Privacy Policy

1. Introduction and Scope

Drivesync Infotech Pvt Ltd ("Drivesync Infotech", "we", "our", or "us") operates the website https://www.drivesyncinfotech.com/. We are committed to protecting the personal privacy of visitors, business partners, prospective clients, and individuals who interact with us through our digital touchpoints.

This Privacy Policy explains how we collect, use, process, retain, and safeguard personal information when you browse our website, reach out via our contact and enquiry forms, or correspond with our business teams. We handle personal information in accordance with applicable data protection laws, including India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

2. Information We Collect

We collect information you directly provide to us, as well as limited technical data generated when you access our website:

A. Information You Submit Directly

• Contact & Enquiry Forms: When you submit an enquiry through our contact forms, we collect your full name, email address, subject line, and the message content you provide.
• Direct Communications: If you contact us via email (info@drivesyncinfotech.com), telephone (+91 9276823237), or WhatsApp, we receive your contact details and any contextual business information shared during the correspondence.

B. Automatically Generated Technical Data

• Server Log Data: When visiting our website, our hosting web server automatically records basic technical request data. This includes your IP address, browser type, operating system, referring URL, pages viewed, and the date/time of access. This data is processed strictly for technical diagnostics, DDoS prevention, and server security.

3. Purposes and Lawful Grounds for Processing

We process your personal information only for legitimate, transparent business purposes, including:

• Responding to Enquiries: Communicating with you regarding your requests for information on our Edge Data Centers, 5G deployments, EV charging infrastructure, cybersecurity solutions, or commercial operating models (EPC and BOOT). (Lawful ground: Legitimate business interest / steps taken at your request prior to entering into a contract / voluntary consent)
• Client Relationship & Contract Administration: Conducting ongoing business communications, project coordination, and technical consultations. (Lawful ground: Performance of a contract or legitimate business interest)
• Infrastructure Security: Monitoring website health, mitigating denial-of-service attempts, and ensuring system integrity. (Lawful ground: Compliance with legal obligations and legitimate interest in network security)
• Legal Compliance: Meeting statutory reporting and record-keeping requirements under applicable laws and regulations. (Lawful ground: Legal obligation)

We do not sell, rent, or trade your personal information to third parties for commercial advertising or third-party marketing.

4. How Information is Received, Stored, and Processed

When you submit a message through the Contact Us form, the data is transmitted over secure HTTPS to our configured Google Apps Script web endpoint. From there, enquiries are delivered to designated internal mailboxes and operational spreadsheets accessible strictly to authorized team members responsible for evaluating and answering client communications.

Physical and digital access to communications is restricted to personnel on a need-to-know basis based on the nature of your project or technical query.

5. Third-Party Processors and Service Providers

We engage reputable service providers to host, maintain, and deliver our digital infrastructure. These processors only receive information necessary to deliver their respective technical functions:

• Hosting Provider (Hostinger): Hosts our static web files, stylesheets, assets, and server configuration. Server logs are managed at the hosting infrastructure layer.
• Form Processing & Workspace (Google / Google Apps Script): Processes incoming contact form submissions and delivers business email notifications.
• Asset Delivery (Cloudflare CDN & Google Fonts): Delivers static font files and icon libraries (Font Awesome) to your browser for rendering. These requests process your browser's public IP address as part of standard HTTP delivery.
• Public Feed Integration (rss2json / Medium): Used strictly on the Insights page to load publicly published technical articles from Medium. No visitor personal data is transmitted.

6. Cookies and Tracking Technologies

We do not deploy non-essential tracking cookies, advertising pixels, or third-party behavioral analytics (such as Google Analytics, Meta Pixel, or marketing tags) on this website.

Browsing our website does not store tracking cookies on your device. Only standard HTTP server session and network protocol data are processed by our hosting web server for security and delivery purposes.

7. Data Retention Practices

We retain personal information only for the duration necessary to satisfy the specific purposes for which it was collected:

• Enquiries & Prospect Correspondence: Retained for the duration of the active consultation and follow-up. Communications that do not lead to a formal engagement are periodically archived or pruned.
• Contractual & Business Records: Where correspondence forms part of a contractual, procurement, or financial relationship, records are retained in accordance with statutory accounting and corporate limitation periods under Indian law.
• Server Logs: Standard web server connection logs are automatically purged or rotated by the hosting provider in accordance with standard infrastructure lifecycle rules.

8. Security Safeguards

We maintain reasonable technical and organizational safeguards designed to protect personal information from unauthorized access, accidental loss, alteration, or disclosure. Data submitted via web forms is transmitted using Transport Layer Security (TLS / HTTPS).

While we implement reasonable safeguards in line with industry practices, please note that no method of electronic transmission or digital storage over the Internet can be guaranteed as entirely invulnerable. We encourage you not to transmit highly confidential credentials or financial secrets via general web forms.

9. Your Data Protection Rights

Subject to applicable law, you hold rights concerning your personal information, including:

• Right to Access: You may request confirmation of whether we process your personal data and request a summary of the data held.
• Right to Correction & Update: You may request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure / Deletion: You may request deletion of personal information where it is no longer required for the purpose for which it was collected, subject to statutory retention requirements.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time for future processing.

To exercise any of these rights, please contact us using the details provided below. We will verify your request and respond within statutory timeframes.

10. Privacy Contact Channel & Grievance Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have an enquiry regarding how your personal information is handled, please contact our Privacy Coordinator / Grievance Officer:

11. Updates to this Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. The updated policy will always be published on this page with an updated "Last Updated" date. We encourage you to review this page periodically.