Privacy Policy

1. Introduction & Regulatory Framework

Quadrandtech Solutions Private Limited ("Quadrandtech", "Company", "we", "our", or "us") operates software development, enterprise AI, cloud architecture, and IT consulting services. We are committed to safeguarding your personal data in accordance with:

• The Digital Personal Data Protection (DPDP) Act, 2023 (India).
• The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
• Applicable global data protection regulations where cross-border IT services are delivered.

2. Digital Personal Data We Collect

We may collect and process the following categories of personal data based on your interaction with our website and enterprise client engagements:

• Identity & Contact Information: Name, business email address, phone number, organization name, job title, and country.
• Business Communications & Enquiries: Project specifications, RFPs, messages submitted via our contact forms, and client quotation requests.
• Technical & Usage Metadata: IP address, browser type, device information, operating system, pages visited, and session telemetry collected via secure server logs.
• Employment & Candidate Data: Resumes, educational credentials, work histories, and identity proofs for candidates applying to Quadrandtech.

3. Lawful Basis & Purpose for Data Processing

We process personal data strictly for lawful and legitimate purposes, including:

• Responding to business inquiries and providing software development, cloud, and engineering proposals.
• Executing and administering Master Services Agreements (MSAs), Statements of Work (SOWs), and commercial quotations.
• Ensuring technical security, fraud prevention, and uptime reliability across our digital infrastructure.
• Complying with statutory reporting requirements under the Companies Act 2013, GST Act, and Income Tax Act 1961.

4. Data Protection & Security Practices

In compliance with Section 8 of the DPDP Act 2023 and Rule 8 of the SPDI Rules, Quadrandtech implements reasonable technical, organizational, and physical security measures, including:

• End-to-end TLS 1.3 encryption in transit for all web and API communications.
• AES-256 encryption for data at rest across cloud databases and storage containers.
• Role-Based Access Control (RBAC) and mandatory multi-factor authentication (MFA/TOTP) for all internal systems.
• Regular audit logging and vulnerability assessments.

5. Cross-Border Data Transfers

For international clients, personal data and project telemetry may be processed in compliant cloud regions (including AWS Asia-Pacific, Azure, and Google Cloud). All cross-border transfers adhere to the DPDP Act guidelines and contractual standard clauses ensuring equivalent data protection.

6. Rights of Data Principals

Under the DPDP Act 2023, you have the right to:

• Access & Summary: Obtain a summary of digital personal data processed by us and the identities of any third parties with whom data was shared.
• Correction & Erasure: Request the correction, completion, updating, or erasure of personal data that is no longer necessary for the purpose it was collected.
• Grievance Redressal: Register a grievance with our designated Grievance Officer.
• Nomination: Nominate an individual to exercise your data rights in the event of incapacity.

7. Grievance Officer & Contact Details

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of the Grievance Officer are provided below:

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect technological advances, statutory amendments, or operational enhancements. Updates will be posted on this page with an updated "Last Updated" date.