← Back to the site

Privacy Policy

Last updated on: 27 October 2026

1. INTRODUCTION AND SCOPE

1.1This document is an electronic record in terms of the Information Technology Act, 2000 and the rules made thereunder, as applicable, and the amended provisions pertaining to electronic records in various statutes as amended by the Information Technology Act, 2000. This electronic record is generated by a computer system and does not require any physical or digital signatures.

1.2The website located at https://www.nexertechnology.com (the “Website”) is owned and operated by Nexer Technology, a partnership firm constituted under the Indian Partnership Act, 1932, registered under the Goods and Services Tax with GSTIN 24AAWFN1930A1ZI, having its principal place of business at Shop No. 418, 4th Floor, Meriton Plaza, Yogi Chowk Road, Punagam, Surat – 395010, Gujarat, India (hereinafter referred to as “Nexer Technology”, the “Company”, “we”, “us” or “our”).

1.3This Privacy Policy (the “Policy”) describes the manner in which the Company collects, receives, stores, uses, processes, discloses, transfers and protects the personal data of visitors to the Website and of persons who contact the Company through the Website (“you”, “your” or “User”). This Policy is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the “SPDI Rules”) and, to the extent in force, the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (the “DPDP Rules”).

1.4This Policy applies only to personal data collected through the Website. It does not apply to personal data that the Company processes in the course of providing services to its clients, which is governed by the separate written agreement between the Company and the relevant client, nor to any third-party website that may be linked from the Website.

1.5By accessing or using the Website, or by submitting any information to the Company through the Website, you acknowledge that you have read and understood this Policy and you consent to the collection, use, processing and disclosure of your personal data in accordance with this Policy. If you do not agree with this Policy, you must not use the Website or submit any information through it. This Policy shall be read together with the Terms and Conditions of the Website.

2. DEFINITIONS

2.1In this Policy, unless the context otherwise requires:

  1. “Applicable Law” means all laws, statutes, rules, regulations, directions and orders in force in India from time to time, including the Information Technology Act, 2000, the SPDI Rules, the DPDP Act and the DPDP Rules, and, where applicable to you, the laws of your country of residence;
  2. “Personal Data” means any data about an individual who is identifiable by or in relation to such data, and includes “personal information” within the meaning of the SPDI Rules;
  3. “Sensitive Personal Data or Information” has the meaning given to it under Rule 3 of the SPDI Rules;
  4. “Processing” means a wholly or partly automated operation or set of operations performed on Personal Data, including collection, recording, organisation, storage, use, sharing, disclosure, restriction, erasure or destruction; and
  5. “Data Protection Board” means the Data Protection Board of India established under the DPDP Act.

2.2Capitalised terms used but not defined in this Policy shall have the meaning given to them in the Terms and Conditions or under Applicable Law.

3. INFORMATION WE COLLECT

3.1Information you provide. When you use the enquiry form on the Website, your name, your email address and the content of your message are transmitted in encrypted form (HTTPS) to the server of the Website and are forwarded from there by email to the Company at info@nexertechnology.com. The server does not store the content of your enquiry. To protect the form against misuse, the server keeps, for a short time only, a one-way hash value derived from your IP address in order to limit the number of enquiries per hour; this value is deleted automatically, and your IP address itself is not stored for this purpose. You may also write to the Company directly at the above email address.

3.2Information collected automatically. When you access the Website, the servers of our hosting service provider automatically record technical information that your browser sends, which may include your Internet Protocol (IP) address, browser type and version, operating system, the referring web page, the pages requested, and the date and time of the request (“Log Data”).

3.3Cookies and similar technologies. The Website does not use cookies, advertising trackers or social media plug-ins, and does not store any information on your device, except for the setting described in Section 3.4 if you switch analytics off. Fonts, scripts, images and video are served from the Company’s own hosting environment and are not loaded from third-party servers.

3.4Web analytics. The Company measures the use of the Website with Matomo, an open-source analytics software that runs on the Company’s own web space at Hostinger in Frankfurt am Main, Germany. Analytics data is not transmitted to Matomo or to any other third party. Matomo does not store any information on your device and does not read device characteristics. Your IP address is shortened by two (2) bytes before it is stored, so that the Company cannot identify you. The following data is recorded: the pages viewed and the time spent on them, the sections of a page that were displayed, clicks on links and on the service tabs, the progress of the enquiry form without the content of your entries, the referring website or search engine, the approximate country, and the type of device and browser. Individual analytics records are deleted after six (6) months; thereafter only aggregated statistics that do not relate to any individual are retained. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, no analytics data is recorded. You can switch analytics off for your browser at any time with the following button; this setting is stored in your browser only.

3.5The Company does not intend to collect any Sensitive Personal Data or Information through the Website. You are requested not to submit any passwords, financial information, health information, biometric information or other Sensitive Personal Data or Information through the enquiry form.

4. PURPOSE OF COLLECTION AND USE

4.1The Company collects and processes Personal Data only for lawful purposes connected with its functions and activities, namely:

  1. to respond to your enquiry and to communicate with you in relation to it;
  2. to discuss, evaluate and prepare a proposal for a possible engagement with you or the organisation that you represent;
  3. to operate, maintain and secure the Website, and to detect and prevent fraud, abuse, security incidents and other unlawful activity;
  4. to understand how the Website is used and to improve it, by means of the web analytics described in Section 3.4; and
  5. to comply with Applicable Law, legal process and lawful requests of government authorities.

4.2The Company does not sell, rent or trade Personal Data. The Company does not use Personal Data collected through the Website for direct marketing without your separate consent, and does not carry out any automated decision-making or profiling on such Personal Data.

5. CONSENT AND LAWFUL BASIS

5.1The Company processes Personal Data that you send to the Company through the enquiry form on the basis of your consent, given when you send your enquiry, and processes Log Data for the purposes of security and compliance with Applicable Law, including as a legitimate use under Section 7 of the DPDP Act, to the extent applicable. Analytics data under Section 3.4 is recorded in a form that does not allow the Company to identify you, and you may switch it off at any time as described in that Section.

5.2If you are located in the European Economic Area or the United Kingdom, the Company relies on the following legal bases under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and its United Kingdom equivalent: (i) steps taken at your request prior to entering into a contract (Article 6(1)(b)); (ii) the Company’s legitimate interests in operating, securing and improving the Website, including the web analytics described in Section 3.4 (Article 6(1)(f)); and (iii) compliance with a legal obligation (Article 6(1)(c)).

5.3You may withdraw your consent at any time by writing to the Grievance Officer at the address set out in Section 13. The withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal. Upon withdrawal, the Company shall cease processing and erase the relevant Personal Data within a reasonable time, unless its retention is required under Applicable Law.

6. DISCLOSURE AND SHARING OF INFORMATION

6.1Personal Data is accessible only to those personnel of the Company who require access for the purposes set out in Section 4.

6.2The Company may share Personal Data with service providers that process it on behalf of the Company and under its instructions, subject to contractual obligations of confidentiality and security, namely Hostinger, which provides the hosting of the Website, including the web analytics described in Section 3.4, and the email service of the Company.

6.3The Company may disclose Personal Data, without your prior consent, to government agencies mandated under law to obtain information for the purpose of verification of identity, or for the prevention, detection, investigation, prosecution and punishment of offences, in accordance with Rule 6 of the SPDI Rules, or where such disclosure is otherwise required by Applicable Law or by an order of a court or tribunal.

6.4In the event of a merger, acquisition, restructuring or transfer of all or part of the business of the Company, Personal Data may be transferred to the successor entity, which shall be bound by obligations no less protective than those in this Policy.

7. TRANSFER OF INFORMATION OUTSIDE INDIA

7.1The Website is hosted by Hostinger on servers located in Frankfurt am Main, Germany, and Log Data and analytics data are accordingly processed in Germany. Enquiries sent through the enquiry form pass through the server of the Website in Germany on their way to the email service of the Company. Personal Data submitted through the enquiry form is stored in India. Any transfer of Personal Data outside India shall be made in accordance with Rule 7 of the SPDI Rules and Section 16 of the DPDP Act, and only to a recipient that ensures the same level of data protection as is adhered to by the Company under this Policy. No transfer shall be made to any country or territory that is restricted by the Central Government under Applicable Law.

8. RETENTION OF INFORMATION

8.1Personal Data submitted through the enquiry form shall be retained for so long as is necessary for the purposes set out in Section 4, and in any event for not more than twenty-four (24) months from the date of the last communication between you and the Company, unless a longer period of retention is required under Applicable Law or for the establishment, exercise or defence of legal claims.

8.2Log Data shall be retained by the hosting service provider in accordance with its own retention policy, or for such longer period as may be required under Applicable Law, including the directions issued by the Indian Computer Emergency Response Team (CERT-In) and the DPDP Rules, to the extent applicable to the Company.

8.3Individual analytics records under Section 3.4 are deleted after six (6) months.

8.3Upon expiry of the applicable retention period, the Personal Data shall be erased or irreversibly anonymised.

9. REASONABLE SECURITY PRACTICES AND PROCEDURES

9.1The Company maintains reasonable security practices and procedures, as required under Section 43A of the Information Technology Act, 2000, Rule 8 of the SPDI Rules and Section 8(5) of the DPDP Act, that are commensurate with the nature of the Personal Data processed, including encryption of data in transit by means of HTTPS / TLS and the restriction of access to Personal Data to authorised personnel.

9.2Notwithstanding the foregoing, no method of transmission over the internet or method of electronic storage is completely secure, and the Company cannot guarantee the absolute security of Personal Data.

9.3In the event of a personal data breach, the Company shall notify the affected Users, the Data Protection Board and CERT-In, as and when required by, and within the timelines prescribed under, Applicable Law.

10. YOUR RIGHTS

10.1Subject to Applicable Law, you have the right to:

  1. obtain a summary of the Personal Data processed by the Company and of the processing activities undertaken, and the identities of the persons with whom such Personal Data has been shared, under Section 11 of the DPDP Act;
  2. review the information provided by you and request correction, completion or updating of inaccurate or incomplete Personal Data, under Rule 5(6) of the SPDI Rules and Section 12 of the DPDP Act;
  3. request erasure of Personal Data that is no longer necessary for the purpose for which it was collected, under Section 12 of the DPDP Act;
  4. withdraw your consent in accordance with Section 5.3;
  5. have your grievances redressed in accordance with Section 13; and
  6. nominate any other individual to exercise your rights in the event of your death or incapacity, under Section 14 of the DPDP Act.

10.2If you are located in the European Economic Area or the United Kingdom, you additionally have the rights of access, rectification, erasure, restriction of processing, data portability and objection under the GDPR, and the right to lodge a complaint with the competent supervisory authority.

10.3You may exercise any of the above rights by writing to the Grievance Officer. The Company may require reasonable verification of your identity before acting on a request, and shall respond within the period prescribed under Applicable Law.

10.4In accordance with Section 15 of the DPDP Act, you shall not impersonate another person while providing Personal Data, suppress any material information, or register a false or frivolous grievance or complaint.

11. CHILDREN

11.1The Website and the services of the Company are intended for businesses and are not directed at persons below the age of eighteen (18) years. The Company does not knowingly collect Personal Data of any child. If the Company becomes aware that it has received the Personal Data of a child without verifiable consent of the parent or lawful guardian, it shall erase such Personal Data without delay.

12. THIRD-PARTY WEBSITES

12.1The Website may contain links to third-party websites. No Personal Data is transmitted to such third parties unless you click on the relevant link. The Company is not responsible for the privacy practices or content of such websites, and you are advised to read their privacy policies.

13. GRIEVANCE OFFICER

13.1In accordance with the Information Technology Act, 2000, Rule 5(9) of the SPDI Rules and the DPDP Act, the name and contact details of the Grievance Officer are provided below. Any discrepancy, grievance, question or request with respect to the processing of your Personal Data may be addressed to:

Name: Savaliya
Designation: Partner and Grievance Officer
Address: Nexer Technology, Shop No. 418, 4th Floor, Meriton Plaza, Yogi Chowk Road, Punagam, Surat – 395010, Gujarat, India
Email: info@nexertechnology.com

13.2The Grievance Officer shall acknowledge your grievance within one (1) week and shall redress it within two (2) weeks from the date of its receipt.

13.3If you are not satisfied with the resolution of your grievance, you may, after exhausting the grievance redressal mechanism of the Company, file a complaint with the Data Protection Board in accordance with the DPDP Act, once the relevant provisions are in force.

14. GOVERNING LAW AND JURISDICTION

14.1This Policy shall be governed by and construed in accordance with the laws of India. Subject to the rights of the Data Protection Board under the DPDP Act, the courts at Surat, Gujarat, India shall have exclusive jurisdiction in respect of any dispute arising out of or in connection with this Policy.

15. CHANGES TO THIS POLICY

15.1The Company may amend this Policy from time to time to reflect changes in its practices or in Applicable Law. The amended Policy shall be published on this page with a revised “Last updated on” date. Where required by Applicable Law, the Company shall notify you of material changes. Your continued use of the Website after the publication of the amended Policy shall constitute your acceptance of the amended Policy.