Privacy Policy

MaquishTech Venture Pvt Ltd ("MaquishTech", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you visit our website or use our services. This policy applies to all visitors, prospective clients, customers, partners, and other individuals who interact with us through our website or offline channels.

We act as a data controller for the personal information we collect through this website and during the course of our business relationships. Where we process data on behalf of a client under a contract, we may act as a data processor, in which case the client remains the controller and is responsible for providing the applicable privacy notice to their end users.

1. Information We Collect

We may collect the following types of information, depending on how you interact with us:

• Personal Information: Name, email address, phone number, company name, job title, country, and any other details you provide via our contact forms, project brief forms, or consultation requests.
• Business Information: Company size, industry, website, budget range, project requirements, timeline, and current processes you share with us during discovery calls, workshops, or written briefs.
• Technical Data: IP address, browser type, device information, operating system, pages visited, time spent on pages, referral URLs, and usage statistics collected via cookies and analytics tools.
• Payment Information: Transaction records and booking references processed through our payment gateway partners. We do not store full card numbers or CVV codes on our servers. Payment authentication is handled entirely by our certified payment processors.
• Communication Records: Emails, messages, consultation notes, meeting recordings (with prior consent), and project correspondence you exchange with us.
• Marketing Preferences: Your subscription choices, opt-in selections, and engagement history with our newsletters and promotional content.

2. How We Use Your Information

We use the collected information to:

• Respond to your enquiries, consultation requests, and project submissions in a timely manner.
• Generate project briefs, proposals, and quotations tailored to your requirements.
• Process payments, issue invoices, and manage billing cycles.
• Provide client portal access and project management services throughout the engagement.
• Sync lead and client data with Zoho CRM/ERP for internal sales, project tracking, and reporting.
• Send service updates, newsletters, and marketing communications (you may opt out at any time using the unsubscribe link or by contacting us).
• Improve our website, services, and user experience through analytics and feedback.
• Detect, prevent, and investigate fraud, abuse, or security incidents.
• Comply with legal, regulatory, and contractual obligations applicable to our business.

3. Lawful Basis for Processing

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, we rely on the following lawful bases when processing your personal data:

• Consent (Article 6(1)(a)): You have explicitly consented to the processing of your personal data for one or more specific purposes, such as subscribing to our newsletter or submitting a contact form. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual Necessity (Article 6(1)(b)): Processing is necessary to take steps at your request prior to entering into a contract, or to perform a contract we have with you. This includes delivering services, processing payments, and providing project deliverables.
• Legal Obligation (Article 6(1)(c)): We process your data to comply with a legal obligation under Indian law, the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, tax regulations, and other applicable statutes.
• Vital Interests (Article 6(1)(d)): Processing is necessary to protect the vital interests of an individual, such as in emergencies where consent cannot be obtained.
• Public Task (Article 6(1)(e)): Processing is necessary for tasks carried out in the public interest or under official authority, where applicable.
• Legitimate Interests (Article 6(1)(f)): We rely on our legitimate business interests for operations such as analytics, security monitoring, service improvement, fraud prevention, and direct marketing, provided such interests are not overridden by your rights and freedoms. We conduct balancing tests to ensure fairness.

For special categories of personal data (sensitive data), we rely on additional conditions under Article 9 of the GDPR, such as explicit consent or establishment of legal claims.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with the following categories of recipients:

• Payment Gateways: Paylocal, Razorpay, Stripe, or PayPal for processing transactions securely.
• CRM/ERP Providers: Zoho CRM and Zoho Books for lead management, project tracking, and invoicing.
• Cloud Service Providers: Hosting infrastructure providers that store and process data on our behalf under data processing agreements.
• Professional Advisors: Legal, accounting, and tax professionals where required for advisory or compliance purposes.
• Government Authorities: When required by law, court order, or regulatory authority, including tax authorities and law enforcement agencies.
• Sub-processors: Third-party service providers who support our operations, such as email delivery, analytics, and customer support tools. All sub-processors are bound by written agreements requiring confidentiality and data protection.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy or as required by applicable law. Project and financial records are typically retained for 7 years for tax and audit compliance. Marketing data is retained until you unsubscribe or request deletion. Technical and analytics data is retained for up to 24 months unless a longer period is required for security or legal purposes.

When retention periods expire, we securely delete or anonymise the data so that it can no longer be associated with an identifiable individual. Where anonymisation is applied, the resulting data may be retained indefinitely for statistical and research purposes.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), role-based access controls, password hashing, regular security assessments, and secure payment processing. Access to personal data is restricted to authorised personnel who require it to perform their duties.

We maintain incident response procedures and will notify affected individuals and relevant authorities of a personal data breach in accordance with applicable legal timeframes, generally within 72 hours of becoming aware of the breach. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing of your data.
• Request data portability in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Receive information about the processing of your data in clear, plain language.
• Lodge a complaint with a data protection authority, such as the relevant supervisory authority in your jurisdiction.

To exercise these rights, contact us at Ankur@AnpaCorporation.com. We will respond to verified requests within 30 days, although complex requests may take up to 90 days. We may request additional information to verify your identity before disclosing personal data.

8. Data Subject Access Requests

A Data Subject Access Request (DSAR) allows you to obtain a copy of the personal data we hold about you, along with details of how we use it, who we share it with, and how long we retain it. You may submit a DSAR by emailing Ankur@AnpaCorporation.com with the subject line "Data Subject Access Request".

Please include sufficient information to help us identify you and locate your records, such as your name, email address, and approximate date of your interaction with us. We will verify your identity before processing the request. In most cases, we will provide the information free of charge, although we may charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

If we are unable to comply with your request, we will explain the reasons and inform you of your right to complain to a supervisory authority or seek judicial remedy.

9. Cookies

We use cookies for analytics, session management, and user experience improvement. See our Cookie Policy for details. You can control cookies through your browser settings. We classify cookies as essential, performance, and functional, and we obtain consent for non-essential cookies where required by law.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before submitting personal information. We do not control and are not liable for how third parties collect, use, or disclose your data.

11. International Data Transfers

As we serve clients globally, your data may be processed in countries outside India, including the USA, UK, UAE, Singapore, and EU member states. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs): We use the European Commission's approved SCCs for transfers of personal data outside the European Economic Area.
• Data Processing Agreements: We execute binding agreements with processors that require them to protect data to standards equivalent to those in this policy.
• Adequacy Decisions: Where a country has been recognised as providing an adequate level of data protection, transfers may proceed without additional safeguards.
• Transfer Impact Assessments: We assess the legal and practical risks of transferring data to each destination country and implement supplementary measures where necessary.

We monitor changes in international data transfer regulations and update our safeguards accordingly to maintain compliance.

12. Children's Privacy

Our services are intended for businesses and professionals aged 18 and above. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete that data as soon as practicable.

Parents or guardians who believe their child has provided personal data to us should contact us at Ankur@AnpaCorporation.com so we can investigate and take appropriate action. We may request verification of the parent or guardian's identity before acting on such requests.

13. Employee Data

Where we process personal data of our employees, contractors, and job applicants, we do so in accordance with employment law and our internal HR policies. Employee data is collected for recruitment, payroll, performance management, benefits administration, and statutory compliance purposes.

We retain employee records for the duration of employment and for a defined period thereafter as required by labour and tax laws. Employees have the right to access, correct, and request deletion of their personal data, subject to legal retention requirements. Access to employee data is restricted to HR personnel and authorised managers on a need-to-know basis.

14. Vendor and Processor Agreements

We engage third-party vendors and processors to support our operations, including hosting, analytics, payment processing, and communication tools. Before engaging any processor, we conduct due diligence to assess their data protection practices and security posture.

All processors are bound by written agreements that include confidentiality obligations, data processing terms, sub-processor restrictions, breach notification requirements, and audit rights. We maintain a register of sub-processors and review it periodically to ensure continued compliance. Processors are permitted to engage sub-processors only with our prior written authorisation and under equivalent contractual terms.

15. Training and Awareness

We invest in ongoing data protection training for our employees and contractors. New joiners receive privacy and security training as part of their onboarding, and all staff complete refresher training at least annually. Training covers topics such as data handling, phishing awareness, breach reporting, and the principles of data minimisation and purpose limitation.

We promote a culture of privacy by design and by default, ensuring that data protection considerations are integrated into the development of new products, services, and processes. Designated personnel are responsible for monitoring compliance and escalating concerns to management.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and compliance with applicable laws. The DPO serves as a point of contact for data subjects and supervisory authorities.

The DPO's responsibilities include:

• Monitoring and advising on our compliance with data protection laws and this policy.
• Conducting data protection impact assessments for high-risk processing activities.
• Cooperating with supervisory authorities and acting as a contact point for them.
• Handling data subject requests and privacy-related enquiries.
• Raising awareness and providing training to staff on data protection obligations.

You may contact the Data Protection Officer at Ankur@AnpaCorporation.com or by writing to GIDA Sector 7, Badgahan, Gorakhpur, Uttar Pradesh – 273212, India.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Where significant changes are made, we may provide additional notice through our website or via email where appropriate.

18. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, contact us:

MaquishTech Venture Pvt Ltd
GIDA Sector 7, Badgahan, Gorakhpur, Uttar Pradesh – 273212, India
Email: Ankur@AnpaCorporation.com
Phone: +91 9650697032

We are committed to working with you to obtain a fair resolution of any complaint or concern about privacy. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.