Effective Date: 26 August 2026
Last Updated: 26 August 2026
1. Introduction
Adri IT Software Solutions Pvt Ltd ("Adri IT Solutions", "we", "us", or "our") is an IT services and technology company committed to protecting your privacy. This Data Privacy Policy explains how we collect, use, store, share, and protect personal data collected through our website (www.adriitsolutions.com), our communications, and the services we provide.
This policy is framed in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the DPDP Rules, 2025, the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
By accessing our website or using our services, you (the "Data Principal") consent to the processing of your personal data as described in this policy.
2. Data We Collect
We may collect the following categories of personal data:
- Identity & Contact Data: Full name, email address, phone number, company name, and designation.
- Usage & Technical Data: IP address, browser type, device information, pages visited, and session duration.
- Communication Data: Messages, inquiries, and project briefs you share with us voluntarily.
- Business Data: Organisation details, industry, and project requirements.
- Financial Data: Invoice and payment records (clients only, processed via secure payment channels).
We do not collect sensitive personal data such as biometrics, health information, or financial credentials without your explicit consent.
3. Purpose of Data Collection
We process your personal data for the following purposes:
- Providing IT, software development, and automation services
- Managing client communications and projects
- Sending newsletters and marketing communications (only with your consent)
- Website analytics and service improvement
- Compliance with legal and statutory obligations
4. Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: For marketing communications and non-essential cookies.
- Contractual Necessity: To fulfil service agreements with our clients.
- Legitimate Use / Legal Obligation: For regulatory and statutory compliance.
- Legitimate Uses under the DPDP Act: Such as employment-related purposes and compliance with law.
5. Data Sharing & Third Parties
We do not sell your personal data. We share personal data only with:
- Trusted service providers (such as cloud hosting, analytics, email delivery, and project management platforms)
- Payment processors, where applicable
- Legal or government authorities, when required by law
- Successors in the event of a merger, acquisition, or business transfer
All third parties processing data on our behalf are bound by agreements that require a level of data protection equivalent to this policy.
6. Cross-Border Data Transfers
Some of our service providers may process data on servers located outside India. Such transfers are made only to territories permitted under the DPDP Act and applicable government notifications, with appropriate safeguards in place.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Once the purpose is fulfilled or the retention period expires, data is securely deleted or anonymised, unless a legal obligation requires us to retain it.
Backup copies may temporarily remain in our systems but are not actively processed. Deletion requests are processed in a timely manner, subject to legal requirements.
8. Your Rights as a Data Principal
Under the DPDP Act, 2023, you have the right to:
- Access: Confirm whether we process your data and obtain a summary of it.
- Correction: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your data, subject to legal retention obligations.
- Grievance Redressal: Raise a complaint and receive a response within 30 days.
- Nominate: Designate another individual to exercise your rights in the event of death or incapacity.
- Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at contact@adriitsolutions.com.
9. Consent Management
When you first visit our website, you are shown a consent notice specifying the purposes for which data is collected. You may accept or decline non-essential processing. You can withdraw your consent at any time by contacting us or by updating your cookie preferences.
10. Security Safeguards
We implement reasonable technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for data in transit
- Access controls and authentication
- Regular security reviews
- Data minimisation and pseudonymisation where feasible
11. Cookies
Our website uses the following types of cookies:
- Essential Cookies: Required for website functionality (no consent needed).
- Analytics Cookies: Help us understand website usage (consent required).
- Marketing Cookies: Used for retargeting and campaign tracking (consent required).
You can manage cookies through our cookie banner or your browser settings.
12. Children's Data
Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors without verifiable consent of a parent or lawful guardian. If we learn that we have collected a child's data without such consent, we will delete it promptly.
13. Anti-Spamming Policy
We send marketing communications only with your express consent. Every marketing message includes a clear opt-out mechanism. We do not sell, rent, or share your contact information with third parties for their marketing purposes without your explicit permission.
14. Grievance Redressal
If you have any questions, concerns, or complaints regarding this policy or the handling of your personal data, please contact our Grievance Redressal team:
- Email: contact@adriitsolutions.com
- Address: 504, Meraki Latitude, Old Padra Rd, Near Dev Deep Nagar, Vadodara 390007, India.
- Response Time: Within 30 days of receiving the grievance.
If your grievance is not resolved satisfactorily, you may escalate it to the Data Protection Board of India.
15. Policy Updates
We may update this Data Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
16. Governing Law
This policy is governed by the laws of India, including the DPDP Act, 2023 and the Information Technology Act, 2000. Any disputes arising out of this policy shall be subject to the exclusive jurisdiction of the courts of Vadodara, Gujarat.