Privacy & Cookie Policy

1. Identification of Data Controller

This Privacy Policy applies to personal data collected and processed by Cybersoft Digital Enterprise LLP ("Cybersoft Digital", "we", "us", or "our"), situated and registered in Kolkata, West Bengal, India, operating the website https://cybersoftdigital.com and related subdomains, services, client discovery forms, and operational infrastructure.

If you have questions regarding this policy or our data management procedures, contact our Data Protection representative directly at support@cybersoftdigital.com.

2. Information We Collect

We collect personal information that you provide to us voluntarily, as well as data gathered automatically when navigating our web properties:

3. Legal Basis for Processing Personal Data

Under applicable Indian data protection frameworks (including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000), as well as international privacy principles (including GDPR / UK GDPR for our global clients), we only process personal information where a lawful basis exists:

4. How We Use Collected Data

Cybersoft Digital processes your data strictly for legitimate business and client service purposes:

• To evaluate project scopes, architect technical specifications, and generate commercial proposals.
• To engineer, deploy, and maintain bespoke websites, sales funnels, and digital applications.
• To provide continuous managed support, client communication, and incident triage.
• To verify billing information, collect payments, and maintain statutory financial ledgers.
• To safeguard our infrastructure, detect malicious traffic, and prevent cyber threats.

5. Third-Party Data Processors & Transfers

We do not sell, rent, or trade your personal data. We only share information with vetted third-party service providers bound by strict contractual data protection agreements:

• Cloud Infrastructure & Edge Delivery: Cloudflare, AWS, and modern edge networks for secure routing, SSL termination, and asset delivery.
• Payment Gateways: Stripe, for encrypted processing of card payments and subscription invoices.
• Workspace & CRM Tools: Google Workspace and enterprise CRM systems for secure correspondence and project tracking.

Where personal data of international clients or visitors is transferred across borders, such transfers are governed by recognized standard contractual clauses and appropriate technical security measures to ensure equivalent protection.

6. Cookies & Local Storage

Our website adheres to modern, lightweight engineering standards. We do not utilize invasive advertising trackers, behavioral spyware, or third-party marketing broker pixels.

We only employ strictly necessary session cookies and minimal aggregated telemetry to ensure site navigation stability, security authentication, and responsive performance. You may modify your browser settings to decline cookies at any time, though some functional features may be impaired.

7. Data Retention & Security Protections

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, support active client engagements, or comply with statutory legal and accounting retention rules (typically up to six years for corporate tax records).

All data in transit is protected using modern TLS 1.3 encryption. Internal access to production credentials, database records, and client repositories is strictly gated by multi-factor authentication (MFA) and least-privilege security policies.

8. Your Legal Rights

Subject to applicable data protection laws (including the DPDP Act 2023 and GDPR / UK GDPR where applicable), you hold the following rights:

• Right of Access: Request a copy of the personal data we hold concerning you.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where no statutory retention basis applies.
• Right to Restrict Processing: Request that we limit processing of your personal data under certain conditions.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing based on legitimate interest or direct marketing.

To exercise any of these statutory rights, please submit a written request to support@cybersoftdigital.com. We respond to all verified inquiries within 30 days.

9. Policy Revisions

We reserve the right to amend this Privacy Policy periodically to reflect technological advancements, operational changes, or new regulatory requirements. Any modifications will be posted directly to this page with an updated revision date.