Home/Global Privacy Policy
LEGAL & COMPLIANCE

Global Privacy Policy

Effective Date

October 30, 2026

Entity Name

SolcentricNX

Jurisdictional Scope

Global (IN, US, EU, UK, CA)

COMPLIANCE HIGHLIGHT

SolcentricNX is committed to protecting the privacy, confidentiality, and security of personal data collected from clients, website visitors, partners, and users globally. This Privacy Policy outlines our data processing standards under the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), Information Technology Act, 2000, EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA/CPRA), and Canadian PIPEDA.

01

1. Introduction & Scope

SolcentricNX ("Company", "we", "us", or "our") is a technology and media solutions studio operating from Mumbai, Maharashtra, India, serving domestic and international clients. We deliver custom software development, high-performance web engineering, artificial intelligence (AI) integrations, business process automation, digital & performance marketing, creative brand identity design, and agency partnership solutions.

This Global Privacy Policy applies to all individuals and entities who visit our website (https://solcentricnx.com), engage our services, interact with our applications, or communicate with us through any channel. By accessing our services or submitting personal data to SolcentricNX, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

02

2. International & Domestic Regulatory Framework

To ensure seamless legal compliance for both domestic (Indian) and overseas clients (including the United States, Canada, European Union, United Kingdom, and Asia-Pacific regions), SolcentricNX operates in adherence with:

India (Domestic Mandate)

The Digital Personal Data Protection Act, 2023 (DPDP Act, India) and the Information Technology Act, 2000 along with the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

European Union & United Kingdom

Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and the UK Data Protection Act 2018 (UK GDPR).

United States (State Laws)

California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and applicable state-level privacy statutes.

Canada

Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial private-sector privacy legislation.

03

3. Information We Collect

We collect personal and technical information necessary to deliver our services, communicate with stakeholders, maintain digital security, and comply with legal requirements. We categorize the data collected as follows:

3.1 Personal Data Provided Directly by You

  • •Contact & Identity Information: Full name, business email address, personal phone number, WhatsApp contact details, physical business address, job title, and company name.
  • •Project & Business Credentials: Project specifications, design requirements, workflow diagrams, source code access, API keys, database credentials, software specifications, and marketing assets provided during project onboarding.
  • •Financial & Payment Information: Billing name, billing address, tax identification numbers (GSTIN for Indian entities, VAT/EIN/Tax ID for foreign entities), bank account details, and transaction histories.
  • •Communications & Feedback: Inquiries, meeting notes, project revision feedback, email correspondence, and support requests.

3.2 Technical & Automated Data Collection

  • •Device & Connectivity Data: IP addresses, browser type and version, device hardware specifications, operating system, time zone settings, and language preferences.
  • •Usage & Telemetry Data: Uniform Resource Locators (URLs) visited, clickstream data, page interaction times, bounce rates, download logs, and navigation routes across our website.
  • •Cookies & Analytics Identifiers: Session identifiers, preference cookies, and web performance tokens stored via your web browser.
04

4. Lawful Bases for Data Processing

Under applicable international laws, SolcentricNX processes your personal data relying on one or more of the following recognized legal grounds:

1. Contractual Necessity

Necessary to fulfill pre-contractual requests, execute Statements of Work (SOW), develop software, manage agency partnerships, or deliver media services.

2. Explicit Consent

Obtained when you explicitly submit contact forms, subscribe to updates, allow optional tracking cookies, or consent to data processing for specific purposes.

3. Legitimate Interests

Processing necessary for our legitimate business operations, such as protecting web infrastructure against cyber threats, optimizing software performance, and conducting business communications.

4. Legal Compliance

Required to comply with Indian statutory obligations (taxation, audit trails, law enforcement inquiries) or applicable overseas regulatory mandates.

05

5. How We Use Your Information

SolcentricNX strictly utilizes collected data for lawful, transparent, and defined business purposes:

  • —To design, develop, test, deploy, and maintain custom web applications, mobile software, automation workflows, and digital marketing funnels.
  • —To schedule discovery meetings, issue project quotes, send milestone invoices, and deliver post-launch technical support.
  • —To administer white-label agency partner programs, sub-contracting engagements, and client project management tools.
  • —To analyze website traffic patterns, debug system errors, prevent fraudulent transactions, and enhance user experience across devices.
  • —To send technical updates, regulatory announcements, invoices, and opt-in promotional content (from which you can unsubscribe at any time).
06

6. Cross-Border Data Transfers & Hosting

Because SolcentricNX operates out of India and services international clients across Canada, North America, Europe, and Asia, your data may be transferred across international borders and hosted on secure global infrastructure.

EU/UK Transfers (GDPR): All cross-border data transfers originating from the European Economic Area (EEA) or the UK to India are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent data protection.

Indian Transfers (DPDP Act): Transfers of Indian resident data adhere strictly to the cross-border provisions of the Digital Personal Data Protection Act, 2023.

Cloud Infrastructure: We store and process data using enterprise-grade, encrypted cloud server infrastructure (such as Cloudflare, AWS, and secure Git repositories) with strict encryption standards (AES-256 at rest and TLS 1.3 in transit).

07

7. Cookies and Tracking Technologies

Our website utilizes cookies and similar tracking technologies to ensure functionality, analyze performance, and optimize user experience:

  • •Essential Cookies: Necessary for core site navigation, security features, and accessibility. These cannot be disabled.
  • •Analytics & Performance Cookies: Help us understand visitor counts, traffic sources, and performance metrics (e.g., Google Analytics). These are activated only upon user consent.

You can modify your browser settings to reject cookies or alert you when cookies are being sent. However, disabling certain cookies may affect website functionality.

08

8. Data Security and Retention

8.1 Technical and Organizational Safeguards

We implement robust technical and organizational security measures aligned with industry standards (including ISO/IEC 27001 principles and OWASP guidelines). Measures include role-based access control (RBAC), multi-factor authentication (MFA), encrypted database backups, network firewalls, and routine vulnerability scanning.

8.2 Data Retention Standards

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including contractual obligations, project warranty periods, and statutory tax or legal requirements (typically up to seven [7] years for accounting records).

09

9. Your Global Privacy Rights

Depending on your geographical location and applicable jurisdiction, you hold specific enforceable rights regarding your personal data:

JurisdictionEnforceable Data Subject Rights
India (DPDP Act 2023)Right to access summary of personal data; Right to correction and completion; Right to erasure; Right to grievance redressal; Right to nominate another individual in case of death/incapacity.
EU & UK (GDPR)Right to access (DSAR); Right to rectification; Right to erasure ('Right to be Forgotten'); Right to restrict processing; Right to data portability; Right to object to processing; Right not to be subject to automated decision-making.
US - California (CCPA/CPRA)Right to know what personal information is collected; Right to delete personal information; Right to opt-out of sale/sharing (SolcentricNX does NOT sell data); Right to correct inaccurate data; Right to non-discrimination.
To exercise any of these rights, please submit a written request to our Data Protection Officer / Grievance Redressal Officer at info@solcentricnx.com. We will verify your identity and respond within the statutory timeframe mandated by your local jurisdiction (e.g., 30 days under GDPR).
10

10. Third-Party Sub-Processors

SolcentricNX engages trusted third-party sub-processors to assist in infrastructure hosting, code management, payment processing, and communications. All sub-processors are bound by strict Data Processing Agreements (DPAs) requiring adherence to equivalent data security standards.

Cloud Hosting & Infrastructure

Cloudflare Pages, Vercel, Amazon Web Services (AWS) — Global CDN & Server Infrastructure.

Analytics & Telemetry

Google Analytics — Aggregated traffic and performance analytics.

Source Control & Git Repositories

GitHub, GitLab — Version control, automated deployments, and repository hosting.

Payment Processing & Billing

Razorpay, Stripe, Bank Wire Transfer Networks — Regulated payment gateways.

11

11. Protection of Minors

Our services are strictly oriented toward commercial enterprises, professionals, and adults over eighteen (18) years of age (or sixteen [16] in applicable European territories). We do not knowingly collect or solicit personal data from children. If we become aware that a child has provided us with personal data, we will immediately delete such information.

12

12. Updates to This Privacy Policy

SolcentricNX reserves the right to update this Privacy Policy at any time to reflect legal changes, technological advancements, or modifications to our operational workflows. When updates are published, the 'Last Updated' date at the top of this document will be revised. Continued use of our website or services following an update constitutes acceptance of the revised policy.

13

13. Grievance Redressal Officer & Contact Details

In compliance with the Indian Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, and international privacy mandates, you may contact our designated Grievance / Data Protection Officer for any privacy concerns, data rights requests, or questions:

SolcentricNX — Data Protection & Grievance Office

Designated Officer
Privacy & Grievance Lead
WhatsApp / Phone
+91 98346 49083
Registered Office Location
Mumbai, Maharashtra, India
Official Website
https://solcentricnx.com