Privacy Policy

1. Who We Are

Swarn Solutions ("we", "our", or "us") is a software development company registered and operating from:

2. Scope & Applicability

This policy applies to all personal data processed by Swarn Solutions through this website (swarnsolutions.com), including data collected via contact forms, newsletter subscriptions, and inquiry submissions. This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

3. Personal Data We Collect

We collect only the minimum data necessary ("data minimisation") for the purposes stated below:

We do not collect sensitive personal data (Aadhaar, financial data, health records, biometric data, caste, religion, or political opinion).

4. Legal Basis for Processing (DPDP Act 2023 — Section 4)

We process your personal data on the following lawful bases:

• Consent — You voluntarily submit your contact form or subscribe to our newsletter.
• Legitimate Interest — Responding to business enquiries and maintaining service security.
• Legal Obligation — Complying with applicable Indian laws and orders from competent authorities.

5. Your Rights as a Data Principal (DPDP Act 2023 — Chapter III)

Under the DPDP Act 2023, you (the "Data Principal") have the following rights:

• ✅ Right to Access — Request a summary of personal data we hold about you.
• ✅ Right to Correction & Erasure — Request correction or deletion of your personal data.
• ✅ Right to Withdraw Consent — Withdraw consent at any time; processing prior to withdrawal remains lawful.
• ✅ Right to Grievance Redressal — Lodge a complaint with our designated Data Protection Officer.
• ✅ Right to Nominate — Nominate another person to exercise rights on your behalf in the event of death or incapacity.

To exercise any right, email us at: akshay.rbu@gmail.com with subject line "DPDP Data Request". We will respond within 30 days.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Data may be shared only with:

• Hosting Provider (MilesWeb) — For server infrastructure and uptime. They are bound by their own data processing agreements.
• Email (Gmail/SMTP) — For sending notifications. Only your email address is shared with this service.
• Legal Authorities — When required by law, court order, or government directive under Indian law.

7. Cross-Border Data Transfer

Currently, all data is stored on servers located within India. Any future cross-border transfer will comply with the Central Government's approved transfer framework under Section 16 of the DPDP Act 2023.

8. Security Measures

We implement the following technical and organisational security measures:

• HTTPS/TLS encryption across all pages
• Prepared SQL statements to prevent SQL injection
• CSRF token validation on all forms
• Rate limiting on API endpoints
• Session cookies marked HttpOnly, Secure, SameSite=Strict
• Strict Content Security Policy (CSP) headers
• HTTP Strict Transport Security (HSTS)
• Cloud hosting and infrastructure providers necessary to operate the site (located in India/EU/US under data protection agreements).
• Legal authorities when required by applicable Indian law.

7. Data Security (IT Act Section 43A)

We implement reasonable security practices including TLS 1.3 encryption, secure HTTP headers, HSTS, and regular security audits to protect your data against unauthorised access.

8. Cookies

We use only essential cookies required for session security (CSRF protection). We do not use third-party tracking or advertising cookies. For details, see our Cookie Policy.

9. Children's Data (DPDP Act Section 9)

Our website and services are not directed at minors (under 18). We do not knowingly collect personal data of children.

10. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights, we will notify the Data Protection Board of India (once constituted under the DPDP Act 2023) and affected individuals as required by law, within the timeframe prescribed by the Board.

11. Grievance Officer

As required under the DPDP Act 2023 and Rule 7 of the IT (Amendment) Rules:

12. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be notified via a notice on the homepage. Continued use of our website after such changes constitutes acceptance of the updated policy.