Privacy Policy

ZentroTECH (“we”, “us”, “our”) operates the website https://zentrotech.inand the associated services described on it. This Privacy Policy explains what information we collect about you, why we collect it, how we use it, and the rights you have over it. We comply with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

1. Who we are

ZentroTECH is a proprietorship based at 228/1, 5th Cross Road, Koramangala, Bengaluru, Karnataka 560034. Contact: hello@zentrotech.in · +91 73489 61600.

2. Personal data we collect

We collect the following categories of personal data, and only when you actively provide it:

• Contact form submissions: name, business name, WhatsApp number, alternate phone, email, city, industry, business size, years in business, current website (if any), service interests, primary goal, monthly lead volume, investment range, timeline, project description, source, and any additional notes you share.
• Automatic technical data: IP address, browser type, device type, pages visited, time on page, referring URL. This is collected by Vercel Analytics, Google Analytics (GA4), and Microsoft Clarity to help us understand how visitors use the site. None of these tools receive your name, email, or phone number unless you submit a form.
• Communications: the content of any WhatsApp, phone call, or email you send us in response to your enquiry, kept only as long as needed to serve you.

3. How we use your data

• To respond to your enquiry within one business day with a quote, audit, or scoping conversation.
• To deliver the services you contract us for (websites, AI automations, audits, etc.), including communicating about scope, timelines, deliverables, and invoices.
• To send you transactional emails about your project (kickoff confirmations, milestone updates).
• To improve our website and content based on aggregated, de-identified analytics.
• To comply with Indian tax (GST), legal, and regulatory obligations.

We do not use your data for unsolicited marketing, do not sell or rent your data to third parties, and do not use it to train AI models. If we ever want to do something with your data beyond what is listed above, we will ask you first.

4. Lawful basis (DPDP)

Under the DPDP Act, we process your personal data on the basis of your explicit consent, given through the consent checkbox on our contact form. You may withdraw consent at any time by emailing hello@zentrotech.in with the subject line “Withdraw consent”. Withdrawal does not affect lawful processing that occurred before the withdrawal.

5. Data sharing

We share data only with the processors that are technically required to run this website and deliver our services:

• Vercel (hosting) — United States, GDPR + SOC 2 certified.
• Google Analytics — aggregated traffic analytics.
• Microsoft Clarity — session replay and heatmaps (sensitive form fields are masked).
• Cloudflare / Vercel CDN — edge caching, DDoS protection.
• Resend / Google Workspace — transactional email delivery.
• WhatsApp Business — if you contact us via WhatsApp.

We do not sell, lease, or trade personal data with anyone. We may share information if compelled by a lawful Indian court order or regulator.

6. Data retention

Lead form submissions are retained for up to 24 months from the date of submission, or until you ask us to delete them, whichever comes first. Active-client project data is retained for the duration of the engagement plus 7 years for GST and tax record-keeping obligations. Technical analytics data is retained per the default settings of the analytics provider (typically 14–26 months) in aggregated form.

7. Your rights under the DPDP Act

• Right to access a summary of the personal data we hold about you.
• Right to correction of inaccurate or incomplete data.
• Right to erasure of your personal data, subject to legal retention obligations.
• Right to withdraw consent at any time.
• Right to nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Right to grievance redressal: contact us first; if unresolved within 30 days, escalate to the Data Protection Board of India.

Email hello@zentrotech.inwith the subject “DPDP request” to exercise any of these. We respond within 15 business days.

8. Security

We use HTTPS everywhere, hash sensitive credentials, restrict admin access by IP and 2FA, and store lead data in encrypted vendor databases. No system is 100% secure; if we ever experience a breach affecting your data, we will notify you and the Data Protection Board within 72 hours as required by the DPDP Act.

9. Children

Our services are for business use. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data through our forms, email us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy as our services or the law evolves. The current version’s last updated date appears at the top of this page. Material changes will be announced via the website banner for 30 days.

11. Contact & grievance officer

For any privacy question, complaint, or DPDP rights request:

• Email: hello@zentrotech.in
• Phone / WhatsApp: +91 73489 61600
• Postal: 228/1, 5th Cross Road, Koramangala, Bengaluru, Karnataka 560034