Privacy policy

Last updated: 1 September 2026

1. Who we are

HackSec Infotech (“HackSec”, “we”, “us”) is an IT services company based at Ahmedabad, Gujarat 380015, India. For any privacy question or request, contact hacksecinfotech.ai@gmail.com.

2. What we collect

• Information you give us. Your name, email, phone number, company and the content of your enquiry when you use a form on this site or email us.
• Technical information. Standard server logs — IP address, browser user agent, requested URL and timestamp — retained for security and diagnostics.
• Preferences. Your chosen colour theme, stored only in your own browser via localStorage. It never reaches our servers.

We do not use advertising trackers or third-party analytics profiling on this site.

3. Why we use it

• To reply to your enquiry and provide a proposal — our legitimate interest in responding to a request you made.
• To deliver services under a contract with you.
• To keep our systems secure and diagnose faults.
• To meet legal, tax and regulatory obligations.

We do not sell personal data. We do not add enquiry contacts to a marketing list without a separate opt-in.

4. How long we keep it

Enquiry correspondence is retained for 24 months from the last contact unless it becomes part of a client engagement, in which case contractual and statutory retention periods apply. Server logs are retained for 90 days.

5. Who we share it with

Only with service providers who process data on our behalf under written agreement — email hosting, cloud infrastructure and, where applicable, a form delivery provider. We do not transfer data outside these purposes. Where processing occurs outside India or the EEA, appropriate safeguards are applied.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or port your personal data, and to object to processing. Email hacksecinfotech.ai@gmail.com and we will respond within 30 days. You may also complain to your local data protection authority.

7. Client data

When we process personal data on behalf of a client during an engagement, we act as a processor under that client's instructions and our data processing agreement. This policy governs our own site and enquiries only.

8. Security

We apply the controls we recommend to clients: least-privilege access, hardware-key multi-factor authentication for all staff, encryption in transit and at rest, and regular internal penetration testing of our own systems.

9. Changes

Material changes to this policy will be reflected in the “last updated” date above and, where the change affects you directly, communicated by email.