Last updated: 23 October 2026 · Version 2026-10-18
This privacy notice explains what personal data IXORIC TECHNOLOGIES LLP collects through ixoric.com, why, how long we keep it, who we share it with, and the rights you have under India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, “DPDP”). If you are outside India, the section “Visitors outside India” also applies.
1. Who we are
The Data Fiduciary for this website is IXORIC TECHNOLOGIES LLP (“Ixoric”, “we”, “us”), Shapoorji Complex, Action Area 3, Newtown, Kolkata 700135, West Bengal, India. Our U.S. affiliate, Ixoric Technologies LLC (30 N Gould St, Ste R, Sheridan, WY 82801, USA), contracts with some U.S. clients. Our WhatsApp platform, Vatli, has its own privacy policy at vatli.co.
2. Contact for privacy questions and grievances
For any question about your personal data, to exercise your rights or to raise a grievance, contact:
- Prashant Kumar, Founder, IXORIC TECHNOLOGIES LLP
- Email: hello@ixoric.com (please write “Privacy” in the subject)
- Phone: +91 72809 57078
- Online: submit a data-rights request
- Post: Shapoorji Complex, Action Area 3, Newtown, Kolkata 700135, West Bengal, India
3. What we collect, why, and for how long
We collect only what we need for each purpose. Where we rely on your consent, we ask for it at the point of collection with a short notice, and you can withdraw it at any time.
| When | Personal data | Purpose | Basis | How long we keep it |
|---|---|---|---|---|
| Audit, contact and enquiry forms | Name, email, mobile number, website (optional) | Reply to your request, prepare the audit or quote you asked for, and follow up about it | Your consent (tick box on the form) | Up to 3 years after our last contact with you, then deleted or anonymised |
| Optional marketing box on those forms | Name, email, mobile number | Send occasional updates about our services by email or WhatsApp | Your separate, optional consent | Until you withdraw consent or unsubscribe |
| Blog subscription | Name, email, mobile number | Send you new articles by email or WhatsApp | Your consent | Until you unsubscribe; deleted within 30 days after that |
| Free checklist downloads | Name, email, WhatsApp number | Send the checklist and follow up about it | Your consent | Up to 3 years after our last contact with you |
| Calls, WhatsApp and emails you start with us | Name, number or email address, your messages | Answer you and provide the service you ask about | Your consent, given by contacting us | Up to 3 years after our last contact with you |
| Data-rights requests | Name, email, mobile number (optional), request details | Handle your request and keep a record that we did | Compliance with DPDP | 3 years after the request is closed |
| Analytics (on by default; you can opt out) | Pages visited, device and browser, approximate location, cookie identifiers | Understand how the site is used and improve it (Google Analytics 4 via Google Tag Manager) | Notice in the cookie banner; you can opt out at any time in Cookie settings | No more than 14 months in Google Analytics |
| Advertising measurement (on by default; you can opt out) | Pages visited, cookie identifiers | Measure and improve our ads on Google and on Facebook and Instagram (Google Ads conversion tag, Meta Pixel) | Notice in the cookie banner; you can opt out at any time in Cookie settings | As set by Meta; you can withdraw consent at any time |
| Every visit | IP address, browser, time and page requested | Keep the site secure, prevent abuse and investigate incidents | Legitimate uses permitted by DPDP and our security obligations | Server and security logs for 1 year |
| Consent records | Your choices, the notice version, time, and a one-way coded form of your email (never the email itself) | Prove what you consented to, as DPDP requires | Compliance with DPDP | For as long as the related data is kept, plus 1 year |
Please do not send us health, financial or other sensitive information through our forms. We do not need it to reply to you. If you are a client, the personal data we process on your behalf is governed by our agreement with you.
4. Who we share personal data with
We do not sell personal data. We share it only with service providers (Data Processors) who process it for us under contract, and only for the purposes above:
- HubSpot, Inc. (USA): our CRM, where form submissions and consent records are stored.
- Oracle Cloud Infrastructure (Hyderabad, India): hosts this website and its database.
- Cloudflare, Inc. (global network): website delivery and security.
- Google LLC (USA): Google Analytics, Google Tag Manager and Google Ads conversion measurement (you can opt out in Cookie settings), and Google Fonts, which receives your IP address when the site loads fonts.
- Meta Platforms: the Meta Pixel (you can opt out in Cookie settings) and WhatsApp Business, when you message us on WhatsApp.
- Vatli, our own WhatsApp platform operated by IXORIC TECHNOLOGIES LLP: the chat widget and WhatsApp conversations.
- Our email provider, to send and receive email.
We may also disclose personal data where the law requires it, for example to a court, regulator or law-enforcement agency.
5. Transfers outside India
Some of our service providers store or process data outside India, mainly in the United States. DPDP permits such transfers except to countries the Government of India restricts; we will stop any transfer that becomes restricted.
6. How we protect personal data
We use encrypted connections (HTTPS), a web application firewall and security monitoring, limited and logged access to our systems, hosting in India, and contracts that require our service providers to protect the data. If a personal data breach affects you, we will tell you without delay, in plain language, what happened, the likely impact, what we are doing about it and whom to contact, and we will report it to the Data Protection Board of India as the Rules require.
7. Your rights
Under DPDP you have the right to:
- Access a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with.
- Correct, complete or update your personal data.
- Erase your personal data when it is no longer needed for the purpose you gave it for, unless the law requires us to keep it.
- Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing that happened before it. You can unsubscribe using the link in any email, reply STOP on WhatsApp, change your cookie choices from “Cookie settings” at the bottom of every page, or contact us.
- Nominate another person to exercise your rights if you die or are unable to.
- Grievance redressal: raise a complaint with us about how we handle your data.
To use any of these rights, submit a data-rights request or email hello@ixoric.com. We may ask you to confirm your identity first. We aim to respond within 30 days and will always respond within 90 days, as the Rules require. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
DPDP also asks you to give accurate information, not to impersonate anyone and not to file false or frivolous complaints.
8. Cookies and similar technologies
We use essential cookies to run the site and remember your consent choice. Analytics and advertising tools load when you visit, and the cookie banner tells you so. You can opt out at any time from Cookie settings, which stops them and removes their cookies from this site. Details are in our cookie policy, and you can change your choice at any time from Cookie settings.
9. Children
This website and our services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
10. Visitors outside India
If you are in the European Economic Area or the United Kingdom, we process your data on the basis of your consent (forms, marketing, analytics and advertising cookies), to take steps at your request before a contract, or for our legitimate interest in keeping the site secure. You also have the rights to object, to restrict processing and to data portability, and you may complain to your local data protection authority. If you are in the United States, we do not sell your personal information.
11. Changes to this notice
We will update this notice when our practices or the law change, and show the new date and version at the top. If a change affects what you consented to, we will ask for your consent again.