Privacy Policy

1. Introduction & Scope

Himalya NextGen Technologies Pvt. Ltd. ("the Company", "Himalya NextGen", "we", "us", or "our") operates as a high-performance IT services and software development firm. This Privacy Policy serves as a comprehensive disclosure of our practices regarding the collection, use, and protection of personal data belonging to our website visitors, clients, and partners.

We recognize the critical nature of data privacy in the digital age. Our commitment is to manage your personal information with the highest level of integrity and transparency, ensuring full compliance with the Information Technology Act (2000), the Digital Personal Data Protection (DPDP) Act (2023) of India, and where applicable, the General Data Protection Regulation (GDPR).

2. Comprehensive Data Collection

2.1 Personal Identification Information

We collect information that identifies you as an individual or relates to an identifiable individual. This may include:

• Identity Data: Full name, professional title, and organizational affiliation.
• Contact Infrastructure: Professional email addresses, business physical addresses, and social media identifiers (LinkedIn, GitHub, etc.).
• Technical Metadata: IP addresses, browser fingerprints, device type, operating system version, and unique device identifiers collected via automated tracking systems.

2.2 Project & Professional Data

As a B2B service provider, we collect specific data required for project execution, including technical specifications, business process workflows, and architectural requirements provided during the discovery phase.

3. Purpose of Processing

We utilize the data we collect to drive innovation and ensure the seamless delivery of our services. Primary processing activities include:

• Service Delivery: Facilitating custom software engineering, ERP deployment, and cloud infrastructure management.
• Relationship Management: Managing client accounts, processing invoices, and providing technical support.
• Product Optimization: Analyzing usage patterns to enhance the performance and user experience of our digital platforms.
• Direct Communication: Sending critical project updates, technical advisories, and (subject to consent) insights into emerging technologies.

4. Legal Grounds for Processing

Our processing activities are strictly governed by legal frameworks. We rely on the following legal bases:

• Performance of a Contract: Processing is necessary for us to fulfill our contractual obligations to you.
• Legitimate Interests: Processing is required for our legitimate business interests, provided these do not override your fundamental rights.
• Consent: Where you have provided explicit, informed, and unambiguous consent for specific activities (e.g., marketing).
• Legal Mandate: Compliance with statutory requirements or lawful government directives.

5. Data Retention & Archival

Himalya NextGen adheres to a strict data minimization and retention policy. We retain personal data only for the duration necessary to fulfill the purposes for which it was collected, including the satisfaction of any legal, accounting, or reporting requirements.

Upon the expiration of the retention period, data is either permanently deleted from our primary and backup systems or anonymized such that it can no longer be associated with an individual.

6. Advanced Security Protocols

Security is at the core of our engineering philosophy. We implement state-of-the-art technical and organizational measures to safeguard your data, including:

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit.
• Access Control: Role-based access control (RBAC) and Multi-Factor Authentication (MFA) for all internal systems and client repositories.
• Monitoring: 24/7 security monitoring, intrusion detection systems, and regular penetration testing.

7. Third-Party Disclosures

We do not sell or monetize your personal data. Disclosures are limited to:

• Strategic Partners: Trusted third-party vendors who provide essential infrastructure (e.g., AWS, Vercel, MongoDB).
• Legal Authorities: When required by law to comply with judicial proceedings or government requests.
• Business Continuity: In the event of a corporate merger, acquisition, or asset sale, data may be transferred as a business asset.

8. International Data Sovereignty

As a global-facing firm, your data may be processed in jurisdictions outside of your country of residence. We ensure that all international data transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and adherence to international data protection standards.

9. Your Enhanced Data Rights

Under modern data protection regimes, you hold significant rights over your data:

• Right of Access: Request a comprehensive copy of the personal data we hold about you.
• Right to Rectification: Demand the correction of inaccurate or incomplete data.
• Right to Erasure: Request the deletion of your data under specific conditions (the "Right to be Forgotten").
• Right to Portability: Request the transfer of your data to another service provider in a machine-readable format.

10. Cookie & Tracking Technology

Our website utilizes "cookies" and similar technologies to enhance functionality and analyze traffic. You have the right to accept or decline cookies through your browser settings. However, disabling certain cookies may impact the performance and functionality of our digital services.

11. Regulatory Compliance (DPDP & GDPR)

We proactively align our operations with the evolving regulatory landscape. Our Data Protection Officer (DPO) ensures that all development processes, internal workflows, and client interactions adhere to the principles of Privacy by Design and Privacy by Default.

12. Governance & Contact

For any inquiries regarding this Privacy Policy, your data rights, or our security practices, please contact our Compliance Department.

Email: info@himalyanextgen.com
Address: Himalya NextGen Technologies Pvt. Ltd., Dehradun, Uttarakhand, India.