This Privacy Policy describes how GAYOTEK ("we", "our", "us") collects, uses, discloses and safeguards your information when you visit our website https://gayotek.com (the "Site") or engage our services. We are committed to protecting your privacy and handling your data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and other applicable laws.
1. Information We Collect
We collect information you provide to us directly, information collected automatically through your use of the Site, and information from third parties where applicable.
1.1 Information You Provide
- Contact details — name, email address, phone number, company name, message content (when you submit a contact form or email us).
- Project information — descriptions, requirements and other materials shared during a project engagement.
- Billing details — limited to what's required for invoicing (we do not store payment card numbers on our servers).
1.2 Information Collected Automatically
- Log data — IP address, browser type, operating system, referring URLs, pages visited, timestamps.
- Cookies and similar technologies — used for basic site functionality, performance measurement and analytics.
- Device data — screen size, device type, language preference.
1.3 Information from Third Parties
If you reach us through a social network or referral platform, we may receive limited profile information shared by that platform under your settings.
2. How We Use Your Information
We use collected information for the following purposes:
- Responding to your enquiries and providing requested services.
- Delivering, maintaining and improving our website and services.
- Sending project updates, invoices and service-related communications.
- Analytics, monitoring traffic patterns and improving content.
- Detecting, preventing and addressing fraud, security incidents or abuse.
- Complying with legal obligations and enforcing our agreements.
- With your consent, sending occasional marketing or newsletter communications (you can opt out at any time).
3. Legal Basis for Processing
We process personal data on the following legal bases:
- Your consent — when you submit a form or subscribe to communications.
- Contractual necessity — to deliver services you have engaged us for.
- Legitimate interests — for analytics, security and improving our offerings.
- Legal compliance — when required by applicable law.
4. Cookies & Tracking Technologies
The Site uses a minimal set of cookies for the following purposes:
- Strictly necessary cookies — required for the site to function (session, CSRF tokens).
- Analytics cookies — Google Analytics or similar, only when enabled, to understand aggregate site usage.
- Functional cookies — to remember preferences such as language or theme.
You can control or disable cookies in your browser settings. Disabling strictly necessary cookies may affect site functionality.
5. How We Share Your Information
We do not sell, rent or trade your personal data. We may share data with:
- Service providers — hosting, email delivery, analytics platforms — under strict confidentiality.
- Legal authorities — when required by law, court order or to protect our rights.
- Business transfers — in the event of merger, acquisition or sale of assets, your data may be transferred under equivalent protection.
All third-party processors are bound by contractual obligations to safeguard your information.
6. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Contact form submissions are typically retained for up to 24 months. Project records are retained for the duration of the engagement and up to 7 years thereafter for compliance and accounting purposes.
7. Data Security
We implement industry-standard administrative, technical and physical safeguards to protect personal data, including:
- HTTPS / TLS encryption for all data in transit.
- Parameterised database queries to prevent SQL injection.
- Role-based access control (RBAC) for all internal systems.
- Regular security patches and vulnerability monitoring.
- Backup and disaster recovery procedures.
However, no internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Your Rights
Subject to applicable law (including the DPDP Act 2023 in India and the GDPR for EU residents), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request that we correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data, subject to legal retention requirements.
- Withdraw consent — withdraw consent previously given for processing.
- Object — object to processing based on legitimate interests or direct marketing.
- Portability — receive your data in a structured, commonly used format.
- Grievance redressal — raise concerns about data handling with our Data Protection Officer.
To exercise any of these rights, contact us at info@gayotek.com. We will respond within statutory timelines.
9. Children's Privacy
Our Site and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
10. International Data Transfers
Your information may be processed in countries other than your country of residence, including countries that may not have the same data protection laws. Where required, we implement appropriate safeguards such as standard contractual clauses.
11. Third-Party Links
Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those parties. We encourage you to read the privacy policies of any third-party site you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects when changes were made. Material changes will be communicated via the Site or by email where appropriate. Your continued use of the Site after changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, requests or concerns regarding this Privacy Policy or our data practices, please contact us at:
- Email: info@gayotek.com
- Phone / WhatsApp: +91 72497 60408
- Address: GAYOTEK, Mumbai, Maharashtra, India
By using our Site or services, you acknowledge that you have read, understood and agree to this Privacy Policy.