# Privacy Policy

> Source: https://www.cadentic.net.in/privacy-policy
> Publisher: CADENTIC®
> Last updated: 2026-10-16

**Summary:** Privacy Policy privacy-policy 2026-10-17 2026-10-17 2.0 This Privacy Policy explains how {{business.legalName}} collects, uses, shares and protects personal data when you visit {{business.website}}, contact us, subscribe to our updates, create an account or use our public AI connector (MCP)…

privacy-policy
2026-10-17
2.0
This Privacy Policy explains how {{business.legalName}} collects, uses, shares and protects personal data when you visit {{business.website}}, contact us, subscribe to our updates, create an account or use our public AI connector (MCP) endpoint. It is written to meet the EU and UK General Data Protection Regulation (GDPR / UK GDPR), the Swiss Federal Act on Data Protection (FADP), India's Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000 rules, US state privacy laws such as the California CCPA/CPRA, and comparable laws in Canada, Brazil, Australia, Singapore, South Africa and other countries. Our use of cookies is described in our Cookie Policy.
Who we are
The controller (in India, the "Data Fiduciary") responsible for your personal data is:
{{business.legalName}}, CIN {{business.registrationNumber}}, {{business.registeredAddress}}. Email: {{business.email}}. Phone: {{business.phone}}.
We operate under the brands CADENTIC®, ZOQOLO®, ZETTADATEN® and ZETTAGIGA®. This policy applies to this website and to the sites of those brands unless a site publishes its own privacy notice.
Grievance Officer (India): Arunava Banerjee, Director, {{business.email}}. We acknowledge grievances promptly and resolve them within the time the law requires.
Representative for the UK and the EU: Dr Dibyayan Chakraborty, Director, Leeds, United Kingdom, {{business.email}}.
Personal data we collect
When you contact us (contact form): your name, email address, mobile number, message, whether you verified your mobile number with a one-time code, the consents you gave (privacy, email marketing, SMS marketing) together with the exact wording you accepted, the page you sent the form from, your browser's user-agent string, the time, and a salted one-way hash of your IP address (we do not store the IP address itself on the form record).
When you subscribe (newsletter): your email address, your consent and its wording, the time and a salted one-way hash of your IP address.
When you sign in (administrators): accounts on this site are for our authorised administrators. We process their name, email address and password (stored only in hashed form by our authentication provider), email verification status and security settings.
When you verify a mobile number: your phone number is sent to our authentication provider so that it can send you a one-time code by SMS.
Security checks: when you submit a form, our bot-protection providers analyse technical signals such as your IP address, browser, device and interactions.
When you browse the site: our hosting and network providers process technical data, including your IP address, browser and device type, the pages requested, referring page and time, in server and security logs. With your consent, analytics and marketing technologies collect usage data as described in the Cookie Policy.
When you use our AI connector (MCP) or public API: the request (tool name and query) and technical request data are logged for security and operations. The connector only returns content we have published.
When you email or call us: the information you choose to share.
We do not ask for sensitive personal data, such as health, biometric or financial account data, through this site; please do not send it in messages.
How and why we use your data
Purpose Data Legal basis (GDPR / UK GDPR)
Answering your enquiry and preparing a quote or proposal Contact form data, emails Steps taken at your request before a contract; our legitimate interest in responding to business enquiries
Verifying your mobile number when you choose to Phone number, one-time code result Your request (pre-contractual steps)
Sending newsletters and updates Email address, consent record Your consent, which you can withdraw at any time
Email or SMS marketing you opted into on the contact form Email address, mobile number, consent record Your consent
Providing accounts and the administration dashboard Account data Performance of a contract; legitimate interest in securing the service
Protecting the site and forms against spam, fraud and attacks Security signals, logs, hashed IP Legitimate interest in security; legal obligations
Understanding and improving the site Analytics data Your consent (see the Cookie Policy)
Meeting legal, tax and regulatory duties and defending legal claims Records as required Legal obligation; legitimate interest
In India we process personal data on the basis of your consent or for the legitimate uses permitted by section 7 of the DPDP Act. Where we rely on consent, you can withdraw it as easily as you gave it; withdrawal does not affect processing that took place before.
We do not use automated decision-making that produces legal or similarly significant effects. Bot-protection checks are automated, but a failed check only means you are asked to try again or contact us another way.
Who we share data with
We do not sell your personal data for money, and we do not share it for cross-context behavioural advertising unless you accept Marketing cookies (see below). We share personal data only with:
Service providers (processors) that run the site for us under contracts requiring confidentiality and security:
Google (Firebase Authentication, Cloud Firestore, Cloud Run hosting, Cloud Logging, reCAPTCHA Enterprise and, with consent, Google Analytics, Firebase Analytics, Tag Manager and Maps)
Cloudflare (DNS, content delivery and security, Turnstile bot protection, cookieless Web Analytics)
with consent: Microsoft (Clarity), Hotjar and HubSpot (live chat and marketing, EU data centre)
We do not yet use an email delivery service for newsletters. When we start, we will use Resend or Brevo as our processor and update this list.
Professional advisers such as lawyers, accountants and auditors, under a duty of confidentiality.
Authorities, courts or regulators where the law requires it or to protect rights, safety and property.
A buyer or successor if our business or brands are reorganised, merged or sold, subject to this policy.
Some providers (for example Google for analytics and maps) also act as independent controllers for their own purposes; their privacy policies apply to that processing.
US privacy laws: if you accept Marketing cookies, the transfer of online identifiers to advertising and marketing providers may count as "sharing" or a "sale" under the CCPA/CPRA and similar laws. You can opt out by choosing Reject non-essential or turning Marketing off in Cookie settings, or by enabling Global Privacy Control in your browser, which we honour automatically.
Where your data is stored and international transfers
Our website runs in Google Cloud in Belgium (europe-west1). Contact messages, subscriptions and accounts are stored in Google Cloud Firestore in the United States (nam5 multi-region) and by Firebase Authentication. Our team is based in India and accesses the data from there. Cloudflare and our other providers may process data in other countries where they operate.
When we transfer personal data out of the EU/EEA, the UK or Switzerland, we rely on an adequacy decision (for example the EU-US Data Privacy Framework for certified US providers) or on the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, together with additional security measures. Transfers of Indian personal data abroad follow the DPDP Act and any restrictions notified by the Government of India. You can ask us for more information about these safeguards.
How long we keep data
Enquiries and contact messages: for as long as we need them to answer you and to manage any business relationship that follows, after which we delete them. We review stored enquiries regularly and delete them earlier if you ask us to. If an enquiry leads to a contract, contract and tax records are kept for the period the law requires (in India, generally 8 years for accounting records).
Newsletter subscriptions: until you unsubscribe; afterwards we keep only your email address on a suppression list so that we do not contact you again.
Administrator accounts: for as long as the person needs access; removed when access is no longer needed.
Server, security and connector logs: normally 30 days, longer only where needed to investigate a security incident.
Cookie choices: six months, stored in your browser (see the Cookie Policy).
When data is no longer needed, we delete or anonymise it.
How we protect your data
We protect personal data with encryption in transit (HTTPS/TLS) and at rest, access restricted to authorised staff, database security rules that make form submissions write-only to the public, administrator access limited to specifically authorised accounts, salted hashing of IP addresses on form records, bot protection and rate limiting on forms, and monitoring of our systems. No system is perfectly secure; if a personal data breach is likely to put you at risk, we will notify you and the relevant authority as the law requires (including the Data Protection Board of India and CERT-In where applicable).
Your rights
Depending on where you live, you have some or all of the following rights. To use them, email {{business.email}}. We will reply within the time the law requires (normally one month under the GDPR, 45 days under the CCPA), and we may need to verify your identity first. We will not treat you less favourably for exercising your rights.
EU/EEA, UK and Switzerland (GDPR, UK GDPR, FADP): access to your data, correction, erasure, restriction of processing, data portability, objection to processing based on legitimate interests (including at any time to direct marketing), and withdrawal of consent. You can complain to your local supervisory authority; in the UK this is the Information Commissioner's Office (ICO), and in Switzerland the FDPIC.
India (DPDP Act 2023): a summary of the personal data we process and of the parties we share it with, correction, completion, updating and erasure of your data, grievance redressal through our Grievance Officer, nomination of another person to exercise your rights in case of death or incapacity, and withdrawal of consent. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
United States (California and other states with comprehensive privacy laws): the right to know what personal information we collect, use and disclose, to access, correct and delete it, to opt out of the sale or sharing of personal information and of targeted advertising (including through Global Privacy Control), and to appeal a refusal. We do not use sensitive personal information to infer characteristics about you. You may use an authorised agent.
Other countries (for example Canada under PIPEDA, Brazil under the LGPD, Australia under the Privacy Act 1988, Singapore under the PDPA and South Africa under POPIA): you have rights to access and correct your personal data, to withdraw consent and, where provided, to deletion and portability, and you can complain to your national data protection authority.
Children
This site and our services are intended for businesses and adults. We do not knowingly collect personal data from children (under 18 in India, or under the age of digital consent in your country, which is between 13 and 16 in the EU). If you believe a child has given us personal data, contact us and we will delete it.
Links to other sites
Our pages may link to other websites, including the sites of our other brands and third-party services. Their privacy practices are governed by their own policies.
Changes to this policy
We will update this policy when our processing changes. The version and "last updated" date at the top show the current edition. If we make significant changes, we will highlight them on this page and, where the law requires, ask for your consent again.
Contact
Questions, requests or complaints about your personal data: {{business.email}}, {{business.legalName}}, {{business.registeredAddress}}.