Legal

Privacy Policy

How North Star Technologies collects, uses, stores and protects your personal data.

Effective date: 21 August 2026  ·  Last updated: 21 August 2026

This Privacy Policy is published in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 read with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable to North Star Technologies as a Data Fiduciary under Indian law.

1. Who We Are

This website northstartechnologies.net is owned and operated by North Star Technologies ("North Star", "we", "us", "our"), an ISO 9001:2015 certified technology solutions company with its registered office at 4-157/GF-1, Gayatri Nivas, Kottevari Street, Ramavarappadu, Vijayawada – 521108, Andhra Pradesh, India.

For the purposes of the DPDP Act, North Star Technologies is the Data Fiduciary in respect of the personal data it collects through this website.

2. Personal Data We Collect

We collect personal data only when you choose to share it with us — primarily when you submit an enquiry through our contact form. This includes:

  • Your full name
  • Company or organization name (optional)
  • Business email address
  • Phone number (optional)
  • The service you are enquiring about
  • The message or project details you provide

We do not knowingly collect financial information, government identity numbers, biometric data, or other sensitive personal data through this website. Please do not include such information in your enquiry message.

Our website itself does not use tracking cookies or analytics scripts at this time. If this changes — for example, if we add website analytics — this Policy will be updated in advance and, where required, your consent will be sought.

3. How and Why We Use Your Data

We use the personal data you provide solely to:

  • Respond to your enquiry and communicate with you about it
  • Prepare quotations, proposals or consultations you have requested
  • Maintain records of business communications and, where a project proceeds, deliver contracted services
  • Comply with applicable legal, accounting or regulatory obligations

We do not use the information you submit for automated decision-making that produces legal or similarly significant effects concerning you.

We process your personal data on the basis of the consent you provide when you tick the consent checkbox and submit our contact form. Consent is free, specific, informed and given through a clear affirmative action, in line with Section 6 of the DPDP Act.

You may withdraw your consent at any time by writing to us at the contact details in Section 15 below. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to respond to a pending enquiry.

5. Sharing With Third Parties

We do not sell or rent your personal data. Submissions made through our contact form are transmitted to and stored in a Google Sheet via Google Apps Script, which we use as a data processor to manage enquiries internally. Google processes this data on our behalf under its own security and data-processing terms.

We may also share personal data where required by law, in response to a valid legal request from a government or regulatory authority, or with professional advisors (such as accountants or legal counsel) strictly on a need-to-know basis.

We do not knowingly transfer personal data outside India except to the extent that our service providers (such as Google) process data on infrastructure located outside India, in which case such transfers are subject to that provider's own compliance safeguards.

6. Data Retention

We retain enquiry data for as long as necessary to respond to your enquiry, pursue any resulting business relationship, and meet our accounting, tax or legal record-keeping obligations under Indian law — after which it is deleted or anonymized, unless you request earlier deletion under Section 9 below.

7. Cookies and Website Analytics

This website loads fonts from Google Fonts, which may cause your browser to make a request to Google's servers and share your IP address as part of that request. We do not currently set first-party tracking or advertising cookies, and we do not run analytics scripts. If that changes, we will update this section and, where legally required, present a cookie consent notice.

8. How We Protect Your Data

We follow reasonable security practices and procedures, as required under Section 43A of the Information Technology Act, 2000 and the DPDP Act, including restricting access to enquiry data to authorized personnel, using secure (HTTPS) transmission for this website, and relying on reputable third-party infrastructure (Google) for form storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to affect you, we will take reasonable steps to notify you and the Data Protection Board of India as required under the DPDP Rules, 2025.

9. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the right to:

  • Access a summary of the personal data we hold about you and the processing activities we carry out
  • Correct or update inaccurate or incomplete personal data
  • Erase personal data that is no longer necessary for the purpose it was collected, unless we are required to retain it by law
  • Withdraw consent at any time (see Section 4)
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
  • Grievance redressal, as set out in Section 11 below

To exercise any of these rights, write to us using the contact details in Section 15. We will respond within a reasonable time and in any event within the timelines prescribed under the DPDP Rules, 2025.

10. Children's Data

Our website and services are directed at businesses, government bodies and other organizations, and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, we have designated a Grievance Officer to address any questions, concerns or complaints regarding this Policy or our handling of your personal data:

Grievance Officer
North Star Technologies
4-157/GF-1, Gayatri Nivas, Kottevari Street, Ramavarappadu, Vijayawada – 521108, Andhra Pradesh, India
Email: info@northstartechnologies.net
Phone: +91 94406 55527

We will acknowledge and address grievances within the timelines prescribed under applicable Indian law.

12. Complaints to the Data Protection Board of India

If you are not satisfied with our response to your grievance, you have the right to file a complaint with the Data Protection Board of India, the regulatory authority constituted under the DPDP Act, 2023.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law, including as the DPDP Rules, 2025 come into full effect. Material changes will be reflected by an updated "Last updated" date at the top of this page.

14. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India. Subject to applicable law, any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Vijayawada, Andhra Pradesh.

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

North Star Technologies
4-157/GF-1, Gayatri Nivas, Kottevari Street, Ramavarappadu, Vijayawada – 521108, Andhra Pradesh, India
Email: info@northstartechnologies.net
Phone: +91 94406 55527