect processing lawfully carried out before the withdrawal.

For individuals whose personal data is governed by India's Digital Personal Data Protection Act, 2023, processing will be undertaken in accordance with the Act and the applicable rules and commencement notifications, as relevant to the processing activity.

5. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies to support functionality, security, analytics, and advertising.

Types of Cookies

Essential cookies: These may support core website functions, security, session management, and form functionality.

Functional cookies: These may remember preferences and settings to improve the user experience.

Analytics cookies: Where enabled, these may help us understand visitor traffic, website usage, and performance.

Advertising cookies and pixels: Where enabled, these may help measure advertising campaigns, understand conversions, and deliver or evaluate relevant advertisements.

Managing Cookie Preferences

Where required by applicable law, we will obtain consent before placing non-essential cookies or activating relevant tracking technologies.

You may manage cookie preferences through any consent controls provided on our website. You can also manage or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.

The specific cookies used, their providers, and their retention periods will depend on the technologies implemented on our website.

6. Analytics and Advertising Services

We may use third-party analytics and advertising services, such as Google Analytics, Google Ads, Meta advertising tools, or similar platforms, if implemented on our website or used for our campaigns.

These services may collect or receive information about website visits, device and browser characteristics, interactions, referral sources, and campaign performance.

The information may be used to measure website traffic, evaluate advertising effectiveness, improve marketing campaigns, and understand user interactions.

Third-party providers process information under their own applicable privacy terms and settings. We encourage you to review their privacy policies.

We will configure tracking and advertising technologies in accordance with applicable legal requirements, including consent requirements where applicable.

7. How We Share Information

Sardiwal Tech does not sell personal information as a standalone business activity. We may share information in the following circumstances where appropriate and lawful.

Service Providers

We may share relevant information with trusted providers supporting our operations, including:

• Website hosting and cloud infrastructure providers
• Domain and email service providers
• Payment processors and billing platforms
• Customer relationship management and project management systems
• Analytics and advertising providers
• Software development, testing, and technical support tools
• Backup, cybersecurity, and monitoring providers

Such providers may process information on our behalf or independently under their own terms, depending on the service and arrangement.

Client-Authorized Integrations

Where a client requests integrations with third-party applications, APIs, CRM platforms, payment gateways, or other systems, information may be transferred as necessary to provide the requested functionality.

The client is responsible for ensuring that it has the necessary rights and permissions for information supplied to us or transferred through these integrations.

Professional Advisers

We may share relevant information with legal, accounting, auditing, insurance, or other professional advisers where reasonably necessary.

Legal and Regulatory Requirements

We may disclose information where required by law, regulation, court order, or a valid request from a competent authority, or where disclosure is necessary to establish, exercise, or defend legal claims.

Business Transfers

If Sardiwal Tech undergoes a merger, restructuring, acquisition, or sale of relevant business assets, information may be transferred as part of the transaction, subject to applicable legal requirements and appropriate safeguards.

8. Client Data and Software Development Projects

As an IT services provider, Sardiwal Tech may access or process information belonging to our clients or their users while developing, hosting, maintaining, or supporting software, websites, CRM systems, and digital platforms.

In these situations:

• Clients are responsible for determining their own lawful purposes for collecting and using end-user data.
• Clients must ensure they have the necessary permissions and legal basis to provide data to us.
• Sardiwal Tech will process client data according to the agreed project scope, documented instructions, and applicable law.
• Access to client data should be limited to personnel and service providers who reasonably require it.
• Client data should not be used for unrelated purposes without appropriate authorization or another lawful basis.
• Data exports, integrations, backups, and third-party access should be handled with appropriate safeguards.

Where required by law or the nature of the engagement, the parties should enter into a separate data processing agreement defining their respective responsibilities, security requirements, breach notification procedures, and data deletion obligations.

9. Artificial Intelligence and Automated Tools

If Sardiwal Tech uses artificial intelligence tools or automated systems to support software development, customer support, content creation, analytics, or other services, relevant information may be processed by those systems.

We will take reasonable steps to ensure that such use is consistent with the applicable project agreement, confidentiality obligations, and privacy requirements.

We will not knowingly submit confidential client data, personal data, source code, access credentials, or other restricted information to an AI service unless the use is authorized, appropriately safeguarded, or otherwise permitted by applicable law.

Third-party AI providers may process submitted information according to their respective terms and data handling practices. Clients should notify us of any contractual or regulatory restrictions that apply to their data before authorizing such processing.

Where automated processing has legal or similarly significant effects on individuals, additional disclosures, safeguards, or human review may be required under applicable law.

10. International Data Transfers

Sardiwal Tech may work with clients, hosting providers, software platforms, or service providers located in different countries.

As a result, information may be processed or stored outside your country of residence, subject to applicable legal requirements and any relevant contractual commitments.

Where required, we will implement appropriate safeguards, contractual arrangements, or other lawful transfer mechanisms.

International clients may have additional privacy rights under the laws applicable to their location. Where those laws apply to our processing activities, we will address the relevant requirements as appropriate.

11. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, subject to applicable legal, contractual, security, and accounting requirements.

Retention periods may vary depending on the type of information.

• Enquiry information: Retained for a reasonable period to respond to requests and manage prospective business relationships.
• Client and project records: Retained for the duration of the engagement and any necessary post-project period.
• Financial and contractual records: Retained for applicable statutory, accounting, and dispute-resolution requirements.
• Technical and security logs: Retained for the period reasonably required for monitoring, investigation, and security.
• Marketing preferences: Retained as necessary to manage communications and respect opt-out requests.
• Client application data: Retained or deleted according to the applicable service agreement, client instructions, and legal requirements.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to lawful retention requirements and backup or archival limitations.

12. Data Security

We take reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, and misuse.

Depending on the nature of the information and services, these measures may include:

• Access controls and role-based permissions
• Secure authentication and password-handling practices
• Encryption where appropriate
• Secure development and deployment practices
• Software updates and vulnerability management
• Backup and recovery procedures
• Monitoring and investigation of suspicious activity
• Confidentiality obligations for authorized personnel
• Secure handling of credentials, APIs, and production environments

No electronic transmission, storage system, or software platform can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we will take reasonable steps appropriate to the risks involved.

13. Personal Data Breaches and Security Incidents

If we become aware of a personal data breach affecting information for which we are responsible, we will assess the incident and take appropriate steps to contain, investigate, and mitigate its effects.

Where required by applicable law, we will notify affected individuals, clients, regulators, or other relevant parties within the applicable timelines and in the required manner.

For client projects, the parties should follow the incident reporting and escalation procedures set out in the relevant service agreement or data processing agreement.

14. Your Privacy Rights and Choices

Depending on the applicable law and the nature of our relationship with you, you may have rights concerning your personal information.

These may include the right to:

• Request information about the personal data we process
• Request correction of inaccurate or incomplete information
• Request deletion of information where legally available
• Withdraw consent where processing is based on consent
• Opt out of promotional communications
• Manage applicable cookie and tracking preferences
• Raise a complaint or grievance regarding the processing of personal information
• Exercise other rights available under the laws applicable to you

For personal data governed by India's Digital Personal Data Protection Act, 2023, individuals may exercise the rights available under that Act, subject to its applicable provisions and rules.

To submit a request, contact us using the details in Section 20. We may need to verify your identity and clarify the scope of your request before acting on it.

Some information may need to be retained where required by law or necessary for a lawful business purpose. Any restriction or refusal will be handled in accordance with applicable legal requirements.

15. Children's Privacy

Our website and business services are generally intended for businesses, professionals, and individuals capable of entering into relevant service arrangements.

We do not knowingly collect children's personal data for independent marketing or unrelated purposes.

Where a service involves children's personal data, processing must comply with applicable law, including any requirements concerning verifiable parental consent, restrictions on tracking or targeted advertising, and other safeguards that may apply in India or another relevant jurisdiction.

If you believe that a child has provided personal information to us without the required authorization, please contact us so we can assess the situation and take appropriate action.

16. Email and Promotional Communications

We may send transactional or service-related communications necessary for enquiries, contracts, invoices, project updates, security notices, and customer support.

Promotional communications will be sent where permitted by applicable law and subject to any required consent.

You may unsubscribe from promotional emails using the unsubscribe link where available or by contacting us directly. Even after opting out of marketing, you may continue to receive necessary transactional or legally required communications.

17. Third-Party Websites and Services

Our website or project deliverables may contain links to external websites, applications, payment providers, social media platforms, or other third-party services.

These external services operate under their own privacy policies and practices. Sardiwal Tech does not control the privacy practices of independent third parties.

We recommend reviewing the relevant privacy policy before submitting personal information to any third-party website or service.

18. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business operations, technologies, services, or legal obligations.

The updated version will be published on our website with a revised "Last Updated" date.

Where required by applicable law, we will provide additional notice or seek consent before implementing changes that require it.

We encourage visitors and clients to review this page periodically.

19. Complaints and Grievance Redressal

If you have a question, concern, or complaint about how Sardiwal Tech handles personal information, you may contact us using the details below.

We will review the concern and respond within a reasonable period and in accordance with applicable legal requirements.

Where applicable law provides a right to escalate a complaint to a competent regulator or data protection authority, you may exercise that right in accordance with the relevant procedure.

20. Contact Information

For privacy-related questions, access requests, correction requests, deletion requests, or complaints, please contact us:

Company Name: Sardiwal Tech

Privacy Contact / Grievance Contact: Sahil Kumar (08293930404)

Email Address: info@sardiwaltech.com

Business Address: SCO 9, First floor, Zirakpur, Punjab, India

Website: www.sardiwaltech.com

Please include sufficient details to help us understand and process your request. Do not include passwords, payment-card details, or other unnecessary sensitive information in your message.

This Privacy Policy describes the general privacy practices of Sardiwal Tech. Specific client engagements, software products, and regulated services may require additional privacy notices, consent mechanisms, or contractual data protection terms.