Privacy Policy & Data Governance
Effective Date: August 2026 • Registered Entity: D2Webtech Software Services
1. Data Controller Identity & Physical Address
The Data Controller responsible for processing your personal and business data is D2Webtech Software Services.
Registered Physical Address: C1-303, Pragati IT Park, Near AR Mall, Mota Varachha, Surat - 394101.
Official Contact Email: dhaval.dudhat@d2webtech.com | Phone: +91 81411 56734
2. Categories of Data Collected
We collect data strictly necessary to communicate, evaluate project scope, and deliver agreed software services:
- Contact Information: Name, work email address, phone number, company name, and job title.
- Technical Communication & Scope Data: Project requirements, spreadsheet structures, TMS/ERP integration parameters provided during audits.
- Web Analytics Data: IP address, browser type, operating system, referring URLs, and page engagement metrics collected via privacy-preserving analytics.
3. Legal Basis for Processing (GDPR & International Law)
We process personal and operational data under the following legal bases:
- Contractual Necessity: Processing required to negotiate, execute, or perform a Master Services Agreement (MSA) or Statement of Work (SOW).
- Legitimate Business Interest: Responding to client inquiries, protecting network security, and improving operational service performance.
- Consent: Where explicitly provided for email newsletter subscriptions or marketing communications.
4. Third-Party Sub-Processors List
We engage trusted third-party infrastructure providers to support hosting, email delivery, and communication. All sub-processors adhere to strict data security standards:
AWS & Hostinger
Cloud Server Infrastructure & Encrypted Database Storage
Calendly
Discovery Call & Consultation Scheduling
Google Analytics 4
Anonymized Site Performance & Traffic Telemetry
5. Data Retention & International Transfers
We retain project communication data for the duration of the active business relationship and up to 7 years thereafter to comply with tax and legal audit requirements. Data transferred across international borders is protected by Standard Contractual Clauses (SCCs) and strict encryption protocols.
6. GDPR, CCPA/CPRA Rights & "Do Not Sell or Share" Statement
Notice to California & US Residents (CCPA/CPRA):
We do NOT sell or share your personal information with third-party data brokers or advertising networks under any circumstances. You have the right to request access to, deletion of, or correction of your personal data at any time.
7. How to Exercise Your Privacy Rights
To submit a data access or deletion request, email lead architect Dhaval directly at dhaval.dudhat@d2webtech.com. We acknowledge all requests within 48 hours.