Privacy Policy

1. Scope

This Privacy Policy applies to personal information submitted through cyberguardsolutionsteam.online and related website forms, including security enquiries and newsletter subscription. It does not automatically govern separate client engagements, which may require engagement-specific confidentiality, data-processing or contractual terms.

2. Information We May Collect

Depending on the feature used, we may collect name, email address, organization, selected service, subject, message content, newsletter preference, consent records, confirmation status, technical anti-abuse information, and limited security or access logs required to operate and protect the website.

3. Purpose of Processing

Information may be used to respond to enquiries, understand requested cybersecurity services, communicate about an enquiry, deliver newsletters to users who separately opt in and confirm, operate and secure the website, prevent abuse, maintain necessary records, and meet applicable legal obligations.

4. Consent and Choice

Where consent is the applicable basis, CGST intends to request consent in clear language for specified purposes. Newsletter consent is separate from the security-enquiry form. Submitting an enquiry does not automatically subscribe a person to marketing or news communications. A subscriber may unsubscribe from future newsletter communications.

5. India Data Protection Framework

CGST intends to align website processing with applicable provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as those provisions are in force and applicable to the relevant processing. The 2025 Rules use a phased commencement schedule, so obligations may become effective at different times.

6. Security of Personal Data

For production deployment, CGST intends to use reasonable technical and organizational safeguards appropriate to the website, including HTTPS, server-side validation, access controls, secure session handling, rate limiting, anti-abuse controls, restricted administrative access, security logging and appropriate handling of credentials and secrets.

7. Security Incident Handling

Where applicable, CGST will follow relevant Indian cybersecurity obligations and directions, including applicable requirements issued by CERT-In under section 70B of the Information Technology Act, 2000. Specific incident-reporting or log-retention obligations depend on the circumstances and applicable direction.

8. Service Providers

The production website may rely on hosting, security, anti-abuse, database and email-delivery providers. Such providers should receive only the information reasonably necessary for the service they perform and should be configured under appropriate access and security controls.

9. Cross-Border or External Processing

If a service provider processes information outside India, CGST will assess applicable legal restrictions and contractual or technical safeguards before production use. The exact production data flow should be documented before launch.

10. Retention

Personal information should not be kept longer than necessary for the relevant purpose, legal requirement, security need or legitimate record-keeping need. Production retention periods should be documented for enquiries, subscriber records, security logs and administrative records.

11. Rights and Requests

Where applicable law grants rights or grievance mechanisms to an individual, CGST intends to provide a practical way to submit such requests and to handle them in accordance with applicable requirements.

12. Children

The CGST website and cybersecurity services are intended primarily for business and professional use. The production website should not knowingly collect children’s personal data through marketing or enquiry features without reviewing any additional requirements that may apply.

13. Cookies and Similar Technologies

The website may use analytics and related browser technologies to understand website usage and improve performance. Google Analytics 4 is configured on public pages. Any analytics, preference, security or similar technologies should be operated in accordance with applicable requirements and this policy should be updated if the implementation materially changes.

14. Third-Party Links

The website may link to external platforms such as LinkedIn, Facebook, Instagram, X and YouTube. Those services operate under their own privacy practices and terms.

15. Changes to this Policy

CGST may update this policy when the website, service providers, legal requirements or data practices change. Material changes should be reflected with an updated effective date.

16. Contact

Privacy and website enquiries may be sent to info@cyberguardsolutionsteam.online .