Privacy Policy

iSKEL Tech Solutions Private Limited ("iSKEL", "we", "us") provides business software and related services. This policy explains what we do with personal data when you visit iskeltechsolutions.com or get in touch with us.

We are the data fiduciary (the term used by India's Digital Personal Data Protection Act, 2023) for the data described here. Where we handle data on behalf of a customer inside one of our products, that customer is the fiduciary and we act on their instructions — see Data we handle for our customers.

What we collect

When you fill in the contact form

This is the only place on the site where we ask you for personal data:

We use it for one purpose: to answer you, and to carry on the conversation if it turns into a commercial discussion. It is recorded as an enquiry in our own business system. We do not add you to a marketing list off the back of an enquiry, and we do not pass it to anyone else.

When you simply browse

We run no analytics and set no tracking cookies, so ordinary browsing is not logged against you as an individual. Our servers keep short-lived technical logs — the kind every web server keeps — recording the page requested, the time, the browser's own description of itself, and the IP address it came from. These exist to keep the service running and secure.

We do one thing with those logs beyond keeping them. A few minutes after a visit, our server asks a lookup service which city and which network the IP address belongs to, and stores that alongside the log entry. It tells us which places our work is read in, and it separates real readers from the crawlers and scanners that make up much of any website's traffic. It is coarse by nature — on a mobile network the answer is usually the operator's regional gateway, not where you are — and we do not join it to anything that identifies you.

When you sign in

If you hold an account with us, signing in sets session cookies so the site knows it is still you between pages. These are listed in full in our Cookie Policy.

What we deliberately do not collect

• No advertising or cross-site tracking identifiers.
• No analytics or behavioural profiling.
• No purchase or sale of personal data, in either direction.
• No sensitive categories — health, biometrics, political or religious views — are ever requested by this website.

Why we are allowed to use it

Under the Digital Personal Data Protection Act, 2023 we rely on your consent: you choose to fill in the form and send it. For visitors in the European Economic Area and the United Kingdom, where the GDPR applies, our bases are:

Consent — Article 6(1)(a)

For optional cookies, and for any marketing message you specifically ask to receive.

Steps prior to entering a contract — Article 6(1)(b)

For responding to an enquiry about our products or services.

Legitimate interests — Article 6(1)(f)

For keeping the service secure and available, and for keeping records of our business dealings. We have weighed this against your interests and consider the impact minimal, since no profiling is involved.

You may withdraw consent at any time. Doing so does not undo processing that already, lawfully, happened.

How long we keep it

Enquiries are kept for 36 months from your last contact with us, unless you ask us to erase it sooner. We keep them that long because a business conversation often restarts after a long gap, and it is unhelpful to both sides to have lost the history. Records we are required by Indian law to retain — invoices and accounting records, for example — are kept for the period that law specifies, regardless of any deletion request.

Server logs, including the IP address and the city looked up from it, are deleted automatically after 30 days. Your cookie choice is kept for 12 months, after which we ask again.

Who else sees it

We do not sell personal data, and we do not share it for anyone else's marketing. Data reaches a third party only in these situations:

• Infrastructure providers who host our servers and deliver our email, acting on our instructions and bound to confidentiality.
• Nobody, for content delivery. Every file this site loads — stylesheets, scripts, typefaces, icons — comes from our own servers, so no CDN or font provider sees your IP address. Your browser contacts nobody but us.
• An IP lookup service, which receives an IP address from our server logs — and nothing else — so we can record the approximate city and network a visit came from. We send it; your browser never contacts them. Named in full in our Cookie Policy.
• Professional advisers — accountants, auditors, lawyers — where they need it and are under a duty of confidence.
• Authorities, where we are legally compelled. We will tell you unless we are prohibited from doing so.

Where your data goes

We are based in India and your data is principally handled there. Some of the services above operate internationally, so data may be processed outside your country. Where data covered by the GDPR leaves the EEA, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Your rights

Under the DPDP Act you have the right to:

• Access — a summary of the personal data we hold about you and what we do with it.
• Correction and erasure — to have inaccurate data fixed and data we no longer need deleted.
• Grievance redressal — to complain to us and receive an answer.
• Nominate — to name someone to exercise these rights if you die or become incapacitated.

If the GDPR applies to you, you additionally have the right to:

• Portability — to receive your data in a machine-readable format.
• Restriction and objection — to limit or object to processing based on legitimate interests.
• Withdraw consent at any time, as easily as you gave it.
• Complain to a supervisory authority in the country where you live or work.

To exercise any of these, write to contact@iskeltechsolutions.com. We do not charge for this and we will respond within 30 days. We may need to confirm who you are before we hand over data about you — which is itself a protection for you.

How we protect it

The site is served over HTTPS. Access to enquiry records is restricted to people who need it, protected by individual accounts rather than shared passwords. We keep our platform patched and take backups.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to cause you harm, we will notify you and the Data Protection Board of India as the DPDP Act requires, and — where the GDPR applies — the relevant supervisory authority within 72 hours.

Data we handle for our customers

Separately from this website, our customers run our products and put their own data into them — their employees, their patients, their students, their customers. For that data we are not the fiduciary: our customer is, and we act only on their documented instructions, under our services agreement and, where required, a data processing agreement.

If you are asking about data held inside a system operated by one of our customers, approach that organisation first. We will support them in responding, but we cannot release their data to a third party on our own initiative.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18 through this site. Under the DPDP Act, processing a child's data requires verifiable parental consent; if you believe a child has sent us personal data, tell us and we will delete it.

Changes to this policy

When this policy changes we update the date shown at the top of the page. Where a change materially affects how we use your data, we will do more than change a date — we will tell you directly, or ask for consent again.

Contacting us

For any privacy question, request or complaint, write to contact@iskeltechsolutions.com. If you are not satisfied with our answer, you may complain to the Data Protection Board of India, or — if the GDPR applies to you — to your local supervisory authority.