1. Who We Are
This Privacy Notice explains how Innosolv Consultancy Services Private Limited ("Innosolv", "we", "us", "our") collects, uses, shares and protects personal data when you use our websites and related online touchpoints.
Innosolv is a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for personal data collected through:
- Our corporate website and product pages;
- Consultation request and demo forms;
- WhatsApp and email links exposed via the website;
- Any trial or demo environments linked from the site.
Legal entity details:
Innosolv Consultancy Services Private Limited
XXV/1254, Pazhayannadakkavu
Thrissur, Kerala – 680 001
Email: privacy@innosolv.in
The IT Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 also apply to our data handling practices.
2. What Personal Data We Collect
We collect personal data that you provide directly, that is generated by your use of our website, and that is processed by service providers supporting our site.
2.1 Data you provide
When you submit forms or contact us, we collect:
- Identity and contact data: name, business email, phone number / WhatsApp number, company name, designation.
- Business profile data: industry type (e.g., F&B, manufacturing), number of outlets/plants, basic POS/ERP stack information.
- Pain point and enquiry data: free text descriptions of operational challenges, project context, requirements, and any other information you choose to provide in the form or messages.
2.2 Data generated by your use of our website
Through our hosting, logging and analytics tools, we collect:
- Technical data: IP address, device identifiers, browser type and version, operating system, approximate location derived from IP.
- Usage data: pages visited, time spent, navigation paths, clicks, events and referer URLs captured via Google Analytics 4 (GA4) or similar services.
We do not design our public website to collect financial information, Aadhaar numbers or other sensitive personal data. Please avoid submitting such information in free text fields; if we detect it in error, we will minimise or delete it where appropriate.
3. Why We Process Personal Data (Purposes)
We process personal data only for specified, explicit purposes. We use your personal data for the following:
- Responding to enquiries and providing information: To contact you after you submit a consultation or demo request. To understand your business context and propose our ERP solutions (iDine, iBeam, or related services).
- Pre-sales, onboarding and relationship management: To qualify prospects, schedule discussions and share proposals or documentation. To coordinate pilot projects, proof of concepts or discovery workshops. To maintain records of your interactions for continuity and quality.
- Website operations and security: To operate, secure and improve our website and online forms. To diagnose crashes, prevent fraud, and monitor platform performance.
- Analytics and product/marketing improvement: To understand how visitors find and use our website, which content is most useful, and where visitors drop off. To improve the structure, copy and UX of our pages and campaign assets.
- Legal and compliance: To comply with legal obligations (tax, accounting, corporate governance). To establish, exercise or defend legal claims and handle disputes.
- Marketing communications (where permitted): To send relevant updates, case studies, webinar invites and product information to business contacts who have opted in or where such communications are permissible under applicable law.
We do not use your data for unrelated purposes without updating this Notice and, where required, obtaining your consent.
4. Lawful Grounds / Legal Basis
We process personal data under one or more of the following lawful grounds:
- Consent: When you submit a form or opt in to communications, you consent to processing for the purposes described above. You may withdraw consent at any time.
- Performance of contract or pre-contractual steps: When we process your data to evaluate, negotiate or perform an ERP contract, subscription or project with your organisation.
- Compliance with law: Retaining or disclosing data where required under tax, corporate or other regulations.
- Legitimate uses / interests: Where permitted, we process data for legitimate uses such as security monitoring, analytics and service improvement, while respecting your rights and expectations.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to support essential functions and to measure usage.
- Strictly necessary cookies: These keep the site and forms functioning securely and reliably. You cannot opt out of these via cookie banners.
- Analytics cookies: We use tools such as GA4 to understand aggregated behaviour and improve content. Where feasible, we configure GA4 in a privacy aware manner (for example, IP anonymization, no ad personalisation).
We currently do not use third party advertising cookies or trackers on the corporate website.
You can manage cookies via your browser settings. If applicable law (e.g., EU rules) requires specific consent for analytics, we will provide a cookie banner allowing you to accept or reject non essential cookies.
6. Who We Share Personal Data With
We do not sell your personal data. We share it only with:
- Service providers (Data Processors): We use third party vendors to host and operate our website and tools, such as Hosting and CDN providers, Form processors (e.g., Formspree), Analytics providers (e.g., Google Analytics 4), Email or messaging platforms. These providers process data only to provide services to Innosolv and are bound by confidentiality and security obligations.
- Group entities: If we operate through affiliates or group companies, we may share data within the group for internal administration and business purposes, in line with this Notice.
- Legal / regulatory recipients: We may disclose data if required by law, regulation, legal process or governmental request, or to protect the rights, property or safety of Innosolv, our customers or others.
- Business transfers: In connection with merger, acquisition or restructuring transactions, personal data may be transferred as part of the transaction, subject to confidentiality and continuity of protection.
7. Cross Border Transfers
Our service providers may process personal data in India and in other countries where they operate infrastructure (such as the European Union or the United States).
Where personal data is transferred outside India, we will:
- Ensure that transfers comply with the DPDP Act and any government notifications on restricted countries; and
- Put in place appropriate contractual or technical safeguards to ensure a comparable level of protection.
8. How Long We Keep Personal Data
We retain personal data only as long as necessary for the purposes specified above, unless a longer retention period is required or permitted by law.
Indicative retention:
- Lead and enquiry data: retained during active discussions and for a reasonable period afterwards to manage follow ups and disputes.
- Customer relationship and contract data: retained for the duration of the relationship and for the statutory limitation period for legal claims.
- Billing and statutory records: retained for periods required under tax and company law rules.
- Website logs and security records: retained for a limited period (for example, 90–180 days) unless needed longer for investigations.
Once the relevant retention period ends, we will delete or irreversibly anonymise data in our systems and instruct our processors to do the same, subject to technical and backup constraints.
9. Your Rights Under the DPDP Act
As a Data Principal, you have rights regarding your personal data, subject to conditions in the DPDP Act.
- Right to access: You can request a summary of the personal data we process about you.
- Right to correction: You can request correction or completion of inaccurate or incomplete personal data.
- Right to erasure: You can ask us to delete your personal data when the purpose for processing has been fulfilled, you have withdrawn consent, or as otherwise permitted by law. We may retain data where law requires it.
- Right to withdraw consent: Where processing is based on consent, you can withdraw consent at any time. Withdrawal is as easy as giving consent and does not affect processing already carried out.
- Right to grievance redressal: You can raise complaints with our Grievance Officer.
- Right to nominate: Once enforced, you may nominate another individual to exercise these rights on your behalf in case of death or incapacity.
To exercise your rights, contact us using the details in Section 10. We may need to verify your identity before acting. We aim to respond within legally prescribed timelines and, in any case, within a reasonable period.
10. Grievance Redressal and Contact
If you have questions or concerns, or wish to exercise your rights, please contact:
Grievance Officer
Name / Role: Pradeep S / Co-Founder & Director
Email: privacy@innosolv.in
Address: Innosolv Consultancy Services Private Limited, XXV/1254, Pazhayannadakkavu, Thrissur, Kerala – 680 001.
We will review and respond to grievances within the timelines set by law and our internal policies. If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India once its individual complaint mechanism is fully operational, in accordance with the DPDP Act.
11. Updates to This Notice
We may update this Notice from time to time to reflect changes in law, technology or our services.
When we do so:
- We will update the "Effective Date" and "Last Updated" dates at the top.
- For material changes, we will provide a prominent notice on our website or via email where appropriate.
Your continued use of our website after an updated Notice becomes effective indicates your understanding of the changes.
