Legal

Privacy Policy

This Privacy Policy explains how Cognitex IT Solutions (“Cognitex,” “we,” “us,” or “our”) collects, uses, shares, and protects digital personal data when you visit our website or contact us about our services. It is intended to align with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDPA”).

Last updated: 31 August 2026

1. Who we are

Cognitex IT Solutions provides web and enterprise application development, end-to-end product lifecycle delivery, contract and payroll resource augmentation, and digital transformation support. This policy applies to personal information processed through our public website and related inquiry channels.

For privacy-related questions, contact us using the details in the Contact us section below.

2. Information we collect

Under the DPDPA, “personal data” means any data about an individual who is identifiable by or in relation to such data. We collect digital personal data only for specified purposes connected with responding to business inquiries and operating this website. We may collect the following categories:

Information you provide (directly from you)

  • Identity & contact details — full name and corporate email address.
  • Professional / organisation details — organisation or company name, and inquiry type (for example Application Development, Product Lifecycle, Resource Augmentation, or Digital Transformation).
  • Inquiry content — any message, requirements, or other information you voluntarily include when you contact us.
  • Business correspondence — information shared by email or during follow-up conversations related to a consultation request or engagement discussion.

Information collected automatically

  • Technical & usage data — such as IP address, browser type, device type, referring pages, and general usage logs when you visit our website, to the extent our hosting environment or security tools record them.
  • Cookies or similar technologies — if enabled on our site for essential operation, preference, or analytics purposes (see Cookies & analytics).

We collect this data for the limited purposes described in this policy (primarily to acknowledge and respond to your inquiry, evaluate fit for our services, and maintain the security of our website). We do not knowingly request sensitive personal data through the website contact form. Please avoid submitting passwords, payment card numbers, government ID numbers, health information, or other sensitive personal data in inquiry fields.

3. How we use information

We use personal information to:

  • Respond to consultation requests and service inquiries
  • Understand your organization and engagement needs so we can recommend an appropriate next step
  • Manage business communications and follow-ups
  • Operate, secure, and improve our website and related IT systems
  • Comply with legal, regulatory, and audit obligations
  • Establish, exercise, or defend legal claims when necessary

We do not sell personal information. We do not use website inquiry data for unrelated marketing lists without a clear lawful basis and, where required, your consent.

5. Sharing and disclosure

We may share personal information with:

  • Service providers — such as website hosting, email delivery, IT security, or collaboration tools that process data on our instructions
  • Professional advisors — such as legal or accounting advisors, when reasonably required
  • Authorities — when disclosure is required by law, regulation, court order, or to protect rights, safety, and security
  • Business transfers — in connection with a merger, acquisition, restructuring, or asset sale, subject to appropriate safeguards

We require processors who handle personal information on our behalf to protect it and use it only for contracted purposes.

6. Data retention

We retain inquiry and related business records only as long as needed for the purposes described in this policy — typically for the duration of an active discussion or engagement, and thereafter for a reasonable period for follow-up, compliance, dispute resolution, and legitimate business records. Retention periods may vary based on the nature of the inquiry and applicable legal requirements. When information is no longer needed, we take steps to delete or anonymize it.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure; if we become aware of an incident affecting your personal information, we will take appropriate steps consistent with applicable law.

8. Cookies and analytics

Our website may use essential cookies required for basic functionality and security. If we introduce analytics or preference cookies in the future, we will update this policy and, where required, provide notice or consent controls. You can usually manage cookies through your browser settings; disabling certain cookies may affect site functionality.

9. International transfers

Depending on where our hosting providers and business systems operate, personal information may be processed in countries other than your own. Where required by law, we use appropriate safeguards for such transfers, such as contractual protections with service providers.

10. Your rights

As a Data Principal under the Digital Personal Data Protection Act, 2023 (and subject to applicable law and prescribed conditions), you may have the right to:

  • Request access to personal data we hold about you, including a summary of processing
  • Request correction, completion, or updating of inaccurate or incomplete personal data
  • Request erasure of personal data, where applicable
  • Object to or request restriction of certain processing, where available under applicable law
  • Nominate another individual who may exercise your rights in the event of your death or incapacity (see Right to nominate below)
  • Withdraw consent for processing that is based on consent (see Consent withdrawal below)
  • Seek redress of grievances through our Grievance Officer and, where applicable, approach the Data Protection Board of India

Consent withdrawal

Where we process your personal data on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent will be as easy as it was to give consent. To withdraw consent, email our Grievance Officer (details in Section 13) with the subject line “Withdrawal of Consent,” stating which processing you wish to stop (for example, further follow-up on a website inquiry or optional communications).

Upon receiving a valid withdrawal request, we will cease processing your personal data for the purpose(s) covered by that consent, unless processing is otherwise permitted or required under the DPDPA or other applicable law (for example, to comply with a legal obligation, enforce rights, or retain records for dispute resolution). Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to nominate

In accordance with the DPDPA, you may nominate any other individual who shall, in the event of your death or incapacity, exercise your rights in relation to your personal data on your behalf. You may create, change, or revoke such a nomination by writing to our Grievance Officer with clear details of the nominee (name and contact information) and the scope of the nomination. We may request reasonable information to verify your identity and the nominee’s authority before acting on nomination-related requests.

To exercise any of the rights above, contact us using the details in Section 13. We may need to verify your identity (and, where relevant, the nominee’s authority) before responding, and we will address requests within timelines required under applicable law.

11. Children’s privacy

Our website and services are directed to business professionals and enterprises. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page will be revised when changes are posted. Continued use of our website after an update constitutes notice of the revised policy, where permitted by law.

13. Contact us & designated Grievance Officer

If you have questions about this Privacy Policy, wish to exercise your rights as a Data Principal, or need to raise a privacy-related grievance, contact Cognitex IT Solutions:

Designated Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address queries and grievances relating to the processing of personal data:

  • Grievance Officer: Privacy Grievance Officer, Cognitex IT Solutions
  • Email: grievance@cognitexit.com
  • Purpose: Data Principal rights requests, consent withdrawal, nomination updates, and privacy complaints

You may lodge a grievance by emailing the Grievance Officer with your name, contact details, a clear description of the concern, and any supporting information. We will acknowledge and endeavour to resolve grievances within the timelines prescribed under applicable law and rules framed under the DPDPA. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India as provided under the DPDPA.

Update the Grievance Officer name, email, and postal address (if required) to your live MilesWeb / business contacts before publishing. This page supports DPDPA-oriented transparency for our website and is not a substitute for formal legal advice.

14. Governing law and jurisdiction

This Privacy Policy and any dispute, claim, or grievance arising out of or in connection with the processing of personal data described herein shall be governed by and construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, and the rules and regulations made thereunder.

Subject to any rights you may have to approach the Data Protection Board of India under the DPDPA, the courts in India shall have exclusive jurisdiction over disputes arising from this Privacy Policy or our processing of personal data through this website, without prejudice to any mandatory protections available to you under applicable law.