1. Introduction
CompleteDigi Technology Solutions ("CompleteDigi", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website completedigi.com or engage with our services.
We process personal data in accordance with the Information Technology Act, 2000 (India), the Digital Personal Data Protection Act, 2023 (DPDPA), and, where applicable, the EU General Data Protection Regulation (GDPR).
By using our website or services, you agree to this Privacy Policy. If you disagree, please discontinue use of our services immediately.
2. Data We Collect
2.1 Information You Provide Directly
- Contact information: Name, email address, phone number, company name when you submit contact forms or request a consultation
- Communication data: Messages, emails, and other communications you send us
- Career data: Resume, work history, and application information when you apply for a position
- Contract data: Business address, billing information, and contractual documents (for clients)
2.2 Information Collected Automatically
- Usage data: Pages visited, time spent, referring URLs, click patterns
- Device data: IP address, browser type, operating system, device identifiers
- Cookie data: Preferences and session data (see Section 8)
- Log data: Server logs including access time, error logs, and performance data
2.3 Information from Third Parties
- Analytics providers (Google Analytics 4)
- Advertising platforms (Google Ads, LinkedIn)
- CRM and communication tools (for managing client relationships)
3. How We Use Your Data
We use the personal information we collect for the following purposes:
- Service delivery: To provide, maintain, and improve our software development and consulting services
- Communications: To respond to inquiries, send project updates, and provide customer support
- Marketing: To send newsletters, case studies, and promotional content (with your consent)
- Analytics: To understand how our website is used and improve user experience
- Legal compliance: To comply with applicable laws, court orders, and regulatory obligations
- Security: To detect, investigate, and prevent fraudulent transactions and abuse
- Recruitment: To evaluate job applications and manage the hiring process
We rely on the following legal bases for processing (GDPR Article 6): Contract performance (client engagements), Legitimate interests (analytics, security), Consent (marketing emails), and Legal obligation (tax records, regulatory filings).
4. Data Sharing
We do not sell your personal data. We may share it with:
- Service providers: Cloud infrastructure (AWS, GCP), email platforms, CRM tools, and analytics providers under data processing agreements
- Professional advisors: Lawyers, accountants, and auditors under confidentiality obligations
- Law enforcement: Government or regulatory authorities when required by applicable law
- Business transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)
- Client engagements: Sub-contractors who assist in delivering our services, bound by equivalent confidentiality obligations
5. Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required by law:
- Client data: 7 years after contract termination (for tax and audit purposes)
- Marketing leads: Up to 3 years, or until you unsubscribe
- Website analytics: 26 months (Google Analytics default)
- Job applicants: 12 months if not hired (with your consent), or until you request deletion
- Server logs: 90 days
6. Data Security
We implement industry-standard technical and organisational measures to protect your personal data:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access controls and least-privilege principles
- Regular security audits and penetration testing
- SOC 2 Type II compliant infrastructure providers
- Employee security training and confidentiality agreements
Despite these measures, no internet transmission or storage system is 100% secure. If a data breach occurs that affects your rights, we will notify you in accordance with applicable law (within 72 hours under GDPR Article 33).
7. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten") where no legal basis for continued processing exists
- Portability: Request your data in a machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Restriction: Request that we limit processing of your data in certain circumstances
- Withdraw Consent: Withdraw consent at any time for consent-based processing (e.g., marketing emails)
- Complaint: Lodge a complaint with your national data protection authority
To exercise any of these rights, contact us at privacy@completedigi.com. We will respond within 30 days.
8. Cookies
We use cookies and similar tracking technologies. For full details, please read our Cookie Policy. You can manage cookie preferences through your browser settings or our cookie banner.
9. International Data Transfers
Our primary operations are in India. If you access our services from the EU/EEA, your data may be transferred to and processed in India. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions where available to safeguard such transfers.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, contact us at privacy@completedigi.com and we will delete it promptly.
11. Policy Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, notify you by email or prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, data subject requests, or complaints:
- Email: privacy@completedigi.com
- Address: CompleteDigi Technology Solutions, Brigade Tech Park, Whitefield, Bangalore 560066, India
For EU/EEA residents: If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local supervisory authority.