Legal
Privacy Policy
How we collect, use, and protect your personal data — and the rights you have over it.
Last updated: July 7, 2026
1. Introduction
Decyb Technology LLP ("we", "us", "our") operates this website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Indian data protection law.
2. Data Controller
The data controller responsible for your personal data is Decyb Technology LLP, India. For any privacy-related questions or to exercise your rights, contact us via our contact page or email [email protected].
3. Information We Collect
Personal information you provide
- Name and email address (when you submit a contact form, book a call, or place an order)
- Phone number and company name (if provided)
- Message content and project details you share with us
- Payment information (processed securely by Razorpay — we do not store card details)
Automatically collected information
- IP address (stored only as a one-way hash, never in raw form)
- Browser type and version, device information
- Pages visited and time spent
- Referral source and UTM parameters
4. Legal Bases for Processing (GDPR)
- Contract — processing needed to deliver services you purchase or respond to your enquiries.
- Consent — analytics and marketing cookies (GA4, GTM, Meta Pixel) load only after you accept them via our cookie banner. You can withdraw consent at any time (see our Cookie Policy).
- Legitimate interest — privacy-preserving first-party analytics (hashed IPs, no cross-site tracking) and fraud prevention.
- Legal obligation — retaining invoices and order records for tax and accounting law.
5. How We Use Your Information
- To provide and deliver the services you have purchased
- To process payments securely through Razorpay
- To communicate with you about your orders, inquiries, or service updates
- To send OTP verification codes for authentication
- To improve our website and services based on usage analytics
- To comply with legal obligations
We do not sell your personal data to anyone.
6. Third-Party Services
We use the following third-party services that may process data on our behalf:
- Razorpay — payment processing. Subject to Razorpay's Privacy Policy.
- Google Analytics (GA4) — website analytics (consent-based).
- Google Tag Manager (GTM) — tag management for analytics (consent-based).
- Meta Pixel — conversion tracking and advertising optimization (consent-based).
These services have their own privacy policies. We recommend reviewing them separately.
7. International Data Transfers
Some of our processors (e.g., Google, Meta) may transfer data outside the EEA/your country. Where this occurs, transfers rely on adequacy decisions or Standard Contractual Clauses as required by the GDPR.
8. Cookies & Tracking
We use cookies and similar technologies for analytics and marketing. Non-essential cookies are set only after you give consent through our cookie banner. See our Cookie Policy for the full list and instructions on changing your choice.
9. Data Security
We implement industry-standard security measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS)
- Hashed storage of sensitive data (passwords, IP addresses)
- Secure payment processing through PCI-DSS compliant Razorpay
- Access controls and authentication for admin and client portals
However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Order records and payment information are retained for accounting and legal purposes. Lead and enquiry data is deleted or anonymized when no longer needed.
11. Your Rights
Under the GDPR and applicable law, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten", subject to legal obligations)
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting prior processing
- Lodge a complaint with your local supervisory authority
To exercise these rights, contact us via our contact page. We respond to all verified requests within 30 days. See our GDPR Compliance page for more detail.
12. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
14. Contact Us
If you have questions about this Privacy Policy, please contact us via our contact page or email [email protected].
Decyb Technology LLP
India