Privacy policy
How we collect, use and protect personal data on this website and in our services.
- Last updated
This policy is a starting template. Have it reviewed by a qualified adviser in each jurisdiction you operate in before relying on it.
Who we are
Ldelight Solutions Private Limited is the data controller for personal data collected through this website. Our registered address and contact details are on the contact page.
What we collect
- Information you give us — name, email, phone, company and the content of your message when you use a contact or subscription form.
- Technical information — IP address, browser type, device type, referring page and pages viewed, collected through server logs and analytics.
- Cookies — see the cookie section below.
Why we use it
- To respond to enquiries and provide services you have requested (contract, or legitimate interest in responding to a business enquiry).
- To send updates you have subscribed to (consent, withdrawable at any time).
- To operate, secure and improve the website (legitimate interest).
- To meet legal and regulatory obligations.
Applicable law
We are established in India and process personal data under the Digital Personal Data Protection Act, 2023. Where we handle personal data of individuals in the UK or the EEA — which we do for a number of our clients — we also process on the UK and EU GDPR bases set out above: contract, legitimate interest, consent or legal obligation. Where we rely on legitimate interest we have assessed that our interest does not override your rights, and you may object at any time.
How long we keep it
Enquiry records are retained for 24 months from the last contact unless a business relationship begins, in which case they are retained for the duration of that relationship plus seven years for tax and legal purposes. Subscription records are retained until you unsubscribe. Server logs are retained for 90 days.
Who we share it with
We use third-party processors for hosting, email delivery, analytics and payment processing. Each is bound by a data processing agreement. We do not sell personal data. We do not share it with third parties for their own marketing.
International transfers
We are based in India, so personal data you send us is processed in India, and some of our processors operate elsewhere. Where personal data originates in the UK or the EEA, transfers are made under standard contractual clauses. For client engagements we can host and process data in a region you nominate — tell us at the outset and we will design for it.
Your rights
Depending on where you are, you may have the right to access, correct, delete or port your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, contact us using the details on the contact page. You may also complain to the Data Protection Board of India, or — if you are in the UK or the EEA — to your local supervisory authority.
Cookies
We use essential cookies required for the site to function, and analytics cookies where you have consented. You can control cookies through your browser settings; blocking essential cookies may break parts of the site.
Security
We use encryption in transit and at rest, role-based access control, and logging of access to personal data. No system is perfectly secure, and we will notify you and the relevant authority of a qualifying breach within the timeframes the law requires.
Changes
We will post any changes on this page and update the date below. Material changes will be notified directly where we hold your contact details.