Privacy Policy — Unilyx Technologies

Effective Date: 1 January 2025 | Last Updated: 29 September 2026 | Version: 1.0

Unilyx Technologies ("Unilyx", "we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy outlines our practices regarding the collection, processing, storage, and protection of information obtained from visitors, clients, and partners who access our website (unilyx.com), submit consultation requests, or utilize our digital services.

This policy has been designed in strict accordance with India's Digital Personal Data Protection Act, 2023 (DPDPA 2023), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

---

1. Data Controller & Business Entity Information#

• Legal Entity: Unilyx Technologies
• Headquarters: Patna, Bihar, India
• Official Website: https://unilyx.com
• Official Email: unilyxofficial@gmail.com
• Direct Helpline / WhatsApp: +91 6202591456

---

2. Personal Data We Collect#

We only collect data that is strictly necessary to provide consultation, software engineering, and customer support services.

A. Information You Provide Directly

• Contact & Inquiry Forms: When you book a demo, ask for a quote, or submit an inquiry, we collect your full name, business or institution name, official email address, telephone / WhatsApp number, business category (e.g., medical store, school, salon, restaurant), and inquiry message.
• Communications: Records and transcripts of phone calls, WhatsApp messages, or emails initiated with our engineering and sales representatives.

B. Technical & Usage Data (Non-Invasive)

• When you browse unilyx.com, our servers automatically log standard network telemetry including your IP address, browser type and version, operating system, referring URL, time spent on pages, and network diagnostics.
• We do not use invasive third-party tracking scripts, audio eavesdropping, or behavioral advertising pixels.

C. Sensitive Personal Data We Do NOT Collect On This Website

• We do not collect credit card numbers, net banking passwords, biometric records, or Aadhaar numbers on our public company website. Payments for custom software or SaaS subscriptions are processed via authorized, RBI-licensed payment gateways.

---

3. Purpose and Legal Basis for Processing#

We process your data strictly on the lawful grounds defined under DPDPA 2023:

1. Consent & Inquiries: Responding to your explicit requests for quotes, demos, technical consultations, or job applications.
2. Contractual Necessity: Preparing proposals, milestone service contracts, Statement of Work (SOW), and delivering custom engineering or SaaS solutions.
3. Product & Service Improvement: Analyzing aggregated, anonymized usage telemetry to optimize website performance and Core Web Vitals.
4. Legal Compliance: Fulfilling statutory tax, auditing, and corporate compliance obligations under Indian law.

---

4. Zero Third-Party Sale Policy#

We strictly DO NOT sell, rent, lease, or trade your personal or business data to data brokers, marketing agencies, or third-party advertisers.

We only disclose data to:

• Infrastructure Providers: Cloud hosting and database providers operating with ISO 27001 / SOC 2 certification (e.g., MongoDB Atlas, Vercel, AWS S3) bound by strict confidentiality and data protection agreements.
• Transactional Email & SMS: Automated delivery partners (e.g., Brevo/Nodemailer) strictly for sending confirmations and notifications.
• Statutory Authorities: Law enforcement or regulatory bodies solely when required by valid court order, warrant, or mandatory statutory obligations under Indian law.

---

5. Data Security & Storage Standards#

• Encryption in Transit: All traffic to and from unilyx.com is encrypted via modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Internal databases and backup snapshots are encrypted using industry-standard AES-256 algorithms.
• Access Control: Direct access to client records is restricted to authorized engineering personnel using role-based access control (RBAC) and two-factor authentication (2FA).
• Data Residency: Our primary database storage and cloud infrastructure reside within secure data centers servicing the Indian subcontinent.

---

6. Data Retention Period#

We retain contact inquiries and communication logs only for as long as necessary to fulfill the purpose of collection (typically up to 24 months from your last interaction) or as required by applicable tax, commercial, and auditing statutes. Once the retention period lapses, data is permanently erased or irreversibly anonymized.

---

7. Your Statutory Rights (DPDPA 2023)#

As a data principal under Indian law, you have the following enforceable rights:

• Right to Access: You may request a summary of the personal data we hold about you and how it has been processed.
• Right to Correction & Rectification: You may request correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure: You may request deletion of your personal information, subject to statutory retention requirements.
• Right to Grievance Redressal: You have the right to register a complaint regarding data processing with our designated Grievance Officer.
• Right to Nominate: You have the right to nominate another individual to exercise your privacy rights in the event of death or incapacity.

To exercise any of these rights, email us at unilyxofficial@gmail.com with the subject "DPDPA Data Rights Request".

---

8. Grievance Redressal Officer#

In compliance with the Information Technology Rules, 2021 and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are:

• Designation: Grievance & Compliance Officer
• Organization: Unilyx Technologies
• Postal Address: Patna, Bihar - 800001, India
• Email: unilyxofficial@gmail.com
• Phone / Helpline: +91 6202591456
• Response Commitment: Acknowledgment within 24 hours; complete resolution within 15 working days.

---

9. Updates to This Privacy Policy#

We may update this Privacy Policy periodically to reflect technological, operational, or legal developments. Significant changes will be prominently announced on this page with an updated "Last Updated" timestamp.