Privacy Policy

Octakris IT Solutions LLP Effective Date: May 27, 2026 Website: octakris.com

1. Introduction

Octakris IT Solutions LLP (“Octakris”, “we”, “us”, “our”) is committed to protecting the privacy of individuals who visit our website or engage our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights in relation to it.

This Policy applies to octakris.com and all interactions related to our consulting and software development services.
We comply with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, and, where applicable, the General Data Protection Regulation (EU) 2016/679 (GDPR).

2. Services

We may collect the following categories of personal data:

Examples

Identity Data

Full name, job title, company name

Contact Data

Email address, phone number, mailing address

Communication Data

Messages sent via contact forms, emails, or calls

Usage Data

IP address, browser type, pages visited, time spent on site

Financial Data

Billing address, invoice details (we do not store card numbers)

Project Data

Requirements, documents, or materials you share with us during an engagement

We do not knowingly collect personal data from individuals under the age of 18.

3. How We Collect Data

We collect personal data through:

Direct interactions — when you contact us via our website form, email, or phone, or when you engage our services.
Automated technologies — cookies and analytics tools that collect usage data when you visit our website (see Section 8).
Third parties — referrals, professional networks (such as LinkedIn), or publicly available sources where relevant to a business engagement.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Consent — where you have given explicit consent (e.g., signing up for communications).
Contractual necessity — where processing is required to deliver services you have engaged us for.
Legitimate interests — for business development, improving our services, and managing our relationships, where these interests are not overridden by your rights.
Legal obligation — where we are required to process data to comply with applicable law (e.g., tax and accounting obligations under Indian law).

For users located in the European Economic Area (EEA) or United Kingdom, the above bases align with Article 6 of the GDPR.

5. How We Use Your Data

We use collected personal data to:

Respond to your enquiries and provide requested Services.
Prepare proposals, contracts, and invoices.
Manage and deliver ongoing project engagements.
Send project-related communications and updates.
Comply with legal, regulatory, and tax obligations.
Improve our website and service quality through anonymised analytics.
Send occasional business updates or service information (you may opt out at any time).

We do not use your personal data for automated decision-making or profiling.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

Service providers — trusted third-party vendors who assist us in delivering services (e.g., cloud hosting providers, accounting software), bound by confidentiality obligations.
Professional advisors — lawyers, accountants, or auditors where necessary.
Legal compliance — where required by law, court order, or government authority.
Business transfers — in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.

Where we share data with parties outside India, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for EEA data or equivalent protections as required under applicable law.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy or as required by law:

Client project data — retained for a minimum of 7 years following project completion to meet legal and accounting obligations.
Enquiry and contact data — retained for up to 2 years from last contact if no engagement results.
Website analytics data — retained in anonymised or aggregated form.

Upon expiry of retention periods, data is securely deleted or anonymised.

8. Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve user experience and gather analytics. These may include:

Strictly necessary cookies — required for the website to function.
Analytics cookies — to understand how visitors interact with our site (e.g., Google Analytics).

You may configure your browser to refuse cookies or alert you when cookies are being sent. Disabling certain cookies may affect site functionality. We will implement a cookie consent mechanism in compliance with applicable law.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, disclosure, or destruction. These include:

Encrypted data transmission (HTTPS/TLS).
Access controls and role-based permissions.
Secure storage practices for project files and client data.

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data: Under the DPDP Act, 2023 (India):

Right to access information about your personal data being processed.
Right to correction of inaccurate or incomplete data.
Right to erasure of personal data, subject to legal retention obligations.
Right to grievance redressal.

Under GDPR (EEA/UK users):

Right of access (Article 15)
Right to rectification (Article 16)
Right to erasure / “right to be forgotten” (Article 17)
Right to restriction of processing (Article 18)
Right to data portability (Article 20)
Right to object to processing (Article 21)
Right to withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, please contact us at the details in Section 13. We will respond within 30 days (or as required by applicable law).

11. Data Protection Officer / Grievance Officer

In accordance with the DPDP Act, 2023, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have designated a Grievance Officer:

Grievance Officer: Palash Akhenia

Organisation: Octakris IT Solutions LLP

Email: [email protected]

Response Time: Within 30 days of receipt of complaint

For EEA-based individuals, Palash Akhenia also serves as the primary point of contact for GDPR-related queries.

12. Third-Party Links

Our website may contain links to third-party websites. Octakris is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The updated Policy will be posted on octakris.com with a revised effective date. We encourage you to review this page periodically.

For material changes that affect how we process your data, we will notify active clients directly.

14. Contact Us

For any privacy-related questions, requests, or complaints:

Octakris IT Solutions LLP

Email:[email protected]

Website: octakris.com

Legal Disclaimer: These documents are drafted as a professional starting point. Octakris IT Solutions LLP should have these reviewed by a qualified legal counsel before publishing, particularly to ensure compliance with the latest DPDP Act rules, GST obligations, and any jurisdiction-specific requirements for international clients.

Let’s Build Your Next Digital Success Story

Our team develops solutions that blend innovation and strategy — perfectly aligned with your business objectives, future growth, and evolving digital needs. We focus on delivering performance, scalability, and tangible impact.