Privacy Policy

SailRight Technologies Pvt. Ltd. (“SailRight”, “we”, “us”, or “our”) is an information technology company registered in India, providing web and mobile application development, custom software, hardware integration, digital marketing, and consulting services.

This Privacy Policy applies to sailright.tech (the “Website”) and to the enquiries and business communications you send us through it. It describes the personal data we handle as a data fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), and the rights available to you.

By using the Website or contacting us, you acknowledge that you have read and understood this policy. If you do not agree with it, please do not use the Website or submit information to us.

a. Information you provide to us

Our website contact form asks for your name, email address, company name (optional), the type of project you are interested in, and a description of your requirements.

Please note that this form does not store your details on our servers. When you submit it, your browser opens WhatsApp with the details pre-filled into a message addressed to us, which you then choose to send. The same applies to our WhatsApp chat widget. Your message is therefore transmitted and stored through WhatsApp (operated by Meta Platforms) under WhatsApp’s own terms and privacy policy, and we receive it in our WhatsApp business inbox.

We also receive whatever information you choose to share when you email us, call us, meet with us, or enter into a contract with us — for example your role and designation, billing and tax details, project documentation, and correspondence history.

b. Information collected automatically

When you visit the Website, our hosting provider and analytics tools automatically record technical information such as your IP address, approximate location derived from it, browser type and version, device type and operating system, referring URL, the pages you view, and the dates and times of your visits.

c. Information we do not collect

We do not ask for, and the Website does not have any facility to collect, payment card numbers, bank credentials, government identification numbers, or sensitive categories of personal data such as health, biometric, or religious information. Please do not send such information through the contact form or WhatsApp.

We use the information described above to:

• respond to your enquiry, prepare proposals and estimates, and discuss your project requirements;
• deliver, support, and invoice the services you have engaged us for, and manage our contractual relationship with you;
• send service-related communications such as project updates, scheduling, and administrative notices;
• understand how the Website is used, measure the performance of our pages and advertising campaigns, and improve our content and services;
• maintain the security and integrity of the Website, and detect and prevent fraud, abuse, and technical faults;
• comply with applicable law, and establish, exercise, or defend legal claims.

We do not sell your personal data, and we do not rent or trade contact lists to third parties for their own marketing.

Under the DPDP Act, we process your personal data on the basis of the consent you give when you submit an enquiry or otherwise share information with us, and for certain legitimate uses permitted by the Act, such as responding to a request you have voluntarily made.

Where the EU or UK General Data Protection Regulation applies to a visitor or client, we rely on the following legal bases: performance of a contract (delivering services you have engaged us for), your consent (analytics and advertising cookies, marketing communications), our legitimate interests (securing and improving the Website, ordinary business administration), and compliance with a legal obligation (tax and accounting records).

Where we rely on consent, you may withdraw it at any time using the contact details in section 14. Withdrawal does not affect processing carried out before the withdrawal.

Cookies are small text files placed on your device by a website. We use them, together with similar technologies such as pixels and local storage, for the purposes set out below.

You can control cookies through your browser settings — most browsers let you block or delete cookies, and browse in a private window. Blocking essential cookies may affect how the Website behaves. You can opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on, and manage personalised advertising through Google My Ad Center.

We share personal data only as described here, and only to the extent necessary:

• Service providers. Vendors who support our operations — including Amazon Web Services for website hosting, Google for analytics and advertising, and WhatsApp (Meta Platforms) for enquiry messaging — process data on our behalf or under their own terms as described in this policy.
• Professional advisers. Accountants, auditors, and lawyers, where required for our legal and financial obligations.
• Legal and regulatory disclosure. Courts, law enforcement, or government authorities where we are required to disclose information by law or valid legal process, or to protect our rights, safety, or property.
• Business transfers. If SailRight is involved in a merger, acquisition, or transfer of assets, personal data may be transferred as part of that transaction, subject to this policy.

We keep personal data only for as long as it serves the purpose it was collected for. Enquiries that do not lead to an engagement are typically retained for up to 24 months so that we can pick up the conversation if you return. Client and contract records, including invoices and tax documents, are retained for at least eight years as required by Indian tax and company law. Analytics data is retained according to the retention period configured in Google Analytics.

When data is no longer needed, we delete it or irreversibly anonymise it. You may ask us to erase your data sooner — see section 9.

We maintain reasonable technical and organisational safeguards appropriate to the nature of the data we handle. These include encryption of data in transit using HTTPS/TLS, hosting on infrastructure operated by established cloud providers, access controls that limit personal data to the personnel who need it, and confidentiality obligations for our team and contractors.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If a personal data breach affecting you occurs, we will notify you and the Data Protection Board of India as required by the DPDP Act.

Subject to applicable law, you have the right to:

• Access a summary of the personal data we hold about you and how we process it;
• Correct or complete data that is inaccurate, outdated, or incomplete;
• Erase data we no longer need for the purpose it was collected for, or which we hold on the basis of consent you have withdrawn;
• Withdraw consent at any time, as easily as you gave it;
• Nominate another individual to exercise your rights in the event of your death or incapacity, as provided under the DPDP Act;
• Grieve — raise a complaint with us about how we handle your data, and escalate it to the Data Protection Board of India if you are not satisfied with our response.

If the GDPR applies to you, you additionally have rights to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority.

To exercise any of these rights, write to us at info@sailright.tech. We will verify your identity before acting on the request and will respond within 30 days.

We are based in India, and our service providers — including Amazon Web Services, Google, and Meta — operate infrastructure in multiple countries. Your personal data may therefore be processed on servers located outside your country of residence, including outside India and the European Economic Area.

Where such transfers involve personal data protected by the GDPR, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses adopted by the relevant provider. Transfers from India are made in accordance with the DPDP Act and any restrictions notified by the Central Government.

Our Website and services are intended for businesses and professional users. We do not knowingly collect personal data from children under the age of 18. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

The Website may link to third-party websites, portfolios, or platforms that we do not operate. This policy does not cover those sites. We encourage you to read the privacy policy of any site you visit through a link from ours.

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal obligations. The revised policy will be posted on this page with a new “Last updated” date. Where changes are significant, we will take reasonable steps to notify you, for example by a notice on the Website or an email to our active clients.

Your continued use of the Website after an update takes effect constitutes acceptance of the revised policy.

For any question about this policy, to exercise your rights, or to raise a grievance about how we handle your personal data, please reach out to us. We aim to acknowledge every request within 7 working days and resolve it within 30 days.