Privacy Policy

We collect information to provide better services to our clients and website visitors. The types of information we collect depend on how you interact with us.

Information you provide directly:

• Name, business email address, phone number, and company name when you submit an enquiry or contact form
• Project details, requirements, and any files you share with us during a sales or onboarding conversation
• Billing and payment information when engaging our paid services
• Communications you send us via email, phone, or our website chat

Information collected automatically:

• IP address, browser type, operating system, and device information
• Pages visited, time spent on pages, referring URLs, and click paths
• Google Analytics data including session duration and geographic region
• Cookie identifiers and similar tracking technologies

We use the information we collect for the following purposes:

Purpose	Legal Basis
Responding to your enquiries and providing requested services	Contractual necessity
Sending service updates, invoices, and project communications	Contractual necessity
Sending promotional emails about services, case studies, and events	Legitimate interest / consent
Improving our website and understanding user behaviour	Legitimate interest
Complying with applicable laws and regulations in India	Legal obligation
Preventing fraud and ensuring the security of our systems	Legitimate interest

We will never sell your personal data or use it for purposes unrelated to the above without your explicit consent.

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Service providers: Trusted vendors who assist us in operating our website or conducting business — such as email platforms, CRM tools, cloud hosting providers (Microsoft Azure), and analytics providers — under strict data processing agreements
• Microsoft: As a Microsoft Cloud Solution Partner, certain service delivery activities may involve Microsoft platforms and infrastructure subject to Microsoft's privacy commitments
• Legal requirements: Where required by law, court order, or government authority under the Information Technology Act 2000 and applicable Indian regulations
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred as part of that transaction, with advance notice

Our website uses cookies and similar technologies to improve your experience and gather analytical data. We use the following types of cookies:

• Essential cookies: Required for the website to function properly (session management, form security via reCAPTCHA)
• Analytics cookies: Google Analytics (GA4) to understand how visitors interact with our website — this data is aggregated and anonymous
• Marketing cookies: Google Tag Manager events to measure the effectiveness of our content

You can control or disable cookies through your browser settings at any time. Disabling essential cookies may affect website functionality.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

• Enquiry and contact form submissions: up to 3 years from the date of last contact
• Active client records: for the duration of the engagement and 7 years thereafter for accounting and legal purposes
• Website analytics data: 26 months (Google Analytics default)
• Marketing communication records: until you unsubscribe or request deletion

When data is no longer required, we securely delete or anonymise it in accordance with our internal data disposal procedures.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request erasure of your personal data where there is no legitimate reason for us to retain it
• Objection: Object to processing of your personal data for direct marketing purposes
• Portability: Request transfer of your data in a structured, machine-readable format
• Withdraw consent: Withdraw any previously given consent at any time, without affecting the lawfulness of prior processing

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Our security practices include:

• TLS/SSL encryption for all data transmitted through our website and platforms
• Access controls ensuring only authorised staff can access personal data
• Regular security assessments and penetration testing on client-facing systems
• ISO-certified data handling procedures and staff data-protection training
• Microsoft Azure's enterprise-grade security infrastructure for hosted data

While we take all reasonable precautions, no method of internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach affecting your rights, we will notify affected individuals and relevant authorities as required by applicable law.

Our website may contain links to third-party websites, including partner sites, client portals, and social media platforms (LinkedIn, Facebook, Instagram, YouTube). This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit. We accept no responsibility for the privacy practices of third-party websites.

Our services and website are directed at businesses and professional individuals. We do not knowingly collect personal information from children under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at info@shalominfotech.com and we will promptly delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Post a notice on our website homepage for 30 days following a significant change
• Where required by law, notify you directly via email

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our team: