Privacy Policy

1. Introduction & Commitment

Welcome to SARITSOL (operated by Sardar IT Solutions Private Limited, hereinafter referred to as "SARITSOL," "Company," "we," "us," or "our"). SARITSOL is a premier enterprise technology consultancy and software engineering firm specializing in bespoke web application engineering, enterprise software systems, cloud infrastructure & DevOps, database engineering, application maintenance, and technical consulting.

We respect your personal privacy and are committed to upholding transparency, integrity, and statutory compliance in every data processing operation we perform. This Privacy Policy sets out the principles and practices governing the collection, processing, storage, sharing, and protection of personal information obtained through our corporate website, consultation portals, contact inquiry systems, and administrative interfaces.

This Policy is drafted in alignment with leading global and national data privacy legislations, including:

• The Digital Personal Data Protection Act, 2023 (DPDP Act - India);
• The General Data Protection Regulation (EU GDPR / UK GDPR);
• The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA); and
• The Google API Services User Data Policy, including its Limited Use mandates.

By visiting, accessing, or submitting information through our website, you acknowledge the terms of this Privacy Policy.

2. Information We Collect

We collect personal information strictly through lawful and fair means, limited to what is necessary for our legitimate business interactions, customer service delivery, and digital security.

2.1 Information Provided Voluntarily

When you initiate an inquiry, request a technical consultation, or communicate with our engineering leadership, we may collect the following voluntarily provided details:

• Full Name: To address you professionally in all communications.
• Business Email Address: To send formal responses, proposals, and scheduling confirmations.
• Phone Number (Optional): To coordinate telephone discussions or urgent technical advisory sessions.
• Company / Organization Name (Optional): To contextualize the business environment and enterprise requirements.
• Service Interest: The category of IT solutions or software services relevant to your inquiry.
• Inquiry Message & Project Scope: Specific objectives, timelines, or specifications you choose to provide.

2.2 Technical Information (Collected Automatically)

When you navigate through our digital portal, our web servers and security systems automatically capture standard technical diagnostics to ensure platform stability and protect against malicious cyber traffic:

• Network Identifiers: Internet Protocol (IP) address and approximate geographic location (city/country level).
• Device & Client Specifications: Web browser type, operating system, device family, and language preferences.
• Navigation Metadata: Uniform Resource Locators (URLs) of referring and exit pages, requested paths, date and time stamps, and server response times.
• Security & Operational Logs: Diagnostic records used to detect and prevent automated abuse, brute-force attempts, and unauthorized activities.

2.3 Administrative Information

For authorized personnel accessing administrative management panels:

• Identity & Authentication Credentials: Encrypted authentication tokens, session identifiers, and verification records.
• Authorization Metadata: Identity federation status and enterprise single sign-on verifications.
• Communication & Scheduling Metadata: Administrative records relating to incoming client inquiries and scheduled calendar discussions.

3. How We Use Information

SARITSOL processes collected information exclusively under established legal bases—including user consent, performance of pre-contractual and contractual agreements, compliance with legal obligations, and our legitimate interests in operating a secure enterprise platform.

4. Cookies and Similar Technologies

We use cookies and comparable web technologies solely to ensure our website functions reliably, smoothly, and securely.

• Essential Cookies: Strictly necessary to enable core site functionality, load balancing, page transitions, and secure form submissions.
• Session Cookies: Temporary identifiers that maintain navigation state throughout your active visit and are automatically discarded upon closing your browser.
• Security Cookies: Deployed to verify request authenticity, prevent cross-site request forgery, and identify unauthorized automated submissions.
• Preference Cookies: Used to remember your interface preferences (such as display density or accessibility choices).

5. Data Security Practices

We maintain an enterprise-grade security architecture designed to safeguard personal information from unauthorized access, unauthorized alteration, disclosure, accidental destruction, or illicit access.

• Encryption in Transit: All communications between your web browser and our servers are encrypted using modern cryptographic transport protocols.
• Encryption at Rest: All stored customer inquiries and records are encrypted at rest across secure, enterprise-grade storage environments.
• Strict Access Governance: Access to personal information is strictly restricted on a least-privilege, need-to-know basis, governed by role-based access control (RBAC) and multi-factor authentication (MFA).
• Continuous System Monitoring: Comprehensive logging and anomaly monitoring to safeguard server environments against unauthorized intrusion.
• Data Minimization: Limiting our data collection exclusively to the minimal set of data fields required to execute business services.

6. Google API Data Usage & Limited Use Policy

SARITSOL incorporates enterprise integrations with Google Workspace APIs (including Google OAuth 2.0, Gmail API, and Google Calendar API) solely to manage administrative scheduling, technical consultation booking, and inbound communication workflows.

In accordance with these standards, SARITSOL affirms that:

• Authorized Business Functions Only: Data accessed via Google APIs is used strictly to provide user-facing features (such as appointment scheduling and direct communication) and administrative workflow management.
• Never Sold or Monetized: We do not sell, rent, or lease any data received through Google APIs to third parties under any circumstances.
• No Data Broker Sharing: Google user data is never transferred or shared with data brokers, advertisers, or third-party marketing entities.
• No AI / Machine Learning Model Training: Data obtained via Google APIs is never used to train, retrain, fine-tune, or develop generalized artificial intelligence (AI), machine learning (ML), or large language models (LLMs).
• Restricted Human Review: Human inspection of Google user data is strictly prohibited, except where explicit user consent is granted for technical support, required by applicable law, or necessary for security investigations.

7. Data Retention Principles

We adhere to strict data minimization and purpose limitation principles. Personal data is retained only for the duration required to accomplish the legitimate business and legal objectives for which it was gathered:

Upon the expiration of the applicable retention schedule, data is permanently erased, securely destroyed, or irreversible anonymized.

8. Your Privacy Rights

Depending on your geographical jurisdiction, you possess specific legal rights concerning the personal data we hold about you:

8.1 India — Digital Personal Data Protection Act, 2023 (DPDP Act)

Data principals in India are entitled to:

• Right to Access: Obtain a summary of personal data processed by SARITSOL and the processing activities undertaken.
• Right to Correction & Erasure: Request the correction of inaccurate data, completion of incomplete records, or erasure of personal data no longer required for its original purpose.
• Right of Grievance Redressal: Access an expeditious grievance mechanism regarding data processing concerns.
• Right to Nominate: Nominate an individual to exercise data principal rights in the event of death or incapacity.
• Withdrawal of Consent: Withdraw consent for data processing at any time without retroactive penalty.

8.2 European Union / United Kingdom — GDPR

Data subjects in the EU/EEA and UK possess rights under Articles 15–22 of the GDPR:

• Right of Access & Data Portability: Request confirmation, copies of personal data, and transfer in a structured, machine-readable format.
• Right to Rectification: Rectify inaccurate, outdated, or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request data deletion when legal processing grounds no longer apply.
• Right to Restriction & Objection: Restrict or object to data processing based on legitimate interests.
• Right to Lodge a Complaint: Lodge a complaint with your local Data Protection Authority.

8.3 United States — California (CCPA / CPRA)

California residents are provided specific statutory rights:

• Right to Know & Access: Request disclosure of categories and specific pieces of personal information collected.
• Right to Delete & Correct: Request deletion or correction of inaccurate personal information.
• Right to Opt-Out of Sale / Sharing: SARITSOL does not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will never discriminate against you in price, service quality, or responsiveness for exercising any privacy rights.

9. International Data Transfers

SARITSOL operates its corporate headquarters in India and serves an international enterprise clientele. Consequently, personal information may be stored or processed in jurisdictions other than your country of residence.

When transferring personal information internationally, we ensure that appropriate and legally recognized safeguards are implemented—such as Standard Contractual Clauses (SCCs), Data Processing Addenda (DPAs), and certified enterprise hosting infrastructure—guaranteeing that your data remains protected to standards equivalent to applicable domestic laws.

10. Third-Party Disclosures

We do not sell, rent, trade, or commercially monetize personal data. We disclose personal information only to:

• Authorized Enterprise Service Providers: Vetted cloud hosting, communication delivery, and security providers acting strictly on our instructions under binding confidentiality and data protection agreements.
• Corporate Successors: In the event of a merger, acquisition, divestiture, or corporate restructuring, where data may be transferred as an essential business asset subject to this Privacy Policy.
• Law Enforcement & Statutory Mandates: Where required by valid subpoenas, court orders, or governmental regulations, or where disclosure is essential to safeguard the security, property, or legal rights of SARITSOL and its clients.

11. Children's Privacy

Our website and software services are exclusively tailored for business professionals, enterprises, and adult commercial users. We do not knowingly solicit, collect, or process personal data from individuals under the age of eighteen (18). If we learn that personal data of a minor has been gathered without verified guardian consent, we will promptly delete such records.

12. Grievance Officer & Contact Information

In compliance with the Digital Personal Data Protection Act, 2023, and applicable international privacy frameworks, SARITSOL has designated a dedicated Grievance Officer:

13. Changes to this Privacy Policy

SARITSOL reserves the right to amend, update, or revise this Privacy Policy periodically to reflect technological advancements, operational enhancements, or statutory revisions.

When modifications occur, we will post the revised document on this page and update the "Last Updated" date at the top of this document. We encourage users to review this page regularly.