Privacy Policy

Who we are

WooExperts Development ("WooExperts", "we", "us", "our") runs this website. We provide the website, web application, mobile app, design, security, hosting and support services described on it. Our address is Jaipur, India – PIN 302001.

We are the "Data Fiduciary" for the personal data in this policy under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). We are also a "body corporate" under the Information Technology Act, 2000 ("IT Act"). The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") apply to us too.

This policy follows those laws and the rules made under them. That includes the Digital Personal Data Protection Rules, 2025, as they come into force. You can contact us about privacy at any time at contact@wooexperts.com.

Personal data we collect

We only collect the personal data we need. Depending on how you deal with us, this may include:

• Enquiry details from our contact form: name, email address, company, service, budget range and project details.
• Correspondence when you email us, including the content of those messages.
• Client information needed to deliver a project. This includes team contact details, billing and GST details, and account access you choose to share.
• Technical information recorded when you visit our website: IP address, browser, device, pages visited and time of visit. This comes from server logs and, if you agree, analytics tools.

We do not collect payment card or bank account details through this website. We also do not ask for sensitive personal data or information, such as passwords or financial details, unless a project needs it. An example is access credentials for a site we maintain. In that case we ask for your consent first. We use the data only for that project and protect it as described below.

How we use your personal data

• To respond to your enquiry and discuss your project.
• To prepare proposals, quotes and agreements.
• To deliver, support and maintain the services we have agreed to provide.
• To raise invoices, manage payments and meet GST, income-tax and other accounting obligations.
• To keep our website and systems secure and working properly, and to detect and report cyber security incidents.
• To understand how our website is used so we can improve it (only with your consent).
• To comply with the law, including court orders and lawful requests from government authorities.

We use your personal data only for the reason you gave it to us, or as the law allows. We do not sell or rent personal data. We do not send marketing emails unless you ask for them.

Consent and lawful use

We process personal data in the following ways:

• With your consent. Consent must be free, specific, informed and unambiguous. A clear action, such as submitting our contact form after reading this policy, gives it. You can withdraw consent at any time by emailing us. Withdrawal does not affect processing already done. We may then be unable to continue a service that depends on that data.
• For legitimate uses recognised by law. For example, you give us your details for a stated purpose, such as an enquiry, and do not object. We may also need to comply with a law or a court order.
• For sensitive personal data or information as defined in the SPDI Rules. We act only after we have your written consent. This includes consent by email or through an online form.

We give you a clear notice in plain language, at or before the point we ask for your data. It explains what we collect and why.

Cookies and analytics

This website uses a few essential cookies that it needs to work. At the time of writing it uses no analytics, advertising or other non-essential cookies. If we add any, we will ask for your consent first and update this policy.

You can block or delete cookies in your browser settings. Some parts of the site may not work properly if you block essential cookies.

Who we share personal data with

We share personal data only where necessary, with:

• Service providers (our "Data Processors") for hosting, email, file storage, project management and accounting.
• Professional advisers such as chartered accountants, lawyers and insurers.
• Government agencies, courts and regulators where the law requires or authorises us to disclose it.

Our service providers act only on our instructions. A written contract requires them to keep your personal data secure and confidential.

Transfers outside India

Some of our service providers may store or process personal data outside India. The DPDP Act allows this, except to countries the Central Government has restricted by notification. We will not transfer personal data to any restricted country. Where the SPDI Rules apply, we send sensitive personal data only to a party that gives the same protection. We do this only where it is necessary to perform a lawful contract with you, or you have consented.

How long we keep personal data

• Enquiries that do not lead to a project: erased once the purpose is served, and no later than 24 months after our last contact.
• Client and project records: kept for the length of our working relationship, then for as long as the law requires. This is typically six to eight years for accounting, GST and income-tax records.
• Website and server logs: kept for at least 180 days within India, as the CERT-In Directions of 28 April 2022 require. We keep them longer only to investigate a security incident.

When we no longer need the data for its purpose or for a legal reason, we erase it or make it anonymous. You can ask us to erase your data sooner (see "Your rights").

How we protect personal data

We use reasonable security safeguards, as the DPDP Act and the SPDI Rules require. They protect personal data against unauthorised access, loss and misuse. The safeguards include encrypted connections, two-factor authentication, restricted access on a need-to-know basis, activity logging, regular updates and backups.

No system is completely secure. If a personal data breach occurs, we will tell the people affected and the Data Protection Board of India, as the law requires. We also report cyber security incidents to CERT-In within the time it requires.

Your rights

As a "Data Principal" under the DPDP Act, and under the SPDI Rules, you have the right to:

• Ask what personal data we hold about you, how we use it, and who we share it with.
• Ask us to correct inaccurate or misleading data, complete incomplete data, or update it.
• Ask us to erase your personal data, unless we must keep it by law.
• Withdraw your consent at any time.
• Have your grievance handled (see "Grievance redressal").
• Nominate another person to exercise these rights for you if you die or become unable to do so.

To make a request, email contact@wooexperts.com from the address you used with us, so we can check it is you. We will respond within 30 days, or sooner if the law requires. The DPDP Act also asks you to give accurate information and not to make false or frivolous complaints.

Children

We built our website and services for businesses and for people aged 18 or over. We do not knowingly collect personal data from anyone under 18 without verifiable parental or guardian consent. If you think a child has given us personal data, email us and we will erase it.

Data we handle for clients

Sometimes we build, host or maintain a website or app for a client. We may then process personal data about the client’s own customers or users.

In that case the client is the Data Fiduciary. We act as a Data Processor and follow their instructions under a written agreement. The client must give its own notices and get its own consents. Please send questions about that data to the relevant client.

Grievance redressal

To complain about how we handle your personal data, email our Grievance Officer at contact@wooexperts.com. Put "Grievance" in the subject line. You can also write to the Grievance Officer, WooExperts Development, Jaipur, India – PIN 302001. We will acknowledge your complaint within two working days. We aim to resolve it within 30 days, and in any case within the time the law allows.

If you are not satisfied with our response, you may complain to the Data Protection Board of India. You can do this once the relevant provisions of the DPDP Act are in force. Please give us the chance to resolve it first.

Changes to this policy

We may update this policy from time to time, for example when the law or our practices change. You will always find the latest version on this page, with its last-updated date at the top.

Contact us

For any question about this policy or your personal data, email contact@wooexperts.com or use the form on our Contact page. You can also write to us at WooExperts Development, Jaipur, India – PIN 302001.