Privacy Policy

Narendra Infotech Ltd (“we”, “us”, “our”) is a company registered in England & Wales (company number 05215412), with its registered office at 97 Thames Bank Place, Thamesmead, London, SE28 8PT, United Kingdom.

We are the “data controller” responsible for your personal data when you use this website or engage our services. If you have any questions about this policy or how we handle your data, contact us at hello@narendrainfotech.com or write to us at the registered office address above, marking your letter “Data Protection”.

Depending on where you are located, your personal data is protected by one or more of the following:

• The UK GDPR and the Data Protection Act 2018 (for individuals in the United Kingdom).
• The EU General Data Protection Regulation (Regulation (EU) 2016/679) (for individuals in the European Economic Area).
• The Privacy and Electronic Communications Regulations 2003 (PECR), which govern electronic marketing and the use of cookies.

Where this policy refers to “GDPR”, it means the UK GDPR and/or the EU GDPR as applicable to you.

We collect and process the following categories of personal data:

• Identity & contact data — name, company/brand, job role, email address, phone number and postal address.
• Enquiry & project data — the goals, budget, timeline and project details you share through our forms, by email, WhatsApp or on calls.
• Technical data — IP address, device and browser type, operating system and approximate location.
• Usage data — how you interact with our website, including pages visited, referring source and time spent.
• Marketing & communications data — your preferences for receiving marketing from us and your consent records.

We do not intentionally collect special category data (such as health, ethnicity or religious beliefs). Please do not send us such data unless we specifically request it for a defined purpose.

• Directly from you — when you complete a form, start a project, email, call or message us, or otherwise correspond with us.
• Automatically — through cookies and similar technologies when you use our website (see “Cookies and similar technologies” below).
• From third parties — such as analytics and advertising providers (e.g. Google, Meta), and publicly available sources, where this is lawful.

Under the GDPR we must have a lawful basis for each use of your personal data. We rely on the following:

• To respond to your enquiry and provide our services — lawful basis: performance of a contract, or our legitimate interests in responding to you.
• To operate, secure and improve our website — lawful basis: our legitimate interests in running an effective, safe business.
• To send marketing communications and serve relevant advertising — lawful basis: your consent, or our legitimate interests (soft opt-in) where permitted by PECR.
• To set non-essential cookies and analytics/advertising technologies — lawful basis: your consent.
• To comply with legal and regulatory obligations — lawful basis: compliance with a legal obligation.

Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You can ask us about this balancing test at any time. We never sell your personal data.

We will only send you electronic marketing (such as emails) where you have given your consent, or where you are an existing customer and we are contacting you about similar services (the PECR “soft opt-in”). Every marketing message includes an easy, free way to unsubscribe.

We use online advertising platforms, including Google Ads and Meta (Facebook/Instagram) Ads. With your consent, these platforms may set cookies or use tags to measure campaign performance, build audiences and show you relevant ads on other websites (“retargeting”). You can manage advertising cookies through our cookie banner and your browser, and opt out of personalised ads through each platform's settings.

You have an absolute right to object to direct marketing at any time. To opt out, use the unsubscribe link in any message, adjust your cookie preferences, or email us at hello@narendrainfotech.com.

Cookies are small files placed on your device. Under PECR and the GDPR, we set non-essential cookies only after you give consent through our cookie banner. We use the following categories:

• Strictly necessary cookies — required for the website to function and security. These do not require consent.
• Analytics cookies — help us understand how the site is used so we can improve it. Set only with your consent.
• Advertising/marketing cookies — used to measure and personalise advertising (e.g. Google, Meta). Set only with your consent.

You can accept or reject non-essential cookies via the banner shown on your first visit, change your choice at any time using the “Cookie preferences” link in the footer, and control cookies through your browser settings. Rejecting non-essential cookies will not affect core site functionality.

We share personal data only where necessary, with appropriate safeguards in place, including with:

• Service providers (processors) who help us operate — hosting, IT, analytics, advertising, email/CRM and communications providers — who act only on our instructions under a written contract.
• Professional advisers such as lawyers, accountants and auditors, where required.
• Authorities, regulators or law enforcement, where we are legally required to disclose data.
• A buyer or successor in the event of a business sale, merger or reorganisation.

Some of our service providers are located outside the UK or the European Economic Area. Where we transfer your personal data internationally, we ensure it is protected by an appropriate safeguard recognised under the GDPR — such as an adequacy decision/adequacy regulations, the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement (or Addendum).

We keep personal data only for as long as necessary for the purposes set out in this policy, including to satisfy any legal, accounting or reporting requirements. Enquiry data we have no ongoing relationship around is typically deleted or anonymised within 24 months. We keep records of marketing consent for as long as you remain subscribed and for a reasonable period afterwards as evidence of compliance.

We implement appropriate technical and organisational measures — aligned with ISO 27001 principles — to protect your personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption in transit and staff confidentiality obligations. In the event of a personal data breach that poses a risk to your rights, we will notify the relevant supervisory authority and, where required, you.

Under the GDPR you have the following rights, free of charge, in most circumstances:

• Access — to obtain a copy of the personal data we hold about you.
• Rectification — to have inaccurate or incomplete data corrected.
• Erasure — to ask us to delete your data (the “right to be forgotten”).
• Restriction — to ask us to limit how we use your data.
• Portability — to receive your data in a structured, machine-readable format.
• Object — to object to processing based on legitimate interests, and an absolute right to object to direct marketing.
• Withdraw consent — at any time, where we rely on your consent.
• Rights regarding automated decision-making — we do not make decisions producing legal effects about you by solely automated means.

To exercise any of these rights, email us at hello@narendrainfotech.com. We will respond within one month. You will not normally have to pay a fee.

If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection authority:

• In the UK: the Information Commissioner's Office (ICO) — ico.org.uk, helpline 0303 123 1113.
• In the EEA: your local data protection supervisory authority.

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices or the law. We will post the updated version here with a revised “Last updated” date, and where changes are significant we will take reasonable steps to notify you.

For any privacy question or to exercise your rights, email hello@narendrainfotech.com or write to us at 97 Thames Bank Place, Thamesmead, London, SE28 8PT, United Kingdom, marking your letter “Data Protection”.