1. Purpose of This Policy

This policy explains:

• What personal data we collect
• Why we collect it
• How we protect it
• How long we keep it
• Your rights as a Data Principal
• Our responsibilities as a Data Fiduciary under the DPDP Act, 2023

WebSage and CodeBitel® are committed to transparency, lawful processing, and safeguarding your data.

2. Definitions (As Per DPDP Act 2023)

Data Principal

The individual whose personal data is being processed.

Data Fiduciary

WebSage/CodeBitel®, who determines the purpose and means of processing data.

Data Processor

Any third-party entity that processes data on our behalf.

Personal Data

Any data that can identify an individual directly or indirectly.

3. Information We Collect

We may collect the following data based on the service or interaction:

Personal Identification Information

• Full name
• Email address
• Phone number
• Address (if needed)

Technical & Usage Information

• IP address
• Device information
• Browser data
• Cookies & session logs
• Website interaction analytics

Business & Service Data

• Project requirements
• Technical documents shared by clients
• Login credentials voluntarily provided for integration work

Financial Data (Through Secure Gateways Only)

• Payment details (processed via third-party payment gateways)
• Transaction IDs

We do not store full credit/debit card data.

4. Purpose of Data Collection

We collect data to:

• Provide and manage our services
• Communicate regarding project updates & support
• Improve website performance and user experience
• Verify user identity where required
• Maintain security and prevent fraud
• Comply with legal and contractual obligations

We never sell, rent, or trade your personal data.

5. Lawful Basis for Processing

We process personal data based on one or more of the following:

• User consent
• Performance of a contract (service agreement)
• Legal compliance
• Legitimate business interests (e.g., fraud prevention)

Consent can be withdrawn anytime by contacting us.

6. How We Store & Protect Your Data

We use industry-standard security and encryption practices to protect your data.

Security Measures Include:

• Secure encrypted servers (SSL/TLS)
• Limited privileged access
• Multi-layer firewalls
• Regular malware scanning
• Zero-Trust access architecture
• Role-based access control for internal staff

Data Retention Policy:

We retain data only for as long as necessary to:

• Complete the service
• Meet legal obligations
• Maintain transactional records

Client project files are stored securely and removed upon request after service completion (except where legally required).

7. Data Sharing & Third Parties

We may share data only with:

• Official service partners (e.g., hosting providers, cloud services)
• Payment gateways for transactions
• Legal authorities when required by law

All third parties are bound by confidentiality and data protection obligations.

We never sell or commercially share data for advertising.

8. Your Rights Under the DPDP Act

As a Data Principal, you have the right to:

1. Right to Access

Request details of what data we store.

2. Right to Correction

Update or correct inaccurate personal data.

3. Right to Erasure

Request deletion of personal data (subject to legal requirements).

4. Right to Withdraw Consent

Stop data processing at any time.

5. Right to Nominate

Nominate someone to exercise your rights in case of incapacity.

Requests can be made via email as listed below.

9. Children's Data

We do not knowingly collect data from individuals under 18 years of age.
If such data is discovered, it will be deleted immediately.

10. Cookies & Tracking Policy

We use cookies for:

• Analytics
• Improved user experience
• Session management

Users may disable cookies via their browser, but certain features may not function.

11. Breach Notification Policy

In the unlikely event of a data breach:

• We will notify affected users as required by law
• We will take immediate corrective action
• We will document and report the breach to authorities if mandated

12. International Data Transfers

If data is transferred outside India (e.g., cloud hosting locations), it is protected under equivalent or higher data protection standards.

13. Contact Details for Data Requests

For Data Access, Correction, Deletion, or Complaint:

Data Protection Officer (DPO)
Ajay Purohit
WebSage CodeBitel® Subsidiary
📧 [email protected]
📍 Dehradun, Uttarakhand, India

14. Policy Updates

This DPDP Policy may be updated periodically. Continued use of our services constitutes acceptance of any updated terms.

Conclusion

WebSage is committed to full compliance with the DPDP Act, ensuring that your data is secure, respected, and handled with transparency.

If you have any questions regarding this policy, please contact us.

Team WebSage
(A CodeBitel® Subsidiary)