01Who this policy covers
This policy explains the handling of personal information associated with this Ohmsakthi Techno website, business enquiries, and related communications. It covers IT consulting, outsourcing, Zoho, ServiceNow, cloud, automation, and integration enquiries. It does not replace a signed client agreement, confidentiality agreement, or data processing agreement.
For website enquiries, Ohmsakthi Techno determines the purpose of its own communications. When processing client-controlled data during a project, the applicable client instructions and written contract determine our role and responsibilities. A client’s own privacy notice may govern information in its systems.
02Information and purposes
When you contact us, we receive the information you choose to send: your name, work email, telephone number, organization, role, location, project requirements, and message or attachments. We use it to answer your enquiry, assess requirements, prepare proposals, arrange discussions, and manage a business relationship.
Website delivery and security providers may process technical information such as IP address, browser and device details, requested pages, timestamps, and error or security events to serve the site and protect infrastructure. We do not operate an account registration, payment, or file-upload form on this website.
Please do not send passwords, access tokens, Aadhaar or other identity documents, financial credentials, health records, production databases, or unrelated personal data through ordinary enquiry channels. Where a project requires protected information, agree an appropriate transfer method and purpose first.
03Consent and your choices
Enquiry information is used for the purpose of your enquiry and necessary follow-up, subject to applicable law. Merely browsing this site does not provide consent for unrelated promotional messaging. Any optional marketing use must have an appropriate legal basis and a way to opt out.
You can decline to provide optional information, ask us to stop optional communications, or withdraw consent for consent-based processing by emailing us. This may prevent us from completing an enquiry or providing a requested service. Withdrawal does not invalidate earlier lawful processing or override mandatory retention.
06Retention and deletion
Enquiry and business records should be retained only for the purpose for which they are needed, including a continuing relationship, contractual requirements, statutory records, or legitimate dispute handling. There is no single retention period for every category of information. Records no longer needed should be deleted or anonymized, subject to legal holds and applicable backup cycles.
Mandatory security records may need longer retention. A deletion request does not require removal of records that applicable law obliges an organization to preserve. Client data return, deletion, and backup treatment should be set out in the engagement agreement.
07Security and incident reporting
Security arrangements depend on the information, systems, and responsibilities involved. Access restrictions, secure transfer, system maintenance, monitoring, and confidentiality requirements for client environments must be agreed and implemented for the engagement. This notice is not an assertion of a completed security audit, ISO certification, or a guarantee against compromise.
Where CERT-In’s directions apply, covered organizations must report specified incidents within six hours of noticing them or being informed, preserve ICT logs securely for a rolling 180 days within Indian jurisdiction, synchronize system clocks as directed, and designate a CERT-In point of contact. These statutory duties are distinct from customer notices and contractual incident obligations.
For a suspected issue affecting this site or a project, email info [at] ohmsakthitechno.com with subject “Security incident”. Give the affected URL, observation time and timezone, and a minimal description. Do not include credentials or unnecessary personal data. This mailbox is not a guaranteed continuously monitored emergency channel; statutory reporting deadlines remain the responsibility of the legally obligated entity.
08Requests, corrections and grievances
You may contact us to seek information about your enquiry data, request correction, ask for deletion where permitted, withdraw consent, or raise a privacy concern. Reasonable identity checks may be needed; provide only the minimum information necessary to identify the records. For data controlled by a client, contact that client first; we will assist within our contractual and legal role.
Where the SPDI Rules apply, grievances must be addressed expeditiously and within one month of receipt. Any DPDP-specific rights, grievance procedures, and escalation routes apply according to their commencement and scope. Nothing in this policy restricts a right or remedy available under applicable law.
Ohmsakthi Techno — Privacy & grievance enquiries, Management
Flat No. 3C, 3rd Floor, Mandira Apartment, North Boag Road, T. Nagar, Chennai – 600 017, Tamil Nadu, India.
Email: info [at] ohmsakthitechno.com · Phone: +91 7550 211 134.
09Children and sensitive information
This is a business-services website and is not directed to children. Do not submit a child’s personal information through enquiry links. If you believe such information has been provided, contact us so that appropriate action can be considered. Any necessary processing in a client project must follow the applicable rules, including guardian consent requirements when relevant and in force.
10Indian framework and policy updates
This policy is framed with reference to the Information Technology Act, 2000, the SPDI Rules, 2011 where applicable, and CERT-In’s directions. The DPDP Act, 2023 and DPDP Rules, 2025 have phased commencement. As of this policy date, not all substantive DPDP duties are operative; later provisions are not presented here as already enforceable. The applicable law and notified commencement dates prevail.
This policy may be updated as the website, services, vendors, or law change. New purposes requiring consent will not be authorized merely by changing this page. This notice does not establish compliance in the absence of appropriate operational measures.