Privacy Policy

KaizenSpark Tech Private Limited (“KaizenSpark Tech”, “we”, “us”) is a private limited company registered in India, CIN U62010TN2024PTC174443, incorporated on 4 November 2024 with the Registrar of Companies, Chennai.

Our registered office is 9C Public Main Road, Near Boys ES School, Chidambaram, Cuddalore District, Tamil Nadu 608601, India.

For the purposes of India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for personal data collected through kaizensparktech.com. You are the Data Principal.

This policy covers personal data we handle through the website at kaizensparktech.com and through email enquiries that reach us from it. It does not cover data we process on behalf of a client under a services contract; in that arrangement the client is the Data Fiduciary and we act as their Data Processor under the terms of that contract.

Our site links to third-party sites we do not control. Their privacy practices are their own.

This site has no sign-up, no account, no login, and no web-based contact form. Enquiry links open your own email client. As a result the data we hold is limited to the following.

Information you send us

When you email us, we receive whatever you choose to put in that email: typically your name, your email address, your organisation, and a description of the work you are considering. We hold it in our business email account.

Technical information

Our hosting and content delivery provider records standard server and security logs when a page is requested. These include the IP address of the request, the page requested, a timestamp, and a browser user-agent string. We use them to keep the site available and to investigate abuse.

Analytics

The site can run analytics, but analytics is switched off. The integrations are gated behind environment variables that are not set on the live site, so no analytics scripts load and no analytics identifiers are created. If we enable analytics later, we will update this policy and the cookie policy before doing so.

We do not buy personal data, we do not scrape it, and we do not knowingly collect data about children.

Under the DPDP Act, personal data may be processed either with the consent of the Data Principal, or for certain legitimate uses defined in the Act, including where a person has voluntarily provided their data for a specified purpose and has not indicated that they object to its use for that purpose.

When you email us about a project, you are voluntarily giving us your details so that we can reply to that enquiry. That is the purpose we use them for. If we later want to use your details for something else, such as a newsletter, we will ask you first and you can decline without affecting your enquiry.

Server and security logs are kept because we need them to operate the site securely and to meet obligations that apply to us as a company.

• —To read and reply to your enquiry, and to have the follow-up conversation about it.
• —To prepare a proposal, scope, or estimate when you have asked for one.
• —To keep a record of business correspondence, including contracts and invoices where an engagement goes ahead.
• —To keep the site online, fast, and free from abuse.
• —To meet legal, tax, and regulatory obligations that apply to an Indian private limited company.

We do not sell personal data. We do not share it with advertisers. We do not use it to build behavioural profiles, and we do not use it for automated decision-making.

We use a small number of service providers to run the business. Where they handle personal data, they do so on our instructions and for no other purpose.

• —A hosting and content delivery provider, which serves the site and keeps server and security logs.
• —A business email provider, which stores the enquiry correspondence described above.
• —Professional advisers such as accountants and auditors, where an engagement has gone ahead and the law requires records to be produced.

We will also disclose personal data where we are legally required to, for example in response to a valid order from a court or a competent authority. Some of these providers operate infrastructure outside India, so data may be stored or processed abroad, subject to the restrictions the Central Government may notify under the DPDP Act.

For the specific vendors in use at any time, write to contact@kaizensparktech.com and we will tell you.

We keep personal data only for as long as the purpose it was collected for still applies, and then we erase it, unless a law requires us to keep it longer.

• —Enquiries that do not lead to an engagement: deleted once the conversation is clearly over, or sooner if you ask.
• —Correspondence relating to an active or completed engagement: kept for the duration of the engagement and for the period required by Indian company and tax law afterwards.
• —Server and security logs: kept for a short operational window by our hosting provider and then rotated out.

We apply reasonable security safeguards to prevent a personal data breach, as the DPDP Act requires. In practice that means access to enquiry email is limited to the people who need it, accounts use multi-factor authentication, the site is served over HTTPS, and we keep the number of places data lives deliberately small.

No system is perfectly secure. If a breach affecting your personal data occurs, we will notify the Data Protection Board of India and affected individuals in the manner the Act requires.

As a Data Principal under the DPDP Act, you have the following rights in relation to personal data we process on the basis of your consent or a legitimate use.

• —Access: a summary of the personal data of yours we are processing, the processing activities involved, and the identities of others we have shared it with.
• —Correction and completion: to have inaccurate or misleading data corrected, and incomplete data completed or updated.
• —Erasure: to have your personal data erased, unless retaining it is required for the purpose it was collected for or by law.
• —Grievance redressal: to have a readily available means of raising a complaint with us, and a response within the period prescribed under the Act.
• —Nomination: to nominate another individual who may exercise these rights on your behalf in the event of your death or incapacity.

The Act also places duties on you as a Data Principal, including not raising false or frivolous complaints and not supplying false particulars when exercising the right to erasure.

If you are unhappy with how we handle a request, you may complain to the Data Protection Board of India. The DPDP Act and the rules made under it are being brought into force in stages, so specific procedural timelines may change; we will follow the position in force at the time of your request.

Email contact@kaizensparktech.com with “Data request” in the subject line, and tell us which right you are exercising. Include enough detail for us to find your data, such as the email address you originally wrote from.

We will acknowledge the request and, where we need to, ask one or two questions to confirm the request genuinely comes from you. We do not charge for this.

You can also write to us at our registered office: KaizenSpark Tech Private Limited, 9C Public Main Road, Near Boys ES School, Chidambaram, Cuddalore District, Tamil Nadu 608601, India.

We will update this page when our practices change, for example if we add a contact form or switch analytics on. The date at the top of the page always reflects the current version. Material changes will be described on the page rather than made quietly.