Privacy Policy

When you visit our website, fill out a contact form, engage with our services, or communicate with our team, we may collect the following categories of information:

Information You Provide Directly

• Full name, email address, phone number, and company name when you submit our contact or quote form.
• Project details, budget range, and description you voluntarily share in messages.
• Communication records when you email or call us.
• Testimonials or feedback you submit publicly or via survey.

Information Collected Automatically

• IP address, browser type, operating system, and device identifiers.
• Pages visited, time spent, scroll depth, and click interactions via analytics tools.
• Referring URLs and exit pages.
• Cookie identifiers and session tokens (see Section 4).

We use the information we collect for the following purposes:

We process your personal data only when we have a valid legal basis. Under the Information Technology (Amendment) Act 2008, the IT Rules 2011, and applicable global privacy frameworks, our legal bases are:

• Consent — where you have expressly opted in to receive marketing or submitted a form voluntarily.
• Contract — where processing is necessary to deliver the services you've engaged us for.
• Legitimate Interest — where we have a genuine business reason (e.g., fraud prevention, improving our website) that doesn't override your rights.
• Legal Obligation — where we are required by law to retain or disclose data (e.g., tax records, court orders).

Our website uses cookies and similar tracking technologies to enhance your experience and understand how visitors use our site. A cookie is a small text file stored on your device.

You can manage or withdraw cookie consent at any time through your browser settings. Blocking essential cookies may affect site functionality. For Google Analytics opt-out, visit tools.google.com/dlpage/gaoptout.

We do not sell your personal data. We may share it with trusted service providers who process it on our behalf under strict contractual obligations:

• Email & CRM: We use email platforms to manage enquiries and client communications.
• Analytics: Google Analytics (Google LLC, USA) — data is pseudonymised and processed under the Google Analytics Data Processing Amendment.
• Cloud Hosting: Our website is hosted on secure cloud infrastructure (AWS/GCP) in data centres with appropriate safeguards.
• Payment Processors: If applicable during service delivery, payments are handled by PCI-DSS compliant processors. We never store raw card data.
• Legal Authorities: We may disclose data when required by a valid legal order, court order, or regulatory requirement.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Our standard retention periods are:

• Website enquiry data — 3 years from date of last contact.
• Active client data — Duration of the engagement plus 5 years for contractual and audit purposes.
• Marketing opt-in records — Until consent is withdrawn, plus 1 year thereafter.
• Financial / invoicing records — 7 years as required by Indian tax law.
• Website analytics — 26 months (Google Analytics default).

When data is no longer needed, it is securely deleted or anonymised so it can no longer be linked to an individual.

Depending on your location and applicable law, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days.

To exercise any of these rights, email us at privacy@rdktechnologies.com with subject line "Data Rights Request" and proof of identity. We will never charge a fee for legitimate requests.

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• All data transmitted via our website is encrypted using TLS 1.2+ (HTTPS).
• Access to personal data is restricted on a need-to-know basis with role-based access controls.
• Our servers are hosted in ISO 27001-certified data centres with 24/7 monitoring.
• We conduct regular security audits and vulnerability assessments.
• Employees handling personal data undergo mandatory privacy and security training.
• In the event of a data breach, we will notify affected individuals within 72 hours where required by law.

RDK Global Technologies is headquartered in Bhilai, Chhattisgarh, India. We may transfer your data to countries outside India for service delivery (e.g., cloud infrastructure in the US or EU). Where such transfers occur:

• We ensure the recipient country offers an adequate level of protection, or
• We implement appropriate safeguards such as Standard Contractual Clauses (SCCs), or
• We obtain your explicit consent where required.

We primarily use AWS and GCP infrastructure, both of which maintain comprehensive data protection certifications including ISO 27001, SOC 2, and GDPR compliance programmes.

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@rdktechnologies.com and we will promptly delete such data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on our website.
• Send an email notification to existing clients and subscribers where the changes are significant.

We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: