Legal

Privacy policy

Last updated:

SIPATECH Private Limited ("SIPATECH", "we", "us", or "our") operates the website at sipatech.io. This policy explains what personal data we collect, why we collect it, and how we handle it.

This policy is published in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Digital Personal Data Protection Rules, the Information Technology Act, 2000, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

Under the DPDP Act, SIPATECH acts as a Data Fiduciary with respect to personal data collected through this website. You, as the individual whose data is collected, are the Data Principal.

By using this website or submitting personal data through our contact form, you provide informed consent to the practices described below. If you do not agree with this policy, please do not use the website or share personal data with us.

1. Personal data we collect

We collect personal data you provide directly when you submit our contact form or otherwise communicate with us:

  • Name - to address you personally in our reply
  • Company name - optional, to understand your context
  • Work email address - to respond to your inquiry
  • Phone number - optional, if you choose to share it
  • Message content - to understand what you need

We collect this data only when you voluntarily provide it.

We do not use analytics trackers, advertising pixels, behavioural profiling, or session recording tools on this website.

Our infrastructure providers may automatically process limited technical information - IP address, browser type, request metadata, date and time of access - as part of normal web operations. This is used for security, reliability, and abuse prevention, and is not used to identify individual visitors.

2. Purpose of processing

In accordance with the DPDP Act, we process your personal data only for the specific, lawful purposes for which it was collected:

  • To respond to your inquiry or request
  • To follow up on a conversation you initiated with us
  • To discuss potential consulting engagements
  • To maintain internal business records of our communications
  • To comply with applicable legal and regulatory obligations

We do not use your personal data for any purpose other than those listed above without seeking fresh consent.

We do not sell, rent, or trade your personal data to any third party. We do not add you to marketing lists without your explicit consent.

3. Lawful basis for processing

We process your personal data on the basis of your consent, given when you voluntarily submit information through our contact form or other communications.

For certain legitimate uses - such as responding to legal obligations, preventing fraud, or maintaining the security of our website - we may rely on the legitimate uses provided under Section 7 of the DPDP Act.

4. Third-party services

This website uses the following third-party services. Each operates under its own privacy policy.

  • Cloudflare - our CDN and DNS provider. Cloudflare processes HTTP requests to serve this site and may log metadata per their Privacy Policy.
  • Amazon Web Services (AWS) - our hosting provider. Static files are served from S3. AWS may retain standard server logs per their Privacy Notice.
  • Google Fonts - font files are loaded directly from Google's servers. Google may collect limited request data (IP address, browser) per their Privacy Policy.

5. Third-party brand assets and logos

This website displays third-party company and technology logos for identification and informational purposes only - for example, in the "Engineers from" section (acknowledging past employers of our founders) and the "Tech stack" section (acknowledging tools we work with).

These logos are sourced from publicly available brand resources, official media kits, or open icon libraries. All trademarks, service marks, and logos are the property of their respective owners. Their inclusion does not imply endorsement, partnership, or affiliation unless explicitly stated.

If you are a rights holder and wish a logo to be removed, please contact us and we will address the request promptly.

6. Cookies and local storage

We store one item in your browser's localStorage:

  • sipatech-theme - records your dark/light theme preference. This never leaves your device and contains no personal data.

We do not set any cookies of our own. Third-party infrastructure providers (Cloudflare, AWS) may set technical or security-related cookies as part of normal web operations.

7. Data retention

We retain your personal data only for as long as reasonably necessary to:

  • Respond to your inquiry and complete the business conversation you initiated
  • Meet contractual or operational requirements arising from any engagement
  • Comply with applicable legal, tax, or regulatory obligations

When personal data is no longer required for the purposes above, we will erase it. You may also request erasure at any time by contacting us.

8. Security

We take reasonable administrative, technical, and organisational measures to protect personal data against unauthorised access, misuse, disclosure, alteration, or destruction.

Communications related to consulting engagements, infrastructure architecture, and client operations are treated with appropriate confidentiality, subject to any non-disclosure agreements separately in place.

No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India in accordance with the DPDP Act and applicable Rules.

9. International data processing

Our infrastructure providers may process data in multiple jurisdictions depending on operational requirements. By using this website, you acknowledge that personal data may be processed outside India, subject to the safeguards and restrictions under the DPDP Act and applicable Rules.

10. Your rights as a Data Principal

Under the DPDP Act, you have the following rights with respect to your personal data:

  • Right to access - obtain a summary of the personal data we process about you and the purposes for which it is processed
  • Right to correction and erasure - request correction of inaccurate data or erasure of data no longer required
  • Right to grievance redressal - raise concerns about how we handle your personal data (see Section 13 below)
  • Right to nominate - nominate another individual to exercise these rights on your behalf in the event of death or incapacity
  • Right to withdraw consent - withdraw your consent for processing at any time; withdrawal will not affect the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us. We will respond within the timelines prescribed under the DPDP Act and applicable Rules.

For EU and UK residents (GDPR / UK GDPR)

If you are a resident of the European Union or United Kingdom, you have additional rights under the GDPR and UK GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority. We process personal data on the lawful bases of consent, contract, or legitimate interest.

11. External links

This website contains links to external websites and resources. We are not responsible for the privacy practices or content of external sites.

12. Changes to this policy

We may update this policy as our services evolve or as required by changes in law. Material changes will be reflected by revising the "Last updated" date at the top of this page. Continued use of the website after such updates constitutes acceptance of the revised policy.

13. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the contact details of our Grievance Officer are:

Sidhartha Mandal
Co-Founder, SIPATECH Private Limited
Bengaluru, Karnataka, India
Email: email

We will acknowledge grievances within 24 hours and respond within the timelines prescribed under the DPDP Act and applicable Rules.

You also have the right to lodge a complaint with the Data Protection Board of India if you believe your rights under the DPDP Act have been violated and remain unresolved after raising the issue with us.

14. Governing law

This Privacy Policy is governed by the laws of India. Any disputes arising from or relating to this policy shall be subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka.

15. Contact

Questions about this policy? Get in touch and we'll respond within one business day.