Privacy Policy

Introduction

EchoBitz IT Solutions Private Limited (“EchoBitz”, “we”, “us”, or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our website or engage us for IT services.

By accessing our website, submitting information to us, or using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described in it.

Information We Collect

The information we collect depends on how you interact with EchoBitz and which services you request.

A. Non-Personally Identifiable Information

When you browse our website, our systems may automatically collect technical and usage information such as:

• IP address, browser type and version, operating system, device type, and general location information.
• Pages visited, the order of visits, time spent on pages, links clicked, referring pages, and access timestamps.
• Technical logs and diagnostic information generated when your browser communicates with our website.

We use this information to diagnose server issues, secure the website, improve performance, understand traffic patterns, and enhance the visitor experience.

B. Personally Identifiable Information

We may collect your name, email address, phone number, company name, job title, physical address, billing address, and other details you choose to provide. This information may be collected through:

• Contact Us, quotation, consultation, enquiry, and service request forms.
• Career, job, and internship application forms.
• Project communications, meetings, email exchanges, contracts, and service onboarding.
• Billing, account administration, support, and relationship management activities.

C. Project & Business Data

During an IT service engagement, clients may share business process information, technical specifications, system credentials, configuration data, documents, customer or employee data, and other project materials. We use such information solely to evaluate, plan, deliver, support, and secure the agreed services, subject to the applicable proposal, agreement, or Data Processing Agreement.

D. Cookies & Tracking Technologies

Our website may store alphanumeric identifiers and similar technologies in your browser. These technologies help us recognise return visits, maintain sessions, analyse usage patterns, remember preferences, and improve website functionality. You may disable cookies through your browser settings, although some website features may not function fully.

How We Use Your Information

EchoBitz may use collected information for the following legitimate purposes:

• Responding to enquiries, consultation requests, quotations, and support requests.
• Providing, managing, improving, and securing requested services and project deliverables.
• Sending project updates, invoices, payment communications, service notices, and account-related messages.
• Processing and evaluating job, career, and internship applications.
• Analysing website performance, diagnosing technical issues, and improving content and usability.
• Conducting internal marketing research, service planning, and aggregated demographic analysis.
• Protecting our website, systems, team, clients, and business from misuse, fraud, or security incidents.
• Complying with contractual, regulatory, tax, accounting, and other legal obligations.

Contact Forms

Contact Us & Enquiry Forms

Our Contact Us and enquiry forms may collect your name, phone number, email address, company details, service interest, and message. This information is made available to authorised sales or service team members so they can understand and respond to your request.

Career, Job & Internship Forms

Career forms may collect your name, contact details, qualifications, work history, resume, portfolio, preferred role, and related information. This data is accessed by authorised recruitment personnel and used only to evaluate your suitability for current or future opportunities.

Please avoid submitting confidential, sensitive, or unnecessary personal information through general website forms.

Cookies Policy

We use cookies and similar technologies where appropriate to operate and improve our website.

Types of Cookies

• Session cookies: Temporary cookies that support essential website functions and are normally removed when you close your browser.
• Persistent cookies: Cookies retained for a defined period to remember preferences or recognise return visits.
• Analytics cookies: Cookies that help us understand aggregated website traffic, page performance, and visitor interactions.
• Third-party cookies: Cookies that may be placed by analytics, embedded content, communication, or marketing service providers.

Managing Cookie Preferences

You can block, delete, or limit cookies through your browser settings. Restricting essential cookies may affect website functionality, form behaviour, saved preferences, or other features.

Third-Party Tools & Data Sharing

To operate our business and deliver services, EchoBitz may use trusted third-party service providers, including:

• CRM, ERP, and project management platforms such as Odoo and SugarCRM.
• Cloud and infrastructure providers such as AWS, Google Cloud, Microsoft Azure, and DigitalOcean.
• Website analytics, security monitoring, and performance platforms.
• Email, video meeting, document storage, collaboration, and communication tools.
• Professional advisers, auditors, payment providers, and authorised subcontractors where necessary.

These providers may access limited information only to perform services for EchoBitz or our clients. They are expected to process information under applicable contractual, confidentiality, and security obligations and are not permitted to use it for unrelated independent purposes.

We may share aggregated or de-identified information with business partners where that information does not reasonably identify an individual.

Data Retention

We retain information only for as long as reasonably required for the purpose for which it was collected, our legitimate business needs, contractual commitments, dispute resolution, or legal obligations.

• Website enquiries: Retained as needed to respond, follow up, maintain business records, and manage the relationship.
• Project data: Retained for the duration of the engagement and a reasonable period afterwards for support, continuity, audit, and contractual purposes.
• Financial records: Retained for the period required by applicable tax, accounting, corporate, and regulatory laws.
• Job application data: Retained for a reasonable recruitment period or future suitable opportunities, then securely deleted or anonymised when no longer required.

You may request deletion of eligible personal data by emailing info@echobitzit.com. Certain information may need to be retained where required by law or an active contractual obligation.

Data Security

EchoBitz implements reasonable industry-standard administrative, technical, and organisational practices intended to protect information against unauthorised access, disclosure, alteration, loss, or misuse.

• Access to personal and project data is restricted to authorised personnel with a legitimate need to know.
• We use appropriate access controls, account security, backups, monitoring, and secure development or operational practices based on the engagement.
• Team members and authorised service providers are expected to observe applicable confidentiality and data-handling requirements.
• Security controls are reviewed and improved as technology, risks, and business requirements evolve.

Children's Privacy

EchoBitz provides business and professional IT services and does not offer services for purchase by children. We do not knowingly collect personal information from individuals under 18 years of age.

If we learn that information belonging to a person under 18 has been submitted without appropriate authority or consent, we will take reasonable steps to delete it. A parent or guardian who believes a child has provided information may contact us at info@echobitzit.com.

Legal Obligation to Disclose

EchoBitz may preserve, access, or disclose information where we reasonably believe it is necessary to:

• Comply with applicable law, regulation, legal process, court order, or a lawful government request.
• Enforce a contract, protect our legal rights, investigate fraud, or respond to a security incident.
• Protect the rights, property, systems, or safety of EchoBitz, our clients, our team, or the public.
• Support a corporate transaction, restructuring, merger, or transfer, subject to appropriate confidentiality protections.

Where legally permitted and reasonably practical, we will limit any disclosure to the information necessary for the relevant purpose.

Your Rights

Subject to applicable law, identity verification, and contractual or legal restrictions, you may have the right to:

• Request access to the personal information we hold about you.
• Request correction or completion of inaccurate or incomplete information.
• Request deletion of eligible personal data.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time.
• Object to or request restriction of certain processing where applicable.
• Request information about third parties with whom your information has been shared, where required by law.
• Lodge a complaint with the relevant data protection or regulatory authority.

To exercise a privacy right, email info@echobitzit.com with sufficient detail to identify you and understand your request. We may request reasonable identity verification before responding.

India-Specific Compliance

EchoBitz handles personal information in accordance with applicable Indian privacy, technology, and information security requirements, including:

• The Information Technology Act, 2000 and the Information Technology (Amendment) Act, 2008.
• Applicable rules, directions, and reasonable security practice requirements issued under Indian law.
• Applicable obligations under the Digital Personal Data Protection Act, 2023 (DPDPA) and related rules as they become operational and apply to our activities.

Where EchoBitz acts as a data fiduciary, data processor, or service provider, we will apply the responsibilities relevant to that role and the specific engagement.

International Clients & GDPR Note

EchoBitz serves clients in multiple jurisdictions. Where personal data is governed by the EU General Data Protection Regulation (GDPR), UK GDPR, or another international data protection framework, the client and EchoBitz will identify their respective roles and applicable processing requirements.

For projects requiring documented processor obligations, cross-border safeguards, security commitments, subprocessor information, or data subject assistance, EchoBitz is willing to enter into an appropriate Data Processing Agreement (DPA). Please email info@echobitzit.com to request one.

Links to Third-Party Websites

Our website may contain links to third-party websites, applications, platforms, or resources for convenience or informational purposes. EchoBitz does not control and is not responsible for the privacy practices, security, availability, accuracy, or content of those external services.

Opening an external link is at your discretion. We encourage you to review the privacy policy and terms of each third-party website before submitting personal information or using its services.

Updates to This Policy

We may revise this Privacy Policy to reflect changes in our services, technology, legal requirements, data-handling practices, or business operations. The updated version will be published on this page with a revised “Last Updated” or effective date.

We recommend reviewing this page periodically. Your continued use of our website or services after an updated policy is published constitutes acknowledgement of the revised policy, subject to any additional consent required by applicable law.