Privacy Policy
Effective Date: March 1, 2026 | Last Updated: March 3, 2026
Deccan India Development Corporation Private Limited ("Sarthi DMS", "we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit sarthidms.in or use our Sarthi Document Management System ("Services"). This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
1 Information We Collect
We collect the following categories of personal data:
| Category | Data Collected | Purpose |
|---|---|---|
| Identity Data | Full name, job title, company name | Account creation, demo access, communication |
| Contact Data | Email address, phone number | Responding to inquiries, sending credentials |
| Technical Data | IP address, browser type, pages visited, time of access | Security, analytics, performance improvements |
| Usage Data | Form submissions, demo requests, whitepaper downloads | Service improvement, lead management |
| Communication Data | Messages sent via contact forms | Responding to queries and support requests |
2 Legal Basis for Processing
Under the DPDP Act 2023, we process your personal data on the following lawful bases:
- Consent: Where you have explicitly provided consent by submitting a form or requesting a demo.
- Legitimate Interest: To operate our website securely, prevent fraud, and improve our services.
- Contractual Necessity: Where processing is required to fulfill a service agreement or demo arrangement.
- Legal Obligation: Where required by applicable Indian law, including IT Act 2000, Companies Act 2013, and GST regulations.
3 How We Use Your Information
- To respond to your contact form submissions and enquiries
- To provide demo access credentials and product demonstrations
- To send service-related communications (not marketing unless consented)
- To improve website functionality, usability, and content
- To maintain records required by Indian statutory and tax laws
- To detect, prevent, and address technical issues and security threats
- To send occasional newsletters or product updates (you may unsubscribe at any time)
4 Data Storage and Security
Your data is stored on servers located within India in compliance with the DPDP Act 2023's data localisation provisions. We implement the following security measures:
- 256-bit TLS/SSL encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Role-based access control limiting who can access personal data
- Regular security audits and vulnerability assessments
- Session-based security for web forms (CAPTCHA protection)
- ISO 27001:2022 certified information security management
Data Retention: Contact form data is retained for 2 years. Demo request data is retained for 3 years. We delete or anonymise data upon request or when it is no longer required for the stated purpose.
5 Sharing of Information
We do not sell, rent, or trade your personal data. We may share your data only in these circumstances:
- Service Providers: Hosting providers, email service providers, and analytics tools — bound by data processing agreements
- Legal Requirements: When required by court order, government authority, or applicable Indian law
- Business Transfers: In the event of a merger, acquisition, or sale of assets, with adequate notice to you
- With Consent: For any other purpose where you have explicitly consented
6 Cookies and Tracking
Our website uses the following types of cookies:
- Essential Cookies: Required for form security (CAPTCHA session), cannot be disabled
- Analytics Cookies: Used to understand website usage (aggregated, anonymised data)
- Preference Cookies: Store your preferences for a better experience
You can control or disable non-essential cookies through your browser settings. Disabling cookies may affect some website functionality.
7 Your Rights Under DPDP Act 2023
As a Data Principal under India's DPDP Act 2023, you have the following rights:
Right to Access
Request a summary of your personal data we hold and how it is being processed.
Right to Correction
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your data when it is no longer necessary or you withdraw consent.
Right to Grievance Redressal
Lodge a complaint with our Grievance Officer or the Data Protection Board of India.
Right to Nominate
Nominate a person to exercise your rights in the event of death or incapacity.
Right to Withdraw Consent
Withdraw consent at any time. This will not affect previous lawful processing.
To exercise any of these rights, email us at privacy@sarthidms.in. We will respond within 30 days.
8 Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.
9 Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
10 Grievance Officer
In accordance with the DPDP Act 2023 and IT Act 2000, the details of the Grievance Officer are:
- Name: Grievance Officer, Sarthi DMS
- Organisation: Deccan India Development Corporation Private Limited
- Address: Pune, Maharashtra, India — 411068
- Email: grievance@sarthidms.in
- Response Time: Within 30 days of receiving your complaint
11 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of our services after changes constitutes acceptance of the updated policy.
12 Contact Us
For privacy-related queries or to exercise your data rights: