Privacy policy
This policy explains how Kreya IT Consulting Pvt Ltd ("Kreya", "we", "us") collects, uses and protects personal data when you use kreyaconsulting.com, contact us, or use a licence for Kreya software. We act as the data fiduciary for this data under the Digital Personal Data Protection Act, 2023.
We follow the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and its rules as they come into force.
Summary
- We collect only what you send us and what we need to run this website and our licences.
- We use it to reply to you, to provide what you ask for, and to keep our systems secure.
- We do not sell your data, use advertising trackers or build marketing profiles.
- You can ask to see, correct or erase your data, or withdraw consent, at any time.
What we collect
When you send an enquiry (contact, consulting, product demo, corporate or individual training): your name, company, email address, phone number, city, the service, product or programme you are interested in, and anything you choose to tell us, such as your Salesforce experience, team size, preferred schedule or message. We also record your consent, the page you sent it from and the date and time.
When you message or email us: your WhatsApp number or email address and what you write. WhatsApp and your email provider also handle these messages under their own policies.
For security: a one-way hash of your IP address (not the address itself), used to block spam and repeated submissions. Our hosting provider's servers may also keep standard access logs, such as IP address, browser type and the page requested, for security and troubleshooting.
For customers of Kreya software: the details on your licence (licence holder's name, mobile number and address, the product and licence dates). When the software is activated or checks its licence, it sends us the licence key, an identifier for the computer or website it runs on (for Windows, a one-way hash of the device identifier, not the hardware serial number), the computer name, application name and version, and operating system. We use these only to activate the licence, stop a key being reused on another device, and support you.
Data inside your copy of Kreya software: if your business stores its own customers' or patients' data in Kreya software, your business decides how that data is used. Kreya handles it only as needed to provide and support the software, under the agreement with your business.
We do not ask for passwords, bank or card details, Aadhaar numbers or health information through this website. Please do not send them in a form or message.
Why we use it
| Purpose | Basis |
|---|---|
| Replying to your enquiry, preparing a proposal, demo or training plan | Your consent, given when you submit the form or contact us |
| Delivering consulting, training or software you have agreed to buy | Your consent and our agreement with you |
| Issuing licences, activating software and preventing a licence key being reused | Our agreement with you, and our legitimate need to protect our software |
| Keeping the website and our systems secure, and preventing spam and abuse | Legitimate uses permitted by law |
| Keeping records required by tax and company law | Legal obligation |
We do not use your data for automated decisions that affect you, and we send marketing only if you have asked for it.
Who can see it
- Kreya staff who need it to respond to you, through a password-protected admin system with role-based access and an audit log.
- Service providers who help us run the website, such as our hosting and email delivery providers. They may use the data only to provide their service to us.
- WhatsApp, YouTube and your email provider, only when you choose to use them.
- Authorities, where Indian law requires us to share it.
- A buyer or successor, if Kreya's business is reorganised or sold, under the same protections.
We do not sell or rent personal data.
Transfers outside India
Some service providers, such as email, WhatsApp and YouTube, may process data outside India. We allow this only as permitted by Indian law, and not to any country the Government of India has restricted.
How long we keep it
- Enquiries: while we are in discussion with you, and normally for no more than three years after our last contact, unless you ask us to delete them sooner.
- Customer and licence records: for the licence term and afterwards for as long as tax, accounting and company law requires.
- Security records: only as long as needed to protect the website.
After that we delete or anonymise the data.
How we protect it
The website uses HTTPS. Admin accounts use hashed passwords, sign-in limits and role-based permissions, and changes are recorded in an audit log. Form submissions are rate-limited. Licence API keys are stored encrypted and licence checks use signed tokens. No system is perfectly secure; if a personal data breach occurs, we will inform affected people and the authorities as the law requires.
Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it, where we no longer need it or you withdraw consent;
- stop using it, by withdrawing your consent. This does not affect anything we did before you withdrew it.
You can also nominate another person to exercise these rights for you if you die or become unable to. To use any of these rights, email Amul@kreyaconsulting.com. We may need to confirm your identity first, and we will reply as soon as we can and within the time the law allows.
If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Children
This website and our services are for adults and businesses. We do not knowingly collect data from anyone under 18. A parent or guardian should contact us on behalf of a learner under 18.
Cookies
This website uses only the essential cookies and browser storage described in our cookie policy. We do not use advertising or analytics cookies.
Links to other websites
Links to WhatsApp, YouTube, Salesforce and other sites take you to services we do not control. Their own privacy policies apply.
Changes
We will update this policy when our practices or the law change, and show the date of the latest version at the top of this page.
Grievance Officer and contact
For questions, requests or complaints about personal data:
Grievance Officer: Amul Barnwal, Kreya IT Consulting Pvt Ltd, Noida, Uttar Pradesh, India Email: Amul@kreyaconsulting.com · WhatsApp: +91 95823 88885
We acknowledge complaints promptly and aim to resolve them within 30 days.