Privacy Policy

M/S Lokhandwala Technologies (“Company”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal information when you visit our website lokhandwalatech.com, engage our Services, or otherwise interact with us. By accessing our website or using our Services, you consent to the practices described in this Policy.

1. Information We Collect

We may collect the following categories of information:

1.1 Personal Information You Provide

• Contact details: name, email address, phone number, company name, and postal address when you submit our contact form, request a quote, or engage our Services.
• Business information: company name, designation, industry, and project requirements shared during consultations or onboarding.
• Communication records: emails, chat transcripts, and other correspondence between you and the Company.

1.2 Information Collected Automatically

• Usage & analytics data: pages visited, time spent, click patterns, referring URLs, and browser/device information collected through anonymised analytics tools.
• Technical data: IP address (anonymised where possible), browser type and version, operating system, screen resolution, and language preferences.
• Cookies & similar technologies: we use essential cookies to ensure the proper functioning of our website. See Section 6 for our Cookie Policy.

1.3 Payment Information

Payment transactions are processed exclusively through our authorised payment gateway partner, CashFree. We do not collect, store, or have access to your credit card numbers, debit card numbers, or bank account details. Such information is handled directly and securely by CashFree in accordance with PCI-DSS standards.

2. Purpose of Data Collection & Legal Basis

We process your personal information for the following purposes:

• Service delivery: to provide, manage, and deliver the Services you have engaged us for.
• Communication: to respond to your inquiries, provide project updates, send invoices, and communicate about our Services.
• Analytics & improvement: to analyse usage patterns, improve our website and Services, diagnose technical issues, and enhance user experience.
• Legal compliance: to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Security & fraud prevention: to protect the Company, our clients, and third parties from fraudulent, abusive, or unlawful activity.
• Contractual obligation: processing necessary for the performance of a contract with you or to take pre-contractual steps at your request.

3. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers: with trusted third-party service providers who assist us in operating our website and delivering Services (e.g., CashFree for payment processing, email delivery services), bound by contractual obligations to protect your data.
• Legal requirements: when required to do so by law, regulation, court order, or governmental authority.
• Protection of rights: when necessary to protect the rights, property, or safety of the Company, our clients, or the public.
• Business transfers: in the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of the transaction. You will be notified of any such change.

4. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. Specifically:

• Client project data: retained for the duration of the engagement and for a period of three (3) years thereafter, unless a longer retention period is required by law.
• Communication records: retained for up to three (3) years from the date of last communication.
• Analytics data: anonymised analytics data may be retained indefinitely as it does not identify individuals.
• Financial records: transaction and invoice data retained for a minimum of eight (8) years in accordance with Indian tax and accounting regulations.

5. Your Rights

Subject to applicable law, you have the following rights regarding your personal information:

• Right to access: you may request a copy of the personal information we hold about you.
• Right to rectification: you may request correction of any inaccurate or incomplete personal information.
• Right to deletion: you may request deletion of your personal information, except where we are legally obligated or have a legitimate interest in retaining it, such as for ongoing contractual obligations, legal compliance, or dispute resolution.
• Right to object: you may object to the processing of your personal information for certain purposes, including direct marketing.
• Right to portability: where technically feasible, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at contact@lokhandwalatech.com. We will respond to your request within thirty (30) days.

6. Cookies & Tracking Technologies

Our website uses the following types of cookies:

• Essential cookies: required for the website to function correctly (e.g., session management, security tokens). These cannot be disabled.
• Analytics cookies: used to collect anonymised information about how visitors use our website, helping us improve content and user experience.

We do not use cookies for advertising, profiling, or behavioural tracking. You may manage or disable cookies through your browser settings; however, disabling essential cookies may impair website functionality.

7. Security Measures

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Secure access controls and authentication mechanisms for internal systems.
• Regular security assessments and vulnerability monitoring.
• Restricted access to personal information on a need-to-know basis among authorised personnel only.
• Use of PCI-DSS compliant third-party payment processors for all financial transactions.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information.

8. International Data Transfers

Your information is primarily stored and processed in India. If, in the course of providing Services, data is transferred outside India, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

9. Children's Privacy

Our website and Services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly.

10. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on this page. The “Last Revised” date at the top of this page indicates when the policy was last updated. We encourage you to review this Privacy Policy periodically. Your continued use of our website or Services following the posting of changes constitutes your acceptance of the revised policy.

12. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the rules made thereunder, if you have any complaints or concerns regarding the processing of your personal information, you may contact our Grievance Officer:

We will acknowledge your complaint within forty-eight (48) hours and endeavour to resolve it within thirty (30) days.