Table of Contents
- Who We Are (Data Fiduciary)
- What Personal Data We Collect
- Why We Collect Your Data (Purpose & Legal Basis)
- Third-Party Data Processors
- How Long We Keep Your Data
- How We Protect Your Data
- Your Rights as a Data Principal
- Cookies & Tracking Technologies
- Children's Privacy
- Cross-Border Data Transfers
- Changes to This Policy
- Contact Us / Grievance Officer
Who We Are (Data Fiduciary)
Under India's Digital Personal Data Protection (DPDP) Act, 2023, the entity that determines the purpose and means of processing your personal data is called the Data Fiduciary. For the purposes of this Privacy Policy, the Data Fiduciary is:
| Detail | Information |
|---|---|
| Company Name | ICNT – IT Crew and Technology |
| Business Type | Microsoft Cloud Solution Provider (CSP) |
| Address | Vastral, Ahmedabad, Gujarat – 382418, India |
| connect@icnt.co.in | |
| Phone | +91 81690 25125 |
| Website | www.icnt.co.in |
📌 This is a B2B services website. We do not sell products to individual consumers and do not target individuals as end-consumers. Our services are delivered to organizations and businesses.
What Personal Data We Collect
We only collect personal data that you voluntarily provide through the contact/enquiry form on our website. We do not use cookies, tracking pixels, analytics tools, or any other automated data collection technology at this time.
Data Collected via the Contact Form
| Data Field | Category | Required? |
|---|---|---|
| Full Name | Personal identifier | Yes |
| Phone / Mobile Number | Contact detail | Yes |
| Email Address | Contact detail | Yes |
| Company Name | Business information | No |
| Service of Interest | Enquiry preference | No |
| Message / Requirement | Free-text enquiry content | Yes |
Data We Do NOT Collect
- Sensitive personal data (financial information, health data, biometrics, religious beliefs, caste, etc.)
- Data from children under 18 years of age
- Cookies, browser storage, or device identifiers
- Web analytics data (we do not use Google Analytics, Meta Pixel, Hotjar, or similar tools)
- IP addresses through our website HTML
- Login credentials or account data (no user accounts exist on this site)
Why We Collect Your Data (Purpose & Legal Basis)
Under Sections 5 and 6 of the DPDP Act, 2023, personal data may only be processed for a specific, clear, and lawful purpose, and must be collected with your free, specific, informed, unconditional, and unambiguous consent.
Processing Purposes
| Purpose | Data Used | Legal Basis (DPDP Act 2023) |
|---|---|---|
| Responding to your service enquiry | Name, Email, Phone, Message | Consent (Section 6) |
| Preparing and sending a service proposal or quote | Name, Company, Email, Service Interest | Consent (Section 6) |
| Communicating about our Microsoft Cloud services | Name, Email, Phone | Consent (Section 6) |
| Internal record-keeping of business enquiries | All form fields | Consent / Legitimate use (Section 6) |
📌 We will never use your data for any purpose beyond responding to your enquiry. We do not send unsolicited marketing emails, we do not sell your data to any third party, and we do not share your data with any other business without your explicit permission.
Consent
By submitting the contact form, you actively check a consent checkbox confirming you have read this Privacy Policy and consent to ICNT collecting and processing your personal data for the stated purposes. This constitutes free, specific, informed, unconditional, and unambiguous consent as required under Section 6(1) of the DPDP Act, 2023.
You may withdraw consent at any time by emailing connect@icnt.co.in with subject "Withdraw Consent." Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
Third-Party Data Processors
ICNT uses the following third-party services to operate this website and process your enquiry. These entities act as Data Processors on our behalf — they process your data only as instructed by us.
1. Google LLC (Data Processor)
| Detail | Information |
|---|---|
| Service used | Google Apps Script (Web App) and Google Sheets |
| Purpose | Receiving and storing your form submission; triggering an email notification to ICNT |
| Data transferred | All fields submitted through the contact form |
| Storage location | Google's servers (may include servers outside India) |
| Google's Privacy Policy | policies.google.com/privacy |
2. Google Fonts (No Personal Data Transferred)
Our website loads the Inter typeface from Google Fonts CDN (fonts.googleapis.com). Google may log your IP address as part of this request, subject to Google's own privacy policy. We do not receive or process any data from this request.
3. Cloudflare CDN (No Personal Data Transferred)
Our website loads icon assets from cdnjs.cloudflare.com. We do not receive any personal data from this connection.
4. Google Maps (Embedded Map)
Our contact page embeds a Google Maps iframe to show our office location. When you view this map, Google may collect your IP address subject to its own terms. We do not receive any personal data from this embed.
⚠️ Cross-border data transfer notice: Your form submission data is processed by Google LLC (US-based) and may be stored on servers outside India. By submitting the contact form, you acknowledge and consent to this cross-border transfer as permitted under Section 16 of the DPDP Act, 2023.
How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active enquiry submissions | Duration of the enquiry + 90 days | To respond, follow up, and prepare proposals |
| Unanswered / closed enquiries | 90 days from submission | Brief window to revisit unanswered enquiries |
| Client engagement records | Duration of contract + 3 years | Legal, contractual, and tax record-keeping obligations |
| Consent records | 3 years from date of consent | Compliance evidence under DPDP Act, 2023 |
After the applicable retention period, your personal data will be deleted or anonymized. To request early deletion, see Section 7 (Your Rights).
How We Protect Your Data
ICNT takes reasonable and appropriate technical and organizational measures to protect your personal data, as required under Section 8(5) of the DPDP Act, 2023.
Technical Measures
- HTTPS/TLS encryption — all data in transit is encrypted
- HTTP security headers — Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and HSTS are set on all pages
- No cookies or tracking — no cookie-based session data to steal or misuse
- Anti-spam measures — honeypot fields and submission timing checks reduce automated spam
- Google Workspace security — submitted data is stored in Google Sheets protected by Google's enterprise-grade security infrastructure
Organizational Measures
- Access to enquiry data in Google Sheets is restricted to authorized ICNT team members only
- Form submission data is used solely for responding to enquiries and is not distributed internally beyond what is necessary
Data Breach Notification
In the event of a personal data breach likely to result in harm, ICNT will notify affected individuals and the Data Protection Board of India (once operational) without undue delay and within the timeframes prescribed by the DPDP Act, 2023.
Your Rights as a Data Principal
Under Sections 11–14 of the DPDP Act, 2023, you have the following rights:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to Access (S.11) | Request a summary of personal data we hold about you | Email with subject "Data Access Request" |
| Right to Correction (S.12) | Request correction of inaccurate or incomplete data | Email with subject "Data Correction Request" |
| Right to Erasure (S.12) | Request deletion of your data where no longer necessary | Email with subject "Data Deletion Request" |
| Withdraw Consent (S.6(4)) | Withdraw consent to processing at any time | Email with subject "Withdraw Consent" |
| Grievance Redressal (S.13) | Raise a complaint about the processing of your data | See Section 12 (Grievance Officer) |
| Right to Nominate (S.14) | Nominate someone to exercise your rights in case of death or incapacity | Email with subject "Nomination Request" |
All requests to be sent to: connect@icnt.co.in
📌 We will respond to all valid data rights requests within 30 days of receipt. There is no charge for making a rights request.
Right to Complain to the Data Protection Board
If you are not satisfied with our response to your grievance, you have the right to lodge a complaint with the Data Protection Board of India under Section 27 of the DPDP Act, 2023, once the Board is formally constituted and operational.
Cookies & Tracking Technologies
This website currently does not use any cookies, web storage, analytics tracking, advertising pixels, or session identifiers.
We do not set any first-party cookies on your device. No cookie consent banner is currently shown because none are required — there are no cookies to consent to.
Third-party resources embedded in the website (Google Fonts, Cloudflare CDN, Google Maps) may use cookies or make network requests subject to their own privacy policies. ICNT does not control or receive data from these third-party cookies.
⚠️ If we introduce analytics, advertising, or other cookie-based technologies in the future, we will update this Privacy Policy and introduce a cookie consent mechanism before doing so.
Children's Privacy
Our website and services are directed exclusively at businesses and adult professionals. We do not knowingly collect personal data from children under the age of 18 years, in compliance with Section 9 of the DPDP Act, 2023.
If you are under 18, please do not submit any personal information through our website. If we become aware that we have collected personal data from a child, we will delete it promptly. If you believe we may have collected data from a child, please contact us at connect@icnt.co.in.
Cross-Border Data Transfers
When you submit our contact form, your data is transmitted to and stored by Google LLC (headquartered in the United States), constituting a transfer of personal data outside India.
We rely on your explicit consent (provided through the consent checkbox on our contact form) as the legal basis for this cross-border transfer, in accordance with Section 16 of the DPDP Act, 2023.
Google LLC operates under its own compliance frameworks for cross-border data transfers. For more information, see policies.google.com/privacy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the revised policy at the same URL (
/privacy-policy.html) - Where required by law, notify affected users directly
Previous versions of this policy are available on request by emailing connect@icnt.co.in.
Contact Us / Grievance Officer
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact our designated Grievance Officer. We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.
🏢 ICNT Privacy & Data Grievance Contact
For all privacy-related requests, please email us with the appropriate subject line (e.g., "Privacy Grievance", "Data Access Request", "Withdraw Consent").
Escalation to the Data Protection Board of India
If you are not satisfied with our response, you have the right to approach the Data Protection Board of India under Section 27 of the DPDP Act, 2023. The Board's complaint portal will be available once formally constituted and operational.