Privacy Policy

1. Who we are

This website is owned and operated by Dayonza Private Limited ("Dayonza", "we", "us", or "our"), a company incorporated in India with its office at 4B, 4th Floor, Hari Om Mansion, Mitthu Road, Bank More, Dhanbad, Jharkhand - 828130, India.

We build custom software and websites, business management systems, and we provide digital promotion, marketing, and allied IT services. We are the data fiduciary for the personal data described in this policy, which means we decide why and how it is processed.

You can reach us at info@dayonza.com or +91 8541 862 726 for anything relating to this policy.

2. Scope of this policy

This policy covers personal data we handle when you visit this website, contact us, request a quotation, or engage us for a project. It does not cover:

• Websites and applications operated by other companies that we may link to — their own privacy policies apply.
• Data that is anonymous or aggregated in a way that cannot reasonably identify you.
• Personal data belonging to our clients' own customers, which we process only on our clients' instructions. See section 8.

3. Data we collect

3.1 Information you give us directly

When you use the enquiry form on our contact page, or write to us by email, phone, or WhatsApp, you may share:

• Your name and the name of your organisation.
• Your email address and phone or WhatsApp number.
• The solution or service you are interested in.
• Project details, requirements, and any other information you choose to include in your message.

The enquiry form on this website does not submit your details to a database on our servers. It opens a pre-filled message in your own email application, addressed to info@dayonza.com, which you then send yourself. Your details reach us only when you press send, and are then held in our email account.

3.2 Information collected automatically

Like nearly all websites, the server that hosts this site keeps standard technical logs. These may include your IP address, browser type and version, device type, the pages you viewed, and the date and time of your visit. Our hosting provider generates these logs for security, troubleshooting, and abuse prevention.

3.3 Information from business relationships

If you become a client, we also hold the contact details of your nominated staff, contract and billing information, correspondence, and records needed for invoicing, GST compliance, and statutory bookkeeping.

4. How we use your data

We use personal data only for purposes you would reasonably expect:

• To respond to you — answering enquiries, preparing quotations, and scheduling demonstrations.
• To deliver our services — designing, developing, deploying, and supporting the software, websites, or campaigns you engage us for.
• To manage the commercial relationship — raising invoices, collecting payments, and meeting our tax and accounting obligations.
• To keep our systems safe — detecting misuse, spam, and security incidents.
• To meet legal obligations — where a law, regulator, or court requires it.

We do not sell your personal data. We do not rent, trade, or share it with third parties for their own marketing. We will not add you to a marketing mailing list solely because you sent us an enquiry.

5. Consent and legal basis

We process personal data under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 together with the rules made under them. Depending on the situation, we rely on:

• Your consent — given freely when you send us an enquiry or agree to receive communications from us. You may withdraw consent at any time, and doing so will not affect processing already carried out.
• Performance of a contract — where processing is necessary to deliver a project you have engaged us for.
• Legal obligation — where we must retain or disclose data under Indian law.

6. Cookies and tracking

This website does not set advertising cookies, and it does not run analytics or behavioural tracking scripts. We do not build advertising profiles of visitors and we do not use cross-site trackers.

The site loads its typeface from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address as part of that request. See section 7.

If we introduce analytics or other cookies in future, we will update this policy and, where the law requires it, ask for your consent before those cookies are set.

7. Third-party services we rely on

We keep the number of third parties small and use them only to run our business. Currently these are:

• Our web hosting provider — stores this website and generates the server logs described above.
• Google Fonts — serves the Inter typeface used across this site. Google receives your IP address when your browser requests the font files.
• Our email and communication providers — including the service behind info@dayonza.com and WhatsApp, which carry the messages you send us and are subject to their own privacy terms.
• Payment, banking, and accounting providers — used to process invoices and payments for client engagements.

We share personal data with these providers only to the extent needed for them to perform their function. We may also disclose data where we are legally compelled to, or where it is necessary to establish, exercise, or defend a legal claim.

8. Data inside systems we build for clients

When we develop a CRM, order management, warehouse, or similar system, that system may hold personal data about our client's own customers, employees, or vendors. For that data:

• Our client is the data fiduciary and decides what is collected and why. We act as a data processor on our client's documented instructions.
• We access such data only where it is necessary for development, migration, testing, or support, and only for as long as that task requires.
• We do not use client data for our own purposes, and we do not disclose it to anyone other than the client without instruction or a legal requirement.
• Where an individual asks us to exercise rights over data held in a client's system, we will refer them to the client, who is responsible for responding.

9. How long we keep data

We keep personal data only as long as it serves the purpose it was collected for, or as long as the law requires:

• Enquiries that do not lead to an engagement — retained for up to 24 months, then deleted.
• Client project records and correspondence — retained for the duration of the engagement and for a reasonable period afterwards to handle support, warranty, and disputes.
• Invoices, tax, and accounting records — retained for the period required under the Companies Act, 2013 and applicable tax law, which is generally eight years.
• Server logs — retained for a short period in line with our hosting provider's settings.

When data is no longer needed, we delete it or render it anonymous.

10. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and loss. In practice this includes:

• Encryption in transit — our website and the applications we deliver are served over HTTPS with valid TLS certificates.
• Access control — client systems and credentials are restricted to the team members working on that engagement, on a need-to-know basis, with individual accounts rather than shared logins.
• Secure credential handling — passwords and API keys are stored in protected form and never sent in plain text over public channels.
• Backups — where a hosting or maintenance contract is in place, we run scheduled backups so data can be restored after an incident.
• Secure development practices — input validation, role-based access control, and dependency updates form part of how we build.
• Breach response — if a personal data breach occurs, we will act promptly to contain it and will notify the Data Protection Board of India and affected individuals as required by law.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send passwords, financial credentials, or other highly sensitive information to us over email or WhatsApp.

11. Your rights

Subject to the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct or complete data that is inaccurate, misleading, or out of date.
• Erase personal data where it is no longer needed for the purpose it was collected for and no law requires us to keep it.
• Withdraw consent you previously gave, at any time.
• Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance with us, and escalate to the Data Protection Board of India if you are not satisfied with our response.

To exercise any of these rights, write to info@dayonza.com with enough detail for us to identify you and your request. We will respond within a reasonable period and, in any case, within the timelines set by law. We may ask you to verify your identity before we act on a request.

12. Children's data

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data of any individual below the age of 18 years without the verifiable consent of a parent or lawful guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Data transfers

We are based in India and our data is ordinarily stored in India. Some of the service providers listed in section 7 operate infrastructure outside India, which means limited personal data may be processed abroad. Where that happens, the transfer is made in accordance with applicable Indian law and any restrictions notified by the Central Government.

14. Changes to this policy

We may update this policy as our services, systems, or the law change. The revised version will be posted on this page with a new "last updated" date. Where a change materially affects your rights, we will take reasonable steps to notify you. Please review this page from time to time.

15. Grievance contact

If you have a question, a concern, or a complaint about how we handle personal data, contact us first — we would rather resolve it directly.

We aim to acknowledge every grievance within 48 working hours and to resolve it as quickly as we reasonably can. If you remain dissatisfied, you may approach the Data Protection Board of India.

This policy should be read together with our Terms of Service.