Legal
Privacy Policy
This Privacy Notice explains how, why, and when Netrik Solutions processes personal data when you use our website, services, or products.
Purpose of this Notice
At Netrik Solutions, we are committed to safeguarding your privacy and protecting your personal information. This Privacy Notice provides information regarding your privacy rights and our obligations under applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA).
This includes data you provide via our website when you purchase products or services, request a trial, or register for a marketing event. Please read this Privacy Notice together with any other notice we may provide on specific occasions when we process personal data about you.
Who We Are and What We Do
Netrik Solutions and its corporate affiliates provide intelligent database scanning services to help organizations secure, assess, and manage their data infrastructure.
We are the Data Fiduciary of your personal data when you visit our website or use our corporate services. When you use our database scanning services to scan your own databases, you are the Data Fiduciary of the data being scanned, and we act as your Data Processor.
Data Protection Officer / Grievance Officer
We have appointed a Grievance Officer responsible for questions about this Privacy Notice, processing of your personal data, and grievances. You may contact the Grievance Officer at any time, free of charge.
Email: privacy@netriksolutions.com
Under the DPDPA, we are required to acknowledge complaints within 24 hours and resolve them within 30 days.
What Information We Collect, How, and Why
Personal data is any data about an individual who is identifiable by or in relation to such data. It does not include anonymous or aggregated data where identity has been removed.
| Data Type | Definition |
|---|---|
| Technical data | Browser type and version, operating system/platform, IP address, internet service provider, and date/time of website access. |
| Usage data | Information about how you use our website and services, referring websites, and clickstream behavior. |
| Marketing data | Your marketing preferences and communication choices. |
| Contact information | Full name, work/home address, telephone number, email address, and job title. |
| Identity data | User ID, username, and password stored in encrypted or hashed form. |
| Financial data | Service purchases, billing address, and payment information processed securely through our payment gateway. |
| Conversational data | Recordings and transcripts of calls and email exchanges between you and our representatives, with consent. |
| Telemetry data | Product usage metrics collected from our database scanning tools to measure and improve our services. |
Lawful Grounds for Processing
Consent
You have given clear, specific, and informed consent for us to process your data for a specific purpose.
Legitimate Use
Processing is necessary for the purposes specified in this notice, or is incidental to or connected with such purpose, and is consistent with your reasonable expectations.
Contract Performance
Processing is necessary to fulfil a contract with you, or to take steps at your request before entering into a contract.
Legal Obligation
We must process your data to comply with a legal obligation or court order in India.
Why We Process Your Personal Data
1. Access and use of our websites
- Purpose
- To allow you to access our website, maintain site security, and analyze usage patterns to improve our services.
- Data Types
- Technical Data, Usage Data.
- Lawful Basis
- Legitimate Use and Consent for cookies.
2. To process your inquiries, trials, and service requests
- Purpose
- When you inquire about or order our database scanning services, we process your data to complete transactions, provide trials, and process payments.
- Data Types
- Contact Information, Identity Data, Financial Data.
- Lawful Basis
- Contract Performance and Legitimate Use.
3. Direct marketing activities
- Purpose
- To send newsletters, product updates, and recommendations when you have consented to receive them.
- Data Types
- Contact Information, Marketing Data, Technical Data.
- Lawful Basis
- Consent. You may withdraw consent at any time by clicking unsubscribe or contacting us.
4. Provision of database scanning services
- Purpose
- When you subscribe to our database scanning services, we process data on your behalf to perform vulnerability scans, compliance checks, and data assessments on your databases.
- Data Types
- Technical Data, Telemetry Data, and any database contents scanned by our tools.
- Lawful Basis
- Contract Performance. For customer databases, the customer is the Data Fiduciary and Netrik Solutions acts strictly as a Data Processor.
5. Call recording and transcripts
- Purpose
- For product improvement and employee training.
- Data Types
- Conversational Data.
- Lawful Basis
- Consent. We record calls only if you are informed and provide consent before recording.
How We Collect Your Personal Data
- Data you send to us: information you provide directly when filling forms, subscribing to newsletters, requesting trials, or corresponding with us.
- Data we collect automatically: technical and usage data collected through cookies, web beacons, and similar tools.
- Third parties: information from credible third-party business directories and publicly available sources to keep business contact records updated.
Special Categories of Personal Data
We do not generally collect sensitive personal data through our corporate website. However, our database scanning tools may incidentally scan customer databases that contain sensitive personal data belonging to customer end-users.
We process such data strictly as a Data Processor under customer instructions and implement strict security measures to ensure this data is not accessed, stored, or misused by Netrik Solutions.
Who We Share Your Personal Data With
- Third party service providers, such as cloud hosting providers, payment gateways, and CRM providers, who must keep personal data confidential and secure.
- Third party acquirers if we sell, transfer, or merge parts of our business.
- Legal authorities where required to comply with Indian laws, regulations, subpoenas, court orders, or to protect rights and safety.
Automated Decision-Making and Profiling
We do not currently make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.
Your Privacy Rights
- Right to Access: You can request a summary of your personal data being processed by us and the processing activities carried out.
- Right to Correction: You can request correction of incomplete or inaccurate personal data we hold about you.
- Right to Erasure: You can ask us to delete your personal data, provided the legal grounds for retaining it no longer exist.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time. Withdrawal will not affect processing carried out before withdrawal.
- Right to Nominate: You may nominate another individual to exercise your rights in the event of death or incapacity.
To exercise these rights, contact our Grievance Officer at privacy@netriksolutions.com. We will respond within the timeframe mandated by Indian law.
Data Security
We use appropriate technical, physical, and administrative measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Given the nature of our database scanning business, we use industry-standard encryption and zero-trust architecture.
In the event of a data breach, we will notify affected Data Principals and the Data Protection Board of India as required under the DPDPA.
Retention, Transfers, Children, and Changes
We keep personal data only as long as necessary for the purposes collected, or as required by Indian tax, accounting, or legal requirements.
If we transfer personal data outside India, we will ensure such transfers comply with the DPDPA and use appropriate contractual and security safeguards.
Our website and services are directed at businesses and adults. We do not knowingly collect personal data of children under 18.
We may update this Privacy Notice from time to time and will post significant changes on our website.
Contact Us
For questions, concerns, or grievances regarding this Privacy Notice or how we handle personal data, contact Netrik Solutions Pvt. Ltd. at privacy@netriksolutions.com.