1. Introduction

DigiHaryana ("we", "our", "us") is committed to protecting the personal data and confidential information of our clients, employees, and website visitors. This Data Protection Policy outlines how we collect, process, store, and protect data in compliance with applicable data protection laws.

This policy applies to all data processed by DigiHaryana, including personal data of clients, prospects, employees, contractors, and website visitors.

2. Applicable Regulations

We comply with the following data protection frameworks as applicable to our operations:

Digital Personal Data Protection Act 2023 (DPDP Act) — India
UK General Data Protection Regulation (UK GDPR)
UAE Personal Data Protection Law (PDPL)
California Consumer Privacy Act (CCPA) — United States
General Data Protection Regulation (GDPR) — European Union

3. Data We Collect

Client Project Data: Source code, business requirements, design files, API keys, database schemas, and other technical artifacts shared during project execution.

Personal Data: Names, email addresses, phone numbers, job titles, and company information provided through contact forms, consultations, or project onboarding.

Usage Data: IP addresses, browser type, operating system, pages visited, time spent on pages, and referring URLs collected through analytics tools.

Employee Data: Employment records, qualifications, performance data, and payroll information for team members.

4. How We Protect Your Data

Encryption: All data in transit is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
Access Controls: Role-based access controls limit data access to authorised personnel only. Multi-factor authentication is enforced for all internal systems.
Secure Infrastructure: We use enterprise-grade cloud hosting (AWS, Azure) with SOC 2 Type II compliance, firewall protection, and regular security audits.
Code Repository Security: Client source code is stored in private repositories with branch protection rules and audit logging.
Data Minimisation: We collect only the data necessary for project delivery and business operations.
Regular Audits: We conduct periodic security assessments and vulnerability scans to identify and remediate potential risks.

5. Client Data Handling

During Project: Client data is accessed only by team members assigned to the project. All team members sign NDAs and data confidentiality agreements before accessing client information.

After Project Completion: Upon project completion and final payment, client data is retained for 90 days for warranty support, then securely deleted unless the client requests earlier deletion or ongoing retention under a support agreement.

Data Return: Clients may request return of all their data at any time. We will provide the data in standard, portable formats within 30 days of the request.

6. Third-Party Data Sharing

We do not sell, rent, or trade personal data. We may share data with third parties only in the following circumstances:

With explicit client consent for specific project integrations (e.g., cloud providers, payment gateways)
With sub-processors who have signed data processing agreements and maintain equivalent security standards
When required by law, court order, or regulatory authority
To protect the rights, safety, or property of DigiHaryana, our clients, or the public

7. Data Breach Response

In the event of a data breach, we will:

Contain the breach and secure affected systems immediately
Notify affected clients within 72 hours of becoming aware of the breach
Report to relevant data protection authorities as required by applicable law
Conduct a thorough investigation and implement corrective measures
Provide support and remediation to affected parties

8. International Data Transfers

DigiHaryana operates across India, UAE, UK, USA, Australia, Canada, and Singapore. Data may be transferred between these jurisdictions for project delivery purposes. We ensure appropriate safeguards are in place for all international transfers, including standard contractual clauses and adequacy determinations where applicable.

9. Your Rights

Depending on your jurisdiction, you have the right to:

Access — Request a copy of the personal data we hold about you
Rectification — Request correction of inaccurate or incomplete data
Erasure — Request deletion of your personal data (subject to legal retention requirements)
Restriction — Request restriction of processing in certain circumstances
Portability — Request transfer of your data in a structured, machine-readable format
Objection — Object to processing of your personal data for certain purposes

To exercise any of these rights, contact us at contact@digiharyana.com.

10. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods:

Client project data: 90 days after project completion (unless ongoing support agreement)
Contact form submissions: 12 months from submission
Employee records: Duration of employment + 7 years (as required by Indian labour law)
Analytics data: 26 months (anonymised after 12 months)

11. Cookie and Tracking Data

We use essential cookies for website functionality and analytics cookies (with consent) to understand visitor behaviour. For full details, see our Cookie Policy.

12. Children's Data

Our services are not directed at individuals under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Data Protection Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact Us

For any questions about this Data Protection Policy or to exercise your data rights, contact us at:

Email: contact@digiharyana.com
Phone: +91 98961 62989
Address: S.C.O 19, Diamond Factory, Amar Market, Hansi, Haryana - 125033, India