Privacy Policy

1. Who we are

Sahajway Technologies Pvt. Ltd. ("Sahajway", "we", "us") is a software engineering company registered in India and operating from Nadiad, Gujarat, India. We are the data controller for personal information submitted through this website.

If you have any question about this policy or about how your data is handled, contact us at info@sahajwaytechnologies.com.

2. What we collect

We only collect information you choose to give us through one of the forms on this site. We do not require an account, and we do not buy personal data from third parties.

Contact form

First name, last name (optional), email address, the service you are interested in, and your message.

Quote request

Name, email address, phone number, indicative budget range, and your project requirements.

Consultation booking

Name, email address, phone number, service of interest, preferred date and time, your timezone, and the details you provide. If a meeting is scheduled, a calendar event and video meeting link are created.

Career application

Position applied for, full name, email address, phone number, your CV or resume file, and any comments you add.

Technical data

Standard server logs including IP address and browser user agent, recorded for security and abuse prevention.

3. Why we use it

• To reply to your enquiry, prepare a proposal, or answer a question you have asked.
• To schedule and hold a consultation you have requested, including sending a calendar invitation and meeting link.
• To assess a job application and communicate with you about it.
• To protect the website against automated abuse and spam submissions.
• To meet legal, accounting, and record-keeping obligations that apply to us.

We do not use your information for automated decision-making or profiling, and we do not use it to build advertising audiences.

4. Legal basis

Where the Digital Personal Data Protection Act, 2023 applies, we process your data on the basis of the consent you give when you submit a form, and for the legitimate uses that Act permits.

Where the GDPR applies because you are in the European Economic Area or the United Kingdom, our legal bases are your consent, and our legitimate interest in responding to business enquiries and in keeping our systems secure.

5. Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing. We share it only with the service providers required to operate this website and respond to you:

Cloudflare

Turnstile bot protection runs on our forms to block automated submissions.

Google

Calendar and Meet are used to create the event and video link when you book a consultation.

Email provider

Our email service delivers form notifications to our team and confirmations to you.

Hosting provider

Our application and database are run on cloud infrastructure that stores the submitted data.

6. Where your data is stored

Form submissions are stored in a PostgreSQL database operated by us. Uploaded CV files are stored on our own infrastructure and are not made publicly accessible.

Some of the service providers listed above may process data outside India. Where that happens, we rely on the contractual protections those providers offer.

7. How long we keep it

We keep personal data only as long as it is useful for the purpose it was given, or as long as we are required to keep it:

• Enquiries, quote requests, and consultation bookings: retained while the opportunity is active and for a reasonable period afterwards for business records.
• Career applications and CVs: retained for the duration of the recruitment process, and afterwards only if you have agreed to be considered for future roles.
• Server and security logs: retained for a short period for security investigation.

8. How we protect it

• Data is transmitted over encrypted HTTPS connections.
• Access to the database and to uploaded files is restricted to team members who need it.
• Forms are protected against automated abuse.
• Dependencies are monitored and patched for known security vulnerabilities.

No system can be guaranteed completely secure. If a breach occurs that affects your personal data, we will notify you and the relevant authority as required by law.

9. Your rights

You can ask us to do any of the following, and we will respond within the timeframe the applicable law requires:

• Access — get a copy of the personal data we hold about you.
• Correction — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted, where we are not required to keep it.
• Withdraw consent — stop us processing data you previously consented to.
• Complain — raise a concern with the relevant data protection authority.

10. Cookies

This website does not use advertising or tracking cookies. We store your light or dark theme preference in your browser, which stays on your device and is never sent to us.

If we add analytics in future, we will update this policy and, where required, ask for your consent first.

11. Children

This website is intended for business use and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, contact us and we will delete it.

12. Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant, we will take reasonable steps to tell you.