How website information is handled.

KALP CODE PRIVATE LIMITED (“Kalp Code”, “we”, “us”, or “our”) is responsible for the personal data described in this policy when it determines why and how that data is processed.

This policy covers visitors to this website and people who contact us about products, services, partnerships, support, or employment-related matters through website-provided channels. It does not automatically govern a customer’s own data processed inside a separately contracted product or implementation.

• Enquiry and identity information: name, company name, work email, phone or WhatsApp number, industry, preferred contact method, requested services, and the business challenge or message you choose to provide.
• Business communications: correspondence, meeting notes, requirements, attachments, feedback, and records of follow-up communications.
• Technical and delivery information: when you submit a website enquiry, standard request headers may provide the IP address, browser or device information, language, referrer, and submission timestamp. We use this limited context for secure email delivery, abuse prevention, and diagnostics—not for invasive device fingerprinting or marketing profiling.
• Information from third parties: information provided by an authorised representative, referral partner, or business contact where they have a lawful basis to share it with us.

Please do not submit passwords, financial credentials, government identification documents, confidential production data, or sensitive personal data through a general website enquiry unless we have specifically requested it through an approved secure channel.

• Respond to enquiries, understand requirements, arrange discussions, prepare proposals, and communicate about relevant products or services.
• Operate, secure, troubleshoot, maintain, and improve the website and related business processes.
• Maintain appropriate business records, prevent misuse, protect rights and systems, and meet contractual or legal obligations.
• Send requested information or, where permitted and appropriate, business updates. You can ask us to stop non-essential communications.

We process personal data for specified and lawful purposes, including steps requested before entering into an agreement, performance of an agreement, compliance with law, legitimate business uses recognised by applicable law, and consent where consent is required. Where processing relies on consent, consent may be withdrawn through the contact route described below; withdrawal does not affect earlier lawful processing.

The enquiry form sends the information you enter to the Kalp Code business mailbox and records limited request context needed for security, routing, abuse prevention, and reliable delivery. The website may also use essential technologies required for those functions.

When bot protection is enabled, the enquiry form uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. Cloudflare may process limited browser, device, network, and challenge information for this security purpose. Turnstile is not used by Kalp Code for advertising profiling.

We do not use non-essential analytics, advertising pixels, or chat widgets unless they are disclosed in this policy and, where required, presented with an appropriate choice before activation.

We do not sell personal data. We may share only what is reasonably necessary with:

• authorised Kalp Code personnel and professional advisers who need the information for their work;
• approved hosting, communication, security, analytics, CRM, support, or other service providers acting under appropriate instructions and obligations;
• government, regulatory, judicial, law-enforcement, or other authorised bodies where disclosure is required or permitted by law;
• a successor or relevant participant in a proposed merger, reorganisation, financing, asset transfer, or similar corporate transaction, subject to appropriate confidentiality and legal safeguards.

Some approved technology providers may process information outside India. Where this occurs, we will take measures appropriate to the nature of the processing and applicable law, and will observe any restriction notified by the Government of India. Project-specific international transfers may be addressed in the applicable agreement or data-processing addendum.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including enquiry follow-up, project discussions, support, security, dispute resolution, accounting, and legal compliance. The period varies according to the relationship, the type of record, legal requirements, and whether a claim or investigation is reasonably anticipated.

When information is no longer required, we will take reasonable steps to delete, anonymise, or securely archive it, subject to backup cycles, lawful retention duties, and the need to establish, exercise, or defend legal claims.

We use organisational and technical measures appropriate to the context and risk of the processing. These may include access controls, role-based permissions, secure configuration, logging, backups, staff obligations, and incident-response procedures where relevant to the system concerned.

No internet transmission, device, or storage system is completely secure. We therefore cannot guarantee absolute security, and you should use appropriate care when deciding what to send through a website channel.

Subject to applicable law and verification of your request, you may ask for information about the processing of your personal data, seek correction or updating, request erasure where retention is no longer required, withdraw consent, nominate another individual where the law provides, or raise a grievance.

We may need enough information to verify identity, authority, and the scope of a request. A request may be limited or refused where an exception applies, another person’s rights would be affected, or retention is legally required. You may also use any escalation or complaint mechanism made available by applicable law.

This website and our business software services are intended for organisations and business users, not children. We do not knowingly invite children to provide personal data through the website. If you believe a child has submitted personal data, please contact us so that the circumstances can be reviewed and appropriate action taken.

The website may link to external websites or services. Their privacy practices are controlled by their respective operators, and this policy does not apply to them. Review the relevant third party’s privacy information before providing data.

We may update this policy to reflect changes in the website, our processing, our service providers, or applicable law. The updated version will show a revised effective date. Material changes may also be highlighted through the website or another appropriate communication channel.

Questions, privacy requests, or grievances may be submitted through the Contact Us page, by email to contact@kalpcode.com, or in writing to the registered address shown in this document. Please mark the communication “Privacy Request” and provide enough detail for us to understand and respond to it.