Privacy Policy

Introduction

7Nine TechLabs LLP ("7Nine", "we", "our", "us") is committed to protecting the personal data of individuals who visit and interact with our website at www.7ninelabs.com ("Website"). This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act)
• The Information Technology Act, 2000 (IT Act) and the IT (Amendment) Act, 2008
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules)
• Any other applicable Indian laws and regulations

By using our Website or submitting your information through our contact form, you consent to the collection and use of your data as described in this Policy.

Data Fiduciary

For the purposes of the DPDP Act, 2023, 7Nine TechLabs LLP, a Limited Liability Partnership registered under the Limited Liability Partnership Act, 2008, with its principal place of business at Pune, Maharashtra, India, is the Data Fiduciary responsible for your personal data.

Contact: info@7ninelabs.com | +91-899 991 4200

What Personal Data We Collect

We collect the following categories of personal data through our Website:

3.1 Information You Provide Directly

• Full name
• Email address
• Company or startup name
• Business stage and timeline
• Description of your product or project
• Phone number (if you contact us via WhatsApp or call)

3.2 Information Collected Automatically

• IP address and browser type
• Pages visited, time spent, and navigation patterns
• Device type and operating system
• Referring URLs
• Cookie identifiers (see our Cookie Policy)

Purpose of Processing

We process your personal data for the following lawful purposes, under your consent or our legitimate interests as a Data Fiduciary:

• To respond to your enquiries submitted via our contact form
• To assess your project and determine whether an engagement is suitable
• To schedule discovery calls and communications
• To send service-related communications, updates, and follow-ups
• To improve the Website's content, user experience, and services
• To comply with legal obligations under Indian law
• To maintain records of business interactions for legitimate business purposes

We will not process your data for purposes incompatible with those stated above without seeking fresh consent.

Legal Basis for Processing

Under the DPDP Act, 2023, our lawful bases for processing your personal data are:

• Consent: You provide explicit consent by submitting the contact form or by continuing to use the Website.
• Legitimate Interests: Processing necessary for our business operations, service delivery, and security, provided these do not override your fundamental rights.
• Legal Compliance: Processing required to comply with applicable Indian laws, court orders, or regulatory requirements.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data in the following limited circumstances:

6.1 Service Providers (Data Processors)

We may share data with trusted third-party service providers who assist in operating our Website and business — such as email hosting, analytics, and CRM tools — under contractual obligations to maintain data confidentiality and process data only as instructed.

6.2 Legal Requirements

We may disclose your personal data if required by law, court order, or government authority in accordance with the IT Act, 2000 and any applicable Indian law.

6.3 Business Transfers

In the event of a merger, restructuring, or sale of our business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Indian laws:

• Contact form submissions: retained for up to 24 months from date of submission
• Business engagement records: retained as required by applicable accounting and contract law in India
• Website analytics data: retained for up to 12 months in aggregated, anonymised form

Upon expiry of the retention period, we will securely delete or anonymise your personal data.

Your Rights as a Data Principal

Under the DPDP Act, 2023, you — as a Data Principal — have the following rights:

• Right to Access: Obtain confirmation of whether your personal data is being processed and a summary of the processing activities.
• Right to Correction and Erasure: Request correction of inaccurate or incomplete data, or erasure of data no longer required for the stated purpose.
• Right to Grievance Redressal: Raise a grievance with us regarding our processing activities.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please write to us at: info@7ninelabs.com. We will respond within 30 days of receiving your request.

Data Security

We implement reasonable security practices and procedures as required under Rule 8 of the SPDI Rules, 2011. This includes:

• Encrypted data transmission (HTTPS/TLS) for all Website communications
• Access controls and authentication mechanisms for systems handling personal data
• Periodic security assessments and vulnerability management
• Contractual data protection obligations with all third-party processors

In the event of a data breach that is likely to cause harm to you, we will notify you and the relevant authorities as required by applicable law.

Cross-Border Data Transfers

Our Website and tools may involve storage or processing of data on servers located outside India. We ensure that any such transfer is conducted in accordance with the provisions of the DPDP Act, 2023 and applicable government notifications regarding permitted geographies. We take appropriate contractual and technical safeguards to protect your data during such transfers.

Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted personal data without verifiable parental consent, we will delete such data promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The revised policy will be posted on this page with an updated effective date. We encourage you to review this policy periodically. Continued use of the Website after any changes constitutes your acceptance of the updated policy.

Contact & Grievance Officer

For any queries, concerns, or grievances regarding this Privacy Policy or our data processing practices, please contact:

• Organisation: 7Nine TechLabs LLP
• Grievance Officer: Yogesh Hubli
• Email: info@7ninelabs.com
• Phone: +91-899 991 4200
• Address: Pune, Maharashtra, India

We will endeavour to resolve your concern within 30 days of receipt.