Draft — requires legal review before publication
This document is a working draft and has not yet been approved by legal counsel.
Contents
This Privacy Policy explains how HANARAD PLATFORM PRIVATE LIMITED ("HANARAD", "we", "us") collects, uses, shares and protects personal data when you visit hanaplatform.com or contact us about our services.
We process personal data in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors in the European Economic Area and the United Kingdom, the principles of the General Data Protection Regulation (GDPR).
01Who is responsible for your data
HANARAD PLATFORM PRIVATE LIMITED (CIN U46512GJ2024PTC157221), with its registered office at B3, Goyal Tower, University Road, Panjrapol, Ahmedabad – 380009, Gujarat, India, is the Data Fiduciary under the DPDP Act and the data controller under the GDPR for the personal data described in this policy.
02Personal data we collect
We collect only the data we need to respond to you and to run this website:
- Enquiry details you submit through our contact or quote forms: name, work email, phone number, company name, the service you are interested in, budget range, timeline, project description and your consent choice.
- Communications you send us by email, phone or WhatsApp, and our replies.
- Attribution data sent with an enquiry: the page you submitted it from and any campaign (UTM) parameters in the link you followed.
- Technical data such as IP address, browser type and pages visited, processed by our hosting provider for security and reliability.
- Analytics data, only if you accept analytics cookies. See our Cookie Policy.
03How we use your data
We use personal data to:
- respond to your enquiry and arrange a consultation;
- prepare proposals, quotes and agreements you ask for;
- deliver and support services under a contract with you;
- keep this website secure and prevent spam and abuse;
- understand how the website is used, where you have consented to analytics;
- meet our legal, accounting and regulatory obligations.
04Legal basis for processing
Under the DPDP Act, we process your personal data on the basis of the consent you give (for example, by ticking the consent box on our forms) and, where applicable, for legitimate uses permitted by the Act, such as complying with law.
Under the GDPR, we rely on your consent (analytics cookies and enquiry follow-up), on steps taken at your request before entering into a contract, on performance of a contract, on our legitimate interests in running and securing our business, and on legal obligations.
Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew.
06International transfers
We are based in India, and some of our service providers may process data in other countries. Where data about visitors from the EEA or UK is transferred outside those regions, we rely on appropriate safeguards such as standard contractual clauses. Transfers out of India follow the rules notified under the DPDP Act.
07How long we keep data
We keep enquiry data for as long as needed to respond and to follow up on a potential engagement, and then delete or anonymise it unless you become a client. Client records are kept for the duration of the engagement and afterwards for as long as required by tax, accounting and other laws.
08How we protect your data
We apply the same security standards we use for client software: encrypted connections (HTTPS), server-side validation, role-based access with least privilege, secrets kept out of source code, and regular updates. No system is perfectly secure, but we work to prevent unauthorised access, loss or misuse, and we will notify affected people and authorities of a personal data breach where the law requires it.
09Your rights
Under the DPDP Act, you have the right to access a summary of your personal data and how it is processed, to correct, complete, update or erase it, to withdraw consent, to nominate another person to exercise your rights in the event of death or incapacity, and to have grievances redressed. If we do not resolve your grievance, you may complain to the Data Protection Board of India.
Under the GDPR, you also have the right to restrict or object to processing, to data portability, and to lodge a complaint with your local data protection supervisory authority.
To exercise any right, email us at business@hanaplatform.com. We may need to verify your identity before acting on a request.
10Children
This website and our services are intended for businesses. We do not knowingly collect personal data from children (under 18 in India, or the age set by local law elsewhere). If you believe a child has sent us personal data, please contact us and we will delete it.
11Changes to this policy
We may update this policy when our practices or the law change. The "Last updated" date at the top shows when it was last revised. Material changes will be highlighted on this page.
12Contact and grievances
For questions about this policy, to exercise your rights or to raise a grievance, contact HANARAD PLATFORM PRIVATE LIMITED at business@hanaplatform.com or write to us at B3, Goyal Tower, University Road, Panjrapol, Ahmedabad – 380009, Gujarat, India.