Skip to content

Privacy Policy

Draft for review. This policy is being finalised before public launch.

Last updated: [PLACEHOLDER — date of legal review]

Who we are

This website is operated by Dawki Infotech Pvt. Ltd., a private limited company incorporated in India under the Companies Act, 2013, with its registered office at [PLACEHOLDER — registered office address]. Being a private limited company means we are a separate legal entity with statutory filing and record-keeping duties of our own — the obligations set out below sit with the company, not with any individual in it.

For personal data collected through this website, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) — the party that decides why and how your data is processed, and the party answerable for it. Where we handle personal data inside a client’s own systems as part of a project, we act as a Data Processor on that client’s instructions instead. For any privacy question or request, contact info@dawkiinfotech.com.

What we collect and why

  • Enquiry details you submit — name, company, phone, email, service of interest, budget range and message — used solely to respond to your enquiry and manage our business relationship. These are stored in our lead-management system (CRM).
  • Job applications — name, email, mobile number, your resume and any note you add on the Careers page — used only to assess your application for the role and to contact you about it. Resumes are stored privately, are seen only by our hiring team, and are deleted with the application when you ask us to or once it is no longer needed.
  • Attribution data — the page you arrived on, referring site and campaign parameters (UTM) — used to understand which marketing brings genuine enquiries.
  • Usage analytics — aggregated page and event data via Google Analytics, used to improve the website. IP anonymisation is enabled.

We collect no more than the forms visibly ask for, and we do not sell personal data.

How we work to the DPDP Act, 2023

We process personal data on the basis of your consent, or for the legitimate uses the DPDP Act permits — principally responding to an enquiry you have chosen to send us. In practice that means:

  • Notice before consent. Every form tells you what is being collected and what it will be used for, in plain language, before you submit it.
  • Consent that is free, specific and informed. We ask only for what a given purpose needs, and we do not bundle unrelated permissions together. Analytics and campaign-attribution cookies stay switched off until you accept them.
  • Purpose limitation. Data given for one purpose is not quietly reused for another. Enquiry details are used to answer the enquiry and run the relationship that may follow — not sold, rented or traded.
  • Withdrawal is as easy as consent. You can withdraw at any time, by writing to info@dawkiinfotech.com or by reopening Cookie Preferences in the site footer. Withdrawing stops future processing; it does not undo what was lawful beforehand.
  • Data minimisation and erasure. We keep personal data only while the purpose or a legal obligation requires it, and erase it after that.
  • Reasonable security safeguards. Access is restricted to the people who need it, transport is encrypted, and administrative systems sit behind authentication and role-based permissions.
  • Breach reporting. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected individuals as the Act requires.
  • Children’s data. This site and our services are directed at businesses, not children. We do not knowingly collect the personal data of anyone under 18, and we do not run tracking or targeted advertising at children.

[PLACEHOLDER — counsel to confirm this section, name the Data Protection Officer or grievance officer with contact details as required, and confirm whether any significant-data-fiduciary obligations apply.]

How long we keep data

Enquiry records are retained for as long as needed to serve the relationship and meet legal obligations. [PLACEHOLDER — confirm retention periods.]

Sharing

Data is processed by the service providers that run our infrastructure (hosting, analytics, CRM, messaging). [PLACEHOLDER — list actual processors at launch.] We share data with no one else except where the law requires.

Client confidentiality

Delivering a project usually means we are trusted with things that are not ours: access to a client’s analytics, ad accounts, CRM, servers or source code, their commercial numbers, their unreleased plans, and sometimes personal data belonging to their own customers. We treat all of it as confidential.

  • It stays with the people doing the work. Access is granted on a need-to-know basis, for as long as the work needs it, and revoked when it ends.
  • We do not disclose a client’s data or documents to anyone outside the engagement, except to a sub-processor the client has agreed to, or where the law compels us.
  • We do not publish a client’s results, name or logo without written permission. That is why the results on our portfolio pages appear only once the client has approved the exact figures and wording.
  • Credentials are never shared in plain text and are not kept after they stop being needed.
  • A client’s data is theirs. On request at the end of an engagement, we return or delete it, and confirm in writing what was done.
  • Confidentiality survives the engagement. Our obligations continue after a project finishes, and are set out in the agreement signed with each client.

Where we process personal data on a client’s behalf, we do so only on their documented instructions and under the terms of the contract between us, as a Data Processor rather than a Data Fiduciary.

Your rights

Under the DPDP Act you may ask us to confirm what personal data of yours we hold and what we have done with it; to correct, complete or update anything inaccurate; to erase data we no longer need; and to nominate someone to exercise these rights on your behalf if you die or become incapacitated. You may also withdraw consent at any time. Write to info@dawkiinfotech.com and we will respond within the timeframe the Act sets.

If you are not satisfied with how we have handled a request, you may raise a grievance with us first, and then with the Data Protection Board of India. [PLACEHOLDER — counsel to confirm grievance officer name, designation and contact.]

Cookies

See our Cookie Policy for what is set and how to control it.