- Home
- Legal
- Privacy Policy
Privacy Policy
Last Updated: 23 October 2026
Data Sanitization India (“Data Sanitization India”, “we”, “our” or “us”) respects your privacy and is committed to handling personal information responsibly.
Contents
- 1. Information We Collect
- 2. Information We Do Not Intentionally Collect
- 3. How We Use Personal Information
- 4. Legal Grounds for Processing
- 5. Data Protection in India
- 6. Cookies and Similar Technologies
- 7. Analytics and Website Performance
- 8. How We Share Information
- 9. Data Security
- 10. Data Retention
- 11. Your Privacy Rights
- 12. How to Exercise Your Rights
- 13. International Data Transfers
- 14. Children's Privacy
- 15. Data Erasure and Secure Disposal
- 16. Third-Party Websites and Services
- 17. Changes to This Privacy Policy
- 18. Contact Us
- Important Notice
This Privacy Policy explains how we collect, use, disclose, retain and protect information when you visit www.datasanitizationpro.com, contact us, request our products or services, become a customer or partner, or otherwise interact with us.
We aim to collect only the information reasonably necessary for the purposes described in this policy and to handle it in accordance with applicable data protection and privacy requirements.
For individuals in India, our privacy practices are intended to align with applicable requirements under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, as applicable to the relevant processing activity and commencement date. The Rules were notified by the Ministry of Electronics and Information Technology on 14 November 2025 and provide a phased commencement framework.
Where our processing is subject to other privacy laws, including the General Data Protection Regulation (GDPR) or applicable U.S. state privacy laws, we may apply additional requirements where relevant.
This Privacy Policy is intended to explain our practices clearly. It is not a substitute for legal advice.
1. Information We Collect
The information we collect depends on how you interact with us.
Information You Provide Directly
When you contact us, request information, purchase or enquire about our products or services, or submit a form, we may collect:
- Name
- Business email address
- Phone number
- Company or organization name
- Job title or designation
- Business address or postal address
- Information about your requirements
- Information about storage devices or assets you ask us to process
- Service, project or support details
- Billing and transaction information where required
- Information you voluntarily include in enquiries, communications or documents
We do not ask you to provide personal information that is unnecessary for the relevant purpose.
Technical and Usage Information
When you visit our website, certain technical information may be collected automatically, depending on the technologies enabled on the website.
This may include:
- IP address
- Browser type and version
- Operating system
- Device information
- Pages visited
- Referring website or source
- Approximate location derived from technical information, where applicable
- Date and time of access
- Website interaction and performance information
- Security and diagnostic logs
We use this information primarily to operate, secure, maintain and improve our website and services.
Information Related to Business Services
If you become a customer, partner or service user, we may process information necessary to provide the requested service.
For example, a data erasure or IT asset disposition project may require information relating to:
- Customer organization
- Asset identifiers
- Device make and model
- Serial numbers
- Asset tags
- Service records
- Operator or project information
- Certificate and report information
Where information relates to an identifiable individual, we handle it in accordance with applicable privacy requirements.
2. Information We Do Not Intentionally Collect
Our website and services are primarily designed for businesses, organizations and professional users.
We do not intentionally request highly sensitive personal information through ordinary website enquiry forms.
Please do not submit passwords, payment-card numbers, medical records, biometric information or other highly sensitive information through a general contact form unless we specifically request it for a legitimate business purpose and provide an appropriate method for doing so.
If you believe you have accidentally provided information that should not have been submitted, contact us so that we can review the situation.
3. How We Use Personal Information
We may use information for purposes including:
- Responding to enquiries
- Providing requested products or services
- Preparing quotations and proposals
- Managing customer and partner relationships
- Processing service requests
- Providing technical support
- Issuing invoices and business records
- Preparing data erasure certificates and reports
- Managing contracts and commercial arrangements
- Maintaining service and transaction records
- Communicating about requested products, services or support
- Improving our website, software and services
- Maintaining website and information security
- Detecting, preventing and investigating misuse, fraud or security incidents
- Complying with applicable legal and regulatory obligations
- Establishing, exercising or defending legal claims
- Maintaining business and operational records
We do not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law.
4. Legal Grounds for Processing
Depending on the circumstances and applicable law, we may process personal information on one or more lawful grounds.
These may include:
Consent
Where consent is required, we will request it for the relevant purpose.
Where processing is based on consent, applicable law may give you the ability to withdraw that consent. Under the DPDP Act, consent must be free, specific, informed, unconditional and unambiguous, and withdrawal must be capable of being exercised with comparable ease.
Contract or Requested Services
We may process information when it is necessary to provide a product, service, quotation, support or other service you have requested.
Legal or Regulatory Obligations
We may process or retain information where required to comply with applicable laws, regulations, court orders, regulatory requirements or lawful government requests.
Legitimate Interests
Where applicable law recognizes legitimate interests as a lawful basis, we may process information for purposes such as maintaining security, preventing fraud, protecting our systems, improving services and managing our business, provided applicable requirements are satisfied.
5. Data Protection in India
For individuals and organizations in India, we consider applicable requirements under India's evolving data protection framework, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as applicable.
The DPDP framework includes requirements concerning notice, consent, security safeguards, rights of individuals and handling of personal data. The 2025 Rules also establish detailed requirements for notices and other aspects of implementation, with provisions coming into force according to the notified phased timeline.
We review our privacy and data handling practices as applicable requirements develop.
7. Analytics and Website Performance
We may use analytics or website-performance services to understand how visitors use our website and to improve the user experience.
Such services may process technical information such as:
- IP address or related identifiers
- Device information
- Browser information
- Pages viewed
- Referring source
- Approximate geographic information
- Interaction and performance information
Where third-party analytics services are used, their processing may also be subject to their own privacy policies and terms.
9. Data Security
We take reasonable technical and organizational measures to protect information against unauthorized access, misuse, alteration, disclosure, loss or destruction.
Depending on the nature of the information and the service involved, safeguards may include:
- Encryption in transit
- Access controls
- Role-based permissions
- Authentication controls
- Security monitoring
- Endpoint and network security measures
- Backup and recovery controls
- Logging and audit mechanisms
- Personnel confidentiality requirements
- Security reviews and testing
- Secure disposal procedures
No website, network, application or storage system can be guaranteed to be completely secure. We therefore continuously review and improve our security practices according to the nature and risk of the information we handle.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
- Providing requested services
- Maintaining customer and business records
- Meeting contractual requirements
- Complying with legal, tax or regulatory obligations
- Resolving disputes
- Enforcing agreements
- Maintaining security and audit records
- Establishing, exercising or defending legal claims
Retention periods may vary depending on the type of information and the purpose for which it is processed.
When information is no longer required, we may securely delete, anonymize or otherwise dispose of it, subject to applicable legal and operational requirements.
11. Your Privacy Rights
Depending on your location and the law applicable to the processing, you may have rights relating to your personal information.
These may include the ability to:
- Request information about the personal data we process
- Request correction of inaccurate or incomplete information
- Request deletion or erasure where applicable
- Withdraw consent where processing is based on consent
- Request information about how your personal data is being processed
- Raise a privacy-related complaint
- Exercise other rights provided by applicable law
Rights are subject to applicable legal limitations and exceptions.
For individuals covered by the DPDP Act, the applicable rights and mechanisms will operate according to the Act, Rules and their respective commencement and implementation requirements.
12. How to Exercise Your Rights
To submit a privacy request or raise a privacy concern, contact us using the details provided below.
Email: support@datasanitization.in
When making a request, please provide enough information for us to understand and verify the request.
We may need to verify your identity before responding to certain requests to protect personal information from unauthorized disclosure.
We will handle valid requests within the timeframe required by applicable law.
13. International Data Transfers
Some service providers or technology infrastructure used by us may process information outside India.
Where personal information is transferred or processed internationally, we will take steps required by applicable law and use appropriate contractual, technical or organizational safeguards where required.
The availability and location of particular service providers may change as our technology infrastructure develops.
14. Children's Privacy
Our website and business services are primarily intended for businesses, organizations and professional users.
We do not knowingly seek to collect personal information from children through our ordinary business enquiry channels.
If you believe a child has provided personal information to us without appropriate authorization, please contact us so that we can review the information and take appropriate action.
15. Data Erasure and Secure Disposal
Because our business provides data erasure and data sanitization solutions, secure handling and disposal of information is an important part of our operational approach.
Where personal information held by us is no longer required and there is no legal or legitimate reason to retain it, we may securely delete, anonymize or otherwise dispose of it in accordance with our retention and security procedures.
For customer-owned storage devices processed through our services, the handling of the customer's data-bearing media is governed by the applicable service agreement, processing instructions and project documentation.
16. Third-Party Websites and Services
Our website may contain links to third-party websites, platforms or services.
A link to another website does not mean that we control that website or endorse its privacy practices.
When you leave our website, we recommend reviewing the privacy policy of the third party before providing personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to our technology
- Changes to our data handling practices
- Changes to applicable laws or regulations
- Changes to privacy or security requirements
When we make material changes, we may update the “Last Updated” date at the top of this page and, where appropriate, provide additional notice.
We encourage you to review this page periodically.
18. Contact Us
If you have questions about this Privacy Policy, want to exercise an applicable privacy right, or wish to raise a privacy concern, please contact us.
Data Sanitization India
Email: support@datasanitization.inPhone: +91 8527709690
Office Address: 7th Floor, Meghdoot Building 94, 704, Nehru Place, New Delhi, Delhi 110019, India
Website: www.datasanitizationpro.com
Important Notice
This Privacy Policy describes our general privacy practices and is intended to provide transparency about how information is handled.
It does not create contractual rights beyond those required by applicable law or an applicable agreement between you and us.
Where a specific customer contract, data processing agreement, service agreement or other written agreement contains privacy or data-processing provisions, those provisions may apply to the relevant relationship to the extent permitted by applicable law.