Privacy Policy

This privacy policy notice is for www.cybertech.com and its applications, operated by CyberTech (“CyberTech”, “we”, “us”, or “our”), and governs the privacy of those who use it. This page explains how we collect, use, disclose, and protect personal data when you use our Service, and the rights available to you under the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), together with any other applicable law.

We process personal data to provide and improve the Service. By using the Service and providing your consent where required, you agree to the collection and use of information in accordance with this policy.

Key Definitions

  • “We”, “our”, “us”, or “CyberTech” refers to the business, CyberTech, which is the “Data Fiduciary” under the DPDPA. This entity determines the purpose and means of processing your personal data.
  • “You” or “the user” refers to the person using this website or application, referred to as the “Data Principal” under the DPDPA.
  • “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
  • “Processing” means any operation performed on personal data, including collection, storage, use, sharing, and erasure.
  • “Consent Manager” means a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review, and withdraw consent through an accessible, transparent platform.

Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Cookies and Usage Data

 

Usage Data

We may also collect information on how the Service is accessed and used (“Usage Data”). This may include your device’s Internet Protocol (IP) address, browser type and version, the pages of our Service you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are sent to your browser from a website and stored on your device. We also use other tracking technologies such as beacons, tags, and scripts to collect and track information and to improve and analyse our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Where cookies or trackers are used to process personal data, we will seek your consent in accordance with the section on Consent below.

How We Use Your Personal Data

Under the DPDPA, we may process your personal data only for the purpose for which you have given consent, or for a “legitimate use” recognised under the Act (such as a purpose for which you have voluntarily provided data and have not indicated that you do not consent or where required to comply with a legal obligation or court order). We use the personal data we collect for the following purposes:

  • To provide and maintain the Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer care and support
  • To provide analysis or valuable information so that we can improve the Service
  • To monitor the usage of the Service
  • To detect, prevent, and address technical issues

We limit the personal data we collect to what is necessary for these specified purposes, in line with the DPDPA’s data minimisation principle.

Notice and Consent

Before we request your consent, or as soon as reasonably practicable thereafter, we will provide you with a notice, in clear and plain language, describing:

  • The personal data we intend to collect and the purpose of processing it
  • The manner in which you may exercise your rights under the DPDPA
  • The manner in which you may make a complaint to the Data Protection Board of India

Where we rely on your consent as the basis for processing, that consent will be free, specific, informed, unconditional, and unambiguous, given through a clear affirmative action, and limited to the personal data necessary for the specified purpose. You may withdraw your consent at any time, with the same ease with which it was given, by contacting us at connect@cybertech.com. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and where required for a service you have requested, we may no longer be able to provide that service.

Where a Consent Manager registered with the Data Protection Board of India becomes available for our Service, you may also give, manage, review, or withdraw your consent through that Consent Manager.

Disclosure of Personal Data

We may disclose your personal data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of CyberTech
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Protect against legal liability

Storage and Cross-Border Transfer of Personal Data

Your personal data may be stored and processed on servers located outside India. The DPDPA permits the transfer of personal data outside India, except to countries or territories that the Central Government of India may, by notification, restrict. We will not transfer your personal data to any such restricted country or territory.

Where your personal data is transferred outside India, we take reasonable steps to ensure it continues to be treated securely and in accordance with this Privacy Policy and applicable law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Where you withdraw consent or your purpose for which data was collected is no longer being pursued and retention is not otherwise required by law, we will erase your personal data, or cause our data processors to erase it, within a reasonable period, unless retention is necessary for compliance with a legal obligation.

Data Security

We implement reasonable security safeguards, including organisational, technical, and physical measures, appropriate to the nature of the personal data we hold, to protect it against unauthorised access, disclosure, alteration, or destruction, and to detect and report any personal data breach as required under the DPDPA.

Children’s Data and Persons with Disability

Our Service does not knowingly address, or intentionally collect personal data from, anyone under the age of 18 (“Child”) without verifiable consent from a parent or lawful guardian. Where we become aware that a Child has provided personal data without such verified consent, we will take steps to delete that information. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

Where personal data belongs to a person with a disability who has a lawful guardian, we will process such data only with the verifiable consent of that lawful guardian, in accordance with the DPDPA.

If you are a parent or guardian and believe your child has provided us with personal data without your verifiable consent, please contact us at connect@cybertech.com.

Your Rights as a Data Principal

Subject to the DPDPA and applicable exemptions, you have the right to:

  • Obtain a summary of the personal data we hold about you and the processing activities carried out on it
  • Request correction, completion, updating, or erasure of your personal data
  • Withdraw your consent at any time, as described above
  • Nominate another individual to exercise your rights under the DPDPA in the event of your death or incapacity
  • Have your grievances addressed through our grievance redressal mechanism before approaching the Data Protection Board of India
  • Ask us not to process your personal data for marketing purposes; we will inform you before collecting your data if we intend to use it for such purposes, or before disclosing it to a third party for such purposes

You may exercise these rights or apply for a copy of the personal data we hold about you, by contacting us at connect@cybertech.com.

Nomination

In accordance with the DPDPA, you have the right to nominate another individual who shall, in the event of your death or incapacity, be entitled to exercise your rights as a Data Principal under this Privacy Policy and the DPDPA. You may register, update, or withdraw such nomination at any time by writing to us at connect@cybertech.com.

When registering a nomination, you will be required to provide the name and contact details of your nominee. Before allowing a nominee to exercise your rights, we will take reasonable steps to verify the nominee’s identity and the fact of your death or incapacity, in accordance with applicable law.

Grievance Redressal

If you have any grievance regarding the processing of your personal data, you may contact our Grievance Officer at:

  • Grievance Officer / Data Protection Officer: 
  • Email: dpo@cybertech.com
  • Address: CyberTech House, B-63/64/65, MIDC, Road No. 21/34, Wagle Estate (Opposite J.B. Sawant Bus Depot), Thane West, 400604.

We will endeavour to acknowledge and resolve your grievance within the timelines prescribed under the DPDP Rules. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

Personal Data Breach Notification

In the event of a personal data breach that affects you, we will notify you and the Data Protection Board of India as required under the DPDPA, describing the nature, extent, and likely impact of the breach, along with the measures taken or proposed to mitigate the risk.

Analytics

We may use third-party service providers to monitor and analyse the use of our Service.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service, and this data may be shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

You can opt out of having your activity on the Service made available to Google Analytics by installing the Google Analytics opt-out browser add-on, which prevents the Google Analytics JavaScript from sharing information about your visit.

For more information on Google’s privacy practices, please visit: https://policies.google.com/privacy?hl=en

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law, including further phases of the DPDPA and DPDP Rules as they come into force. We will notify you of material changes by posting the updated Privacy Policy on this page. You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights as a Data Principal, please contact us at connect@cybertech.com.