Privacy Policy

MaquishTech Venture® Pvt Ltd ("MaquishTech", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website or use our services. This policy applies to all visitors, prospective clients, customers, partners, and other individuals who interact with us through our website or offline channels.

We act as a data controller for the personal information we collect through this website and during the course of our business relationships. Where we process data on behalf of a client under a contract, we may act as a data processor, in which case the client remains the controller and is responsible for providing the applicable privacy notice to their end users.

1. Information We Collect

We may collect the following types of information, depending on how you interact with us:

• Personal Information: Name, email address, phone number, company name, job title, country, and any other details you provide via our contact forms, project brief forms, or consultation requests.
• Business Information: Company size, industry, website, budget range, project requirements, timeline, and current processes you share with us during discovery calls, workshops, or written briefs.
• Technical Data: IP address, browser type, device information, operating system, pages visited, time spent on pages, referral URLs, and usage statistics collected via cookies and analytics tools.
• Payment Information: Transaction records and booking references processed through our payment gateway partners. We do not store full card numbers or CVV codes on our servers. Payment authentication is handled entirely by our certified payment processors.
• Communication Records: Emails, messages, consultation notes, meeting recordings (with prior consent), and project correspondence you exchange with us.
• Marketing Preferences: Your subscription choices, opt-in selections, and engagement history with our newsletters and promotional content.

2. How We Use Your Information

We use the collected information to:

• Respond to your enquiries, consultation requests, and project submissions in a timely manner.
• Generate project briefs, proposals, and quotations tailored to your requirements.
• Process payments, issue invoices, and manage billing cycles.
• Provide client portal access and project management services throughout the engagement.
• Sync lead and client data with Zoho CRM/ERP for internal sales, project tracking, and reporting.
• Send service updates, newsletters, and marketing communications (you may opt out at any time using the unsubscribe link or by contacting us).
• Improve our website, services, and user experience through analytics and feedback.
• Detect, prevent, and investigate fraud, abuse, or security incidents.
• Comply with legal, regulatory, and contractual obligations applicable to our business.

3. Lawful Basis for Processing

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, we rely on the following lawful bases when processing your personal data:

• Consent (Article 6(1)(a)): You have explicitly consented to the processing of your personal data for one or more specific purposes, such as subscribing to our newsletter or submitting a contact form. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual Necessity (Article 6(1)(b)): Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract we have with you. This includes delivering services, processing payments, and providing project deliverables.
• Legal Obligation (Article 6(1)(c)): We process your data to comply with a legal obligation under Indian law, the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, tax regulations, and other applicable statutes.
• Vital Interests (Article 6(1)(d)): Processing is necessary to protect the vital interests of an individual, such as in emergencies where consent cannot be obtained.
• Public Task (Article 6(1)(e)): Processing is necessary for tasks carried out in the public interest or under official authority, where applicable.
• Legitimate Interests (Article 6(1)(f)): We rely on our legitimate business interests for operations such as analytics, security monitoring, service improvement, fraud prevention, and direct marketing, provided such interests are not overridden by your rights and freedoms. We conduct balancing tests to ensure fairness.

For special categories of personal data (sensitive data), we rely on additional conditions under Article 9 of the GDPR, such as explicit consent or establishment of legal claims.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with the following categories of recipients:

• Payment Gateways: Paylocal, Razorpay, Stripe, or PayPal for processing transactions securely.
• CRM/ERP Providers: Zoho CRM and Zoho Books for lead management, project tracking, and invoicing.
• Cloud Service Providers: Hosting infrastructure providers that store and process data on our behalf under data processing agreements.
• Professional Advisors: Legal, accounting, and tax professionals where required for advisory or compliance purposes.
• Government Authorities: When required by law, court order, or regulatory authority, including tax authorities and law enforcement agencies.
• Sub-processors: Third-party service providers who support our operations, such as email delivery, analytics, and customer support tools. All sub-processors are bound by written agreements requiring confidentiality and data protection.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by applicable law. Project and financial records are typically retained for 7 years for tax and audit compliance. Marketing data is retained until you unsubscribe or request deletion. Technical and analytics data is retained for up to 24 months unless a longer period is required for security or legal purposes.

When retention periods expire, we securely delete or anonymise the data so that it can no longer be associated with an identifiable individual. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and research purposes.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), role-based access controls, password hashing, regular security assessments, and secure payment processing. Access to personal data is restricted to authorised personnel who require it to perform their duties.

We maintain incident response procedures and will notify affected individuals and relevant authorities of a personal data breach in accordance with applicable legal timeframes, generally within 72 hours of becoming aware of the breach. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing of your data.
• Request data portability in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Receive information about the processing of your data in clear, plain language.
• Lodge a complaint with a data protection authority, such as the relevant supervisory authority in your jurisdiction.

To exercise these rights, contact us at business@maquishtechventure.com. We will respond to verified requests within 30 days, although complex requests may take up to 90 days. We may request additional information to verify your identity before disclosing personal data.

8. Data Subject Access Requests

A Data Subject Access Request (DSAR) allows you to obtain a copy of the personal data we hold about you, along with details of how we use it, who we share it with, and how long we retain it. You may submit a DSAR by emailing business@maquishtechventure.com with the subject line "Data Subject Access Request".

Please include sufficient information to help us identify you and locate your records, such as your name, email address, and approximate date of your interaction with us. We will verify your identity before processing the request. In most cases, we will provide the information free of charge, although we may charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

If we are unable to comply with your request, we will explain the reasons and inform you of your right to complain to a supervisory authority or seek judicial remedy.

9. Cookies

We use cookies for analytics, session management, and user experience improvement. See our Cookie Policy for details. You can control cookies through your browser settings. We classify cookies as essential, performance, and functional, and we obtain consent for non-essential cookies where required by law.

9A. Advertising, remarketing and conversion measurement

We advertise our services online, including on Google (Search, YouTube, Display) and, where we run campaigns, on Meta platforms (Facebook and Instagram). To do this we use the Google tag / Google Tag Manager (Google Ads account tag AW-18285023182) on this website.

• Conversion measurement: when you arrive from one of our ads, these tools record whether you then take an action we care about (for example submitting an enquiry form, clicking “Apply now”, booking a call, or tapping WhatsApp, phone or email links). This tells us which ads work. We do not send the content of your messages or application answers to advertising platforms.
• Remarketing / “your data” audiences: third-party vendors, including Google, may show our ads to you on sites and apps across the internet. These vendors use cookies and/or device identifiers to serve ads based on your past visits to this website.
• Enhanced conversions (lead forms only): if you submit an enquiry form and have accepted advertising cookies, the email address and/or phone number you entered may be securely hashed (one-way encrypted) in your browser and shared with Google to measure ad conversions more accurately, under the Google Ads Data Processing Terms. It is never used to identify you on this site and is never sent if you reject advertising cookies.
• Your choice comes first: visitors in the European Economic Area, the United Kingdom and Switzerland see advertising and analytics cookies switched off until they opt in. Everyone can accept, reject or change their choice at any time via Cookie settings (also in the website footer).

How to opt out of personalised ads

• Google: manage or turn off ads personalisation at adssettings.google.com (My Ad Center). Learn how Google uses information from sites that use its services at business.safety.google/privacy and policies.google.com/technologies/partner-sites.
• Meta: manage ad preferences in your Facebook/Instagram Accounts Centre (Ad preferences) — see Meta Privacy Policy.
• Other participating vendors: Network Advertising Initiative opt-out, DAA WebChoices, and for EU/UK users Your Online Choices.
• Mobile devices: use your device settings (“Delete advertising ID” on Android, “Allow apps to request to track” on iOS).

Parties that may receive data through these tools: Google LLC / Google Ireland Ltd (advertising and analytics). We do not sell your personal data, and we do not share remarketing lists with other advertisers.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before submitting personal information. We do not control and are not liable for how third parties collect, use, or disclose your data.

11. International Data Transfers

As we serve clients globally, your data may be processed in countries outside India, including the USA, UK, UAE, Singapore, and EU member states. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs): We use the European Commission's approved SCCs for transfers of personal data outside the European Economic Area.
• Data Processing Agreements: We execute binding agreements with processors that require them to protect data to standards equivalent to those in this policy.
• Adequacy Decisions: Where a country has been recognised as providing an adequate level of data protection, transfers may proceed without additional safeguards.
• Transfer Impact Assessments: We assess the legal and practical risks of transferring data to each destination country and implement supplementary measures where necessary.

We monitor changes in international data transfer regulations and update our safeguards accordingly to maintain compliance.

12. Children's Privacy

Our services are intended for businesses and professionals aged 18 and above. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete that data as soon as practicable.

Parents or guardians who believe their child has provided personal data to us should contact us at business@maquishtechventure.com so we can investigate and take appropriate action. We may request verification of the parent or guardian's identity before acting on such requests.

13. Employee Data

Where we process personal data of our employees, contractors, and job applicants, we do so in accordance with employment law and our internal HR policies. Employee data is collected for recruitment, payroll, performance management, benefits administration, and statutory compliance purposes.

We retain employee records for the duration of employment and for a defined period thereafter as required by labour and tax laws. Employees have the right to access, correct, and request deletion of their personal data, subject to legal retention requirements. Access to employee data is restricted to HR personnel and authorised managers on a need-to-know basis.

13A. Job applicants (including AWP/MEWP operator recruitment)

When you apply for a role — through our Google Form, the careers page, WhatsApp, or at a walk-in interview — we collect the details you provide: name, mobile number, email (optional), date of birth, city/state, qualification, driving-licence details, answers to the role’s eligibility questions (medical fitness for field work, comfort working at height, willingness to relocate), preferred locations and joining date.

• Why: only to assess your eligibility for the role you applied for, contact you about interviews and training, and meet legal requirements for employment (for example age and licence checks for operating vehicles and work platforms). Date of birth is used to confirm you meet the legal minimum working age, not to rank or exclude candidates by age.
• Driving licence and fitness answers are treated as sensitive. They are stored in an access-restricted Google Sheet, viewed only by our recruitment team, never used for advertising, and never shared with ad platforms. Licence documents are checked in person at interview [OWNER TO CONFIRM].
• Retention: unsuccessful applications are deleted within [OWNER TO CONFIRM: e.g. 12] months; you can ask us to delete yours sooner.
• No fees: we never charge candidates any fee — for applying, interviews, training, placement or joining. If anyone asks you for money in our name, do not pay; report it to us and to cybercrime.gov.in / helpline 1930.

14. Vendor and Processor Agreements

We engage third-party vendors and processors to support our operations, including hosting, analytics, payment processing, and communication tools. Before engaging any processor, we conduct due diligence to assess their data protection practices and security posture.

All processors are bound by written agreements that include confidentiality obligations, data processing terms, sub-processor restrictions, breach notification requirements, and audit rights. We maintain a register of sub-processors and review it periodically to ensure continued compliance. Processors are permitted to engage sub-processors only with our prior written authorisation and under equivalent contractual terms.

15. Training and Awareness

We invest in ongoing data protection training for our employees and contractors. New joiners receive privacy and security training as part of their onboarding, and all staff complete refresher training at least annually. Training covers topics such as data handling, phishing awareness, breach reporting, and the principles of data minimisation and purpose limitation.

We promote a culture of privacy by design and by default, ensuring that data protection considerations are integrated into the development of new products, services, and processes. Designated personnel are responsible for monitoring compliance and escalating concerns to management.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and compliance with applicable laws. The DPO serves as a point of contact for data subjects and supervisory authorities.

The DPO's responsibilities include:

• Monitoring and advising on our compliance with data protection laws and this policy.
• Conducting data protection impact assessments for high-risk processing activities.
• Cooperating with supervisory authorities and acting as a contact point for them.
• Handling data subject requests and privacy-related enquiries.
• Raising awareness and providing training to staff on data protection obligations.

You may contact the Data Protection Officer — Contact: Email business@maquishtechventure.com · Contact us.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Where significant changes are made, we may provide additional notice through our website or via email where appropriate.

18. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, contact us:

MaquishTech Venture® Pvt Ltd
Office visits by appointment only — see Contact.
Contact: Email business@maquishtechventure.com · Contact us
Email: business@maquishtechventure.com
WhatsApp: Contact us

Grievance Officer (India) — Digital Personal Data Protection Act, 2023

If you are in India, you may exercise your rights under the Digital Personal Data Protection Act, 2023 (access, correction, erasure, withdrawal of consent, grievance redressal and nomination) by contacting our Grievance Officer: [OWNER TO CONFIRM: name, designation] — Email business@maquishtechventure.com · Contact us. We acknowledge requests within [OWNER TO CONFIRM] and aim to resolve them within [OWNER TO CONFIRM] days. Withdrawing consent is as easy as giving it: use Cookie settings for cookies, or email us for anything else. If you are not satisfied, you may approach the Data Protection Board of India once it is operational for complaints.

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.