How we handle your personal data in line with India's Digital Personal Data Protection law — in plain language.
RS Info Solutions (“RS Info Solutions”, “we”, “us”), Kanpur, Uttar Pradesh, India, is the Data Fiduciary for personal data collected through this website and our portals — we decide why and how that data is processed. When we process personal data on behalf of our clients (for example, while building their website or running their campaigns), we act as their Data Processor under our contract with them.
We collect only what we need for a clear, specified purpose:
| When | Personal data | Purpose | Basis |
|---|---|---|---|
| Contact / quote form | Name, email, phone, service interest, message | Respond to your enquiry and send a proposal | Your consent (checkbox on the form) |
| Free website audit | Website URL; optionally name, email, phone | Generate your report; follow up if you ask us to | Your consent |
| Job applications | Name, email, phone, resume, cover note | Assess your application | Your consent |
| Newsletter | Email address | Send occasional updates | Your consent — unsubscribe anytime |
| Client & team portals | Name, email, login details, documents, tasks, chat messages | Deliver contracted services, share documents, coordinate work | Your consent and contract performance (legitimate use, Sec. 7) |
| All visitors | IP address, device/browser data, cookies | Security, preventing abuse (CAPTCHA, rate limits), analytics and advertising — the last two only with cookie consent | Legitimate use for security; consent for analytics/ads |
We do not sell personal data, and we never ask for more than the purpose needs.
Where we rely on consent, it is free, specific, informed, unconditional and unambiguous — given by a clear action such as ticking a box. You can withdraw consent at any time, as easily as you gave it: use the “unsubscribe” link in our emails, change your cookie preferences, or submit a request below. Withdrawal does not affect processing already carried out, and we will stop processing (and ask our processors to stop) within a reasonable time.
We respond to requests as soon as possible and in any case within the period prescribed under the DPDP Rules (currently not more than 90 days). We may need to verify your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India after first using our grievance process.
Your duties (Sec. 15) include providing authentic information and not filing false or frivolous complaints.
Our services are meant for businesses and adults. We do not knowingly collect personal data of anyone under 18. If we need to process a child's data (for example, for a school client), we will first obtain verifiable consent from a parent or lawful guardian, and we never track, behaviourally monitor or target advertising at children (Sec. 9).
We share personal data only with service providers who process it for us under contract, and only as needed:
Some of these providers may process data outside India. Such transfers are made in line with Section 16 of the DPDP Act, never to a country the Central Government has restricted.
We keep personal data only as long as needed for the purpose it was collected for, or as required by law (for example, tax and accounting records). Enquiries that don't turn into a project are deleted after 24 months; job applications after 12 months; portal data for the duration of the engagement plus any legally required period. Security logs (such as login attempts) are kept for at least one year, as the DPDP Rules require. Where data is due for erasure, we will tell you at least 48 hours in advance if the Rules require it.
We use reasonable security safeguards (Sec. 8(5)) including HTTPS encryption in transit, hashed passwords, CAPTCHA and login rate-limiting, role-based access to the admin, team and client portals, files stored outside public web access, activity logging, and regular backups.
If a personal data breach occurs, we will inform affected Data Principals without delay — what happened, the likely consequences, what we are doing about it and what you can do — and report it to the Data Protection Board of India within the timelines set by the DPDP Rules (including a detailed report within 72 hours).
Ravi Shankar Dwivedi, Grievance Officer
RS Info Solutions, Kanpur, Uttar Pradesh, India
Email: info@rsinfosolution.com · Phone: +91 92749 09729
We will update this notice when our practices or the law change, and show the new date at the top. Significant changes will also be announced on this website.