Privacy policy

SpandaTek Pvt. Ltd. (“SpandaTek”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit spandatek.com (the “Website”) or contact us through it.

This Policy is published in accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it, to the extent they apply. For the purposes of the DPDP Act, SpandaTek is the Data Fiduciary for the personal data described in this Policy.

By using the Website or submitting information through it, you acknowledge that you have read this Policy.

This Policy applies only to personal data collected through the Website and through communications you initiate with us from it. It does not apply to personal data processed through our products and services, including DRK, AyuReader, Campus Payments, Patrol and GMS (the “Products”).

Where we provide a Product to an organisation, such as a university, company or housing society, that organisation determines why and how personal data is processed through the Product, and we process such data on its behalf and in accordance with its instructions and our agreement with it. Questions about that processing should be directed to the organisation in the first instance. Products offered directly to individuals are governed by the terms and notices that apply to those Products.

(a) Information you provide to us

When you submit the contact form on the Website, or write to or call us, we collect:

• your name;
• your email address;
• your telephone number, if you choose to provide it;
• the name of your organisation, if you choose to provide it;
• the Product you are interested in; and
• any other information you include in your message.

Please do not include sensitive personal data, such as financial, health or biometric information, in your message. We do not require it to respond to your enquiry.

(b) Information collected automatically

When you visit the Website, the servers of our hosting provider automatically record technical information, such as your IP address, browser and device type, the pages requested, the referring page, and the date and time of each request (“Log Data”). Log Data is used to operate and secure the Website and is not used to identify you, except where necessary to investigate misuse or a security incident.

(c) Cookies

The Website does not use advertising or analytics cookies, and does not use cookies to track you across other websites. Our hosting infrastructure may use technical storage that is strictly necessary to deliver the Website securely. If we introduce analytics or other non-essential cookies, we will update this Policy and, where required by law, seek your consent before using them.

We use personal data only for the following purposes:

• to respond to your enquiry, arrange a demonstration and provide information about the Products you ask about;
• to communicate with you about your enquiry, including reasonable follow-up;
• to maintain records of our business communications;
• to operate, maintain and secure the Website, and to detect and prevent spam, fraud and abuse; and
• to comply with applicable law, respond to lawful requests from authorities, and establish, exercise or defend legal claims.

We do not sell or rent personal data, and we do not use the information you send us for marketing unrelated to your enquiry without your consent.

You provide information through the Website voluntarily. We process it on the basis of your consent, or for the specified purpose for which you have voluntarily provided it, as permitted under the DPDP Act. Log Data is processed to keep the Website secure and available, and to meet our legal obligations.

You may withdraw your consent at any time by writing to contact@spandatek.com. Withdrawal will not affect processing carried out before it, and we may be unable to continue responding to your enquiry once consent is withdrawn.

We share personal data only as described below:

• Service providers. We use trusted providers to host the Website and to deliver messages sent through the contact form to our inbox. They process personal data only on our instructions and under contractual obligations of confidentiality and security.
• Legal requirements. We may disclose personal data where required by law, regulation, legal process or an order of a court or government authority, or where necessary to protect the rights, property or safety of SpandaTek, our customers or others.
• Business transfers. In connection with a merger, acquisition, restructuring or sale of all or part of our business, personal data may be transferred to the successor entity, which will be bound by obligations consistent with this Policy.
• With your consent. In any other case, only with your consent.

Some of our service providers may store or process personal data outside India. Any such transfer is made in accordance with applicable law, including any restrictions notified by the Central Government under the DPDP Act, and we take reasonable steps to ensure the data continues to be protected in line with this Policy.

We retain personal data only for as long as it is needed for the purposes set out in this Policy, including to respond to your enquiry and to maintain records of our business communications, or for longer where retention is required by law. Log Data is retained by our hosting provider for a limited period in line with its standard practices. When personal data is no longer needed, we delete it or anonymise it so that it can no longer be associated with you.

We implement reasonable security practices and procedures to protect personal data against unauthorised access, use, alteration, disclosure and loss. These include encryption of data in transit, access limited to personnel who need it to perform their duties, and the use of reputable service providers.

No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify affected individuals and the relevant authorities where and as required by law.

Subject to applicable law, you have the right to:

• obtain a summary of the personal data we hold about you and the processing activities undertaken with it;
• request the correction, completion or updating of personal data that is inaccurate or incomplete;
• request the erasure of your personal data, unless its retention is necessary for the specified purpose or required by law;
• withdraw your consent at any time;
• have your grievances redressed; and
• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to contact@spandatek.com with the subject line “Privacy request”. We may need to verify your identity before acting on a request, and we will respond within the period prescribed by applicable law.

In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, questions, concerns and complaints about the processing of your personal data may be addressed to our Grievance Officer:

Grievance Officer
SpandaTek Pvt. Ltd.
Email: contact@spandatek.com
Telephone: +91 89176 40595

We will acknowledge your grievance and resolve it within the period prescribed by applicable law. If you are not satisfied with our response, you may, after exhausting this grievance redressal mechanism, file a complaint with the Data Protection Board of India.

The Website is intended for organisations and adult individuals and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided personal data to us through the Website, please contact us at contact@spandatek.com and we will delete it.

The Website may contain links to other websites, including websites for our Products. This Policy does not apply to those websites, and we are not responsible for the privacy practices of websites operated by third parties. We encourage you to read the privacy notices of any website you visit.

We may update this Policy from time to time to reflect changes in our practices or in applicable law. The revised Policy will be posted on this page with an updated “Last updated” date. Where changes are material, we will take reasonable steps to bring them to your attention.

This Policy is governed by the laws of India. Any dispute arising in connection with this Policy is subject to the jurisdiction of the competent courts in India.

For any question about this Policy or our handling of personal data, write to contact@spandatek.com, call +91 89176 40595, or use our contact form.