Privacy policy

1. Who we are

SHL Solutions is a sole proprietorship based in Virar, Maharashtra, India. In this policy, "we", "us" and "our" mean SHL Solutions. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the data fiduciary for the personal data you share with us through this website.

Contact for anything about your data: contact@shlsolutions.co.in

2. What we collect

When you fill in the contact form

• Your name, and optionally your business name
• Your email address
• Your phone or WhatsApp number, if you choose to give it
• The services you are interested in, and your message

When you email us or message us on WhatsApp

Whatever you include in the message, along with your email address or phone number.

When you become a client

Details we need to do the work and bill you, such as billing name and address, GST number (if you have one), payment records, and the content and access you give us for your project.

Payments

You pay us by bank transfer, UPI or a payment gateway such as Razorpay. We never see or store your card details or UPI PIN. We only keep the payment records (amount, date, reference number) that tax law requires.

What we do not collect

This website does not use cookies, advertising, or tracking tools, and it does not build a profile of you. Our fonts and scripts are served from our own website, not loaded from Google or other third parties.

3. Why we use it

• To reply to your enquiry and set up a call
• To prepare quotes and carry out the work you hire us for
• To send invoices and keep the accounts that Indian tax law requires
• To keep our website and services secure

We reply by email. If you gave us your phone number, we may also reply on WhatsApp or call you about your enquiry. If you'd prefer only one of these, just tell us.

We do not send marketing messages unless you have asked for them, and you can stop them at any time. We do not sell, rent or trade your personal data.

4. Our legal basis

We process your data because you chose to send it to us for a specific purpose, such as asking for a quote (your consent, and the "voluntarily provided" legitimate use under the DPDP Act), and to meet legal duties such as keeping tax records. You can withdraw your consent at any time by emailing us. This won't affect anything we did before you withdrew it, but we may not be able to continue a project without the data it needs.

5. Services that handle data for us

We use a small number of trusted providers. They only get the data needed for their job:

• Web3Forms delivers contact form messages to our inbox.
• Google (Gmail) hosts our email inbox.
• Our website host (such as Cloudflare) serves this website and may keep short-term technical logs, like IP addresses, to keep the site secure and working.
• WhatsApp (Meta), only if you choose to message us on WhatsApp. WhatsApp's own privacy policy applies to those chats.

Some of these providers may store data outside India. We only use well-known providers with strong security practices, and we will follow any restrictions the Government of India places on transfers.

6. How long we keep it

• Enquiries that don't turn into a project: deleted within 12 months.
• Client records and invoices: kept for as long as Indian tax and accounting laws require, then deleted.
• Anything else: deleted when it is no longer needed for the purpose you gave it to us for.

7. Your rights

Under the DPDP Act, you can:

• Ask for a summary of the personal data we hold about you and how we use it
• Ask us to correct, complete or update it
• Ask us to delete it, unless the law requires us to keep it
• Withdraw your consent
• Nominate someone to exercise these rights for you if you die or become unable to
• Raise a complaint with us, and then with the Data Protection Board of India if you are not satisfied

To use any of these rights, email contact@shlsolutions.co.in. We will reply within 30 days.

8. Grievance contact

Grievance Officer, SHL Solutions, Virar, Maharashtra
Email: contact@shlsolutions.co.in

9. Security

We keep your data in accounts protected with strong passwords and two-factor authentication, and only we can access it. No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board as the law requires.

10. Children

Our services are meant for businesses and adults. We don't knowingly collect data from anyone under 18. If you think a child has sent us their data, email us and we will delete it.

11. Websites and apps we build for clients

When we build a website or app for a client, the client decides what data it collects from their own customers, and the client's own privacy policy applies to it. We handle that data only to build and maintain the project, following the client's instructions.

12. Testimonials and portfolio

• We only publish a client's name, business, role and review on our website with their permission, and exactly as they approved it.
• You can ask us to change or remove your testimonial at any time, and we'll do it within 7 days.
• When we show finished projects in our portfolio, we hide or blur any personal data of your customers, such as names, phone numbers or addresses.

13. Language

This policy is available in English, Hindi, Marathi and Gujarati. Use the language buttons at the top of the page. If a translation differs from the English version, the English version applies.

14. Changes to this policy

If we change how we handle data, we will update this page and the date at the top. If a change is significant, we will let current clients know.