Data Policy

At Codegrand Technologies, we are deeply committed to safeguarding your digital personal data. This Data Policy outlines how we collect, process, manage, and protect your information in strict compliance with the newly enforced framework of the Indian IT Data Act 2026 (Digital Personal Data Protection Act framework).

1. Principles of Data Processing

We adhere to the core tenets of the Data Protection Act:

• Lawful & Transparent: Data is handled lawfully, fairly, and transparently.
• Purpose Limitation: We only collect data for specific, clear, and legitimate purposes.
• Data Minimisation: We limit collection to what is strictly necessary.
• Storage Limitation: Personal data is deleted or anonymized when the purpose for which it was collected is completely fulfilled.

2. Consent and Notice

We prioritize informed consent. Before collecting personal data, we will provide an itemized notice summarizing the data sought and the purpose of its collection. You have the right to withdraw your consent at any point without affecting the lawfulness of processing based on consent before its withdrawal.

3. Rights of the Data Principal

Under the IT Data Act 2026, you (the Data Principal) possess the following rights:

• Right to Information: Gain clear insight into what digital personal data has been securely logged by us.
• Right to Correction & Erasure: To correct inaccurate data and to request erasure when the data is no longer necessary for its original purpose.
• Right to Grievance Redressal: Avenues to register concerns and ensure prompt responses.
• Right to Nominate: The ability to nominate another individual to exercise your rights in the event of incapacity.

4. Obligations as a Data Fiduciary

As a Data Fiduciary, Codegrand implements stringent organizational and technical measures to guarantee robust data security and avert potential personal data breaches. We ensure:

• Immediate notification to the Data Protection Board and affected Data Principals in case of a personal data breach.
• Regular security audits and continuous modernization of our encryption algorithms.

5. Cross-Border Data Transfers

Codegrand Technologies may transfer personal data outside the territory of India exclusively to those countries notified by the Indian Government as having an adequate level of data protection, ensuring your information remains secure on an international basis.