India DPDP privacy framework

PrivacyPolicy.

A clear view of how BimShri Technologies handles digital personal data, consent, security, retention, privacy rights, and grievance requests.

Effective date

September 26, 2026

Framework

DPDP-aligned privacy notice

The DPDP Act and Rules have phased commencement dates. This policy is designed to support current privacy practices and readiness for provisions becoming applicable over time.
DPDP privacy framework
i

This notice applies when you visit our website, submit an enquiry, communicate with us, or engage BimShri Technologies for software, web, API, ERP, CRM, or related technology services.

01
DPDP

Introduction

BimShri Technologies is a technology services brand operating in India. We respect your privacy and are committed to handling digital personal data responsibly. This Privacy Policy explains how we collect, use, store, share, protect, retain, and erase personal data when you visit our website, contact us, or engage us for services. This policy is prepared with reference to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, subject to their phased commencement and other applicable laws in India.

02
FIDUCIARY

Data Fiduciary

For personal data collected through this website and our direct business interactions, BimShri Technologies determines the purpose and means of processing and may act as the Data Fiduciary where applicable. Questions, requests, consent withdrawal, correction, erasure, or grievances may be submitted through our Contact Us page or sent to hello@bimshritech.com.

03
COLLECT

Personal Data We Collect

Depending on how you interact with us, we may collect your name, email address, phone number, company or organisation name, project requirements, messages and communications, billing or transaction-related information where relevant to a service engagement, and technical information such as IP address, browser or device information, referral information, cookies, and analytics data. We aim to collect only personal data reasonably necessary for the specified purpose.

04
PURPOSE

Purpose of Processing

We may process personal data to respond to enquiries, provide quotations, communicate about projects, deliver and support software or IT services, manage client relationships, maintain security, prevent misuse, improve website performance and user experience, maintain business and accounting records, comply with legal obligations, and carry out other purposes clearly communicated to you at or before collection.

06
COOKIES

Cookies & Analytics

Our website may use cookies, similar technologies, and analytics services to operate the website, understand usage, diagnose performance issues, and improve our services. Where consent is required for non-essential analytics or similar processing, we will seek an appropriate choice before such processing. You may also manage cookies through your browser settings, although disabling some cookies may affect website functionality.

07
PROCESSORS

Data Sharing & Service Providers

We do not sell personal data. We may share personal data with trusted hosting providers, cloud infrastructure providers, analytics providers, email or communication providers, payment or accounting providers, professional advisers, contractors, or other service providers only where reasonably necessary for the stated purpose, subject to appropriate confidentiality, security, contractual, or legal controls. We may also disclose data when required by applicable law or a valid legal process.

08
TRANSFER

Cross-Border Processing

Some technology or cloud service providers used by us may process or store data outside India. Any such transfer or processing will be handled subject to restrictions or requirements notified by the Government of India and any other applicable Indian law that provides a higher level of protection or additional transfer restrictions.

09
SECURE

Reasonable Security Safeguards

We use reasonable technical and organisational safeguards appropriate to the nature of the data and processing. These may include access controls, authentication, encryption or secure transmission where appropriate, restricted privileges, logging and monitoring, backups, secure configuration, vulnerability management, and contractual safeguards with service providers. No online or electronic system can guarantee absolute security.

10
BREACH

Personal Data Breach

If we become aware of a personal data breach, we will assess and contain the incident, take reasonable remedial measures, and provide notifications to affected individuals, the Data Protection Board of India, or other authorities where and when required by applicable law and the effective provisions of the DPDP framework. We may also provide practical steps that affected individuals can take to reduce risk.

11
RETAIN

Data Retention & Erasure

We retain personal data only for as long as reasonably necessary for the specified purpose, business or contractual needs, dispute resolution, security, accounting, or compliance with law. Where the purpose is complete, consent is validly withdrawn, or erasure is otherwise required, we will take reasonable steps to erase or anonymise the relevant personal data unless retention is necessary for an applicable legal requirement or another permitted purpose.

12
RIGHTS

Your Rights as a Data Principal

Subject to the applicable and effective provisions of Indian law, you may request access to information about your personal data and processing, correction of inaccurate or misleading data, completion of incomplete data, updating of data, erasure where permitted, grievance redressal, and nomination of another individual to exercise applicable rights in the event of death or incapacity. Where processing is based on consent, you may also withdraw consent. Requests can be sent to hello@bimshritech.com.

13
CHILDREN

Children's Personal Data

Our website and business services are primarily intended for adults and organisations and are not directed at children. Under the DPDP framework, a child generally means an individual under eighteen years of age. Where we knowingly process a child's personal data and the relevant legal requirements apply, we will obtain verifiable consent from a parent or lawful guardian and avoid processing that is prohibited by applicable law.

14
DUTIES

Your Duties

When exercising privacy rights, please provide accurate and authentic information, do not impersonate another person, do not suppress material information where identity verification is required, and do not submit false or frivolous grievances. We may request reasonable information to verify identity before acting on a privacy request.

15
GRIEVANCE

Grievance Redressal

If you have a privacy concern or believe your personal data has not been handled appropriately, please contact us first at hello@bimshritech.com with the subject 'DPDP Privacy Request'. Please include enough information for us to identify the request and respond appropriately. Where applicable, you may exercise further remedies available under Indian law after using the grievance redressal mechanism provided by us.

16
UPDATE

Policy Changes

We may update this Privacy Policy to reflect changes in our services, technology, business practices, or applicable law, including the phased commencement of provisions under the DPDP Act and Rules. Material changes will be published on this page with an updated effective date.

17
PRIVACY & GRIEVANCE CONTACT

Exercise your privacy rights.

For privacy questions, consent withdrawal, access, correction, updating, erasure, or grievance requests, use our Contact Us page or email BimShri Technologies with the subject "DPDP Privacy Request".