XenTegra India (“we”) is the Data Fiduciary for personal data collected through xentegra.in. We collect only what we need to answer you, we never sell it, and we process it only with your consent.
1. Categories of personal data, purposes and retention
For each purpose, the categories of personal data we collect and how long we keep them:
- Purpose: answering your enquiry (contact form, email, phone or WhatsApp). Categories: name, work email, phone number (optional), company (optional), topic, message and the page you submitted from. Retention: up to 24 months after our last contact with you. WhatsApp messages are also subject to Meta's privacy policy.
- Purpose: assessing a partner application (homepage form). Categories: first and last name, company, work email, phone number (optional), city and primary focus. Retention: up to 24 months after our last contact with you.
- Purpose: handling a data rights request or grievance. Categories: the details you give us in the request. Retention: up to 24 months after the request is closed, as a record that we handled it.
- Purpose: counting visits (only if you accept cookies). Categories: anonymous page views through Vercel Web Analytics, which uses no cookies and builds no profile of you. Retention: kept only as aggregate statistics.
- Purpose: remembering your choices. Categories: your cookie choice and language preference, stored in your own browser. Retention: until you clear your browser storage.
We do not use your data for automated decision-making, and we will not add you to marketing lists without asking separately.
2. Consent and how to withdraw it
We process your personal data on the basis of your consent (Section 6). You give it by submitting a form or by choosing “Accept all” in the cookie banner. You can withdraw it at any time, as easily as you gave it: use Cookie preferences in the footer for cookies, or our data rights request form for anything you have sent us. Withdrawal does not affect processing already carried out.
3. Retention period
Unless stated above, we keep enquiry and partner-application details for up to 24 months after our last contact with you, then delete them — sooner if you ask for erasure or withdraw consent, unless a law requires us to keep them longer.
4. Third parties we share it with
We share personal data only with service providers (processors) that run this site for us:
- Supabase — stores form submissions in a database that the website can write to but not read.
- Vercel — hosts the website and, with your consent, provides Web Analytics.
- Sanity and Mux — deliver the site's articles, images and video. They receive standard request data such as your IP address.
- Google (YouTube) — plays the homepage video, only after you accept cookies.
Our team may copy your enquiry into our internal CRM to respond to it. Some of these providers may process data outside India, including in the United States (Section 16). We never sell or rent your personal data.
5. Cookies and browser storage
- xen-consent (essential, browser storage) — remembers your cookie choice.
- xen-lang (essential, browser storage) — remembers whether you chose English or हिंदी.
- Vercel Web Analytics (only with consent) — counts visits without setting cookies.
- YouTube (only with consent) — Google may set cookies when the homepage video loads.
Nothing non-essential loads until you choose “Accept all”. Change your choice at any time from Cookie preferences in the footer of every page, or here:
6. Your rights
Under Sections 11–14 of the DPDP Act, 2023 you have:
- Right to access — a summary of the personal data we hold about you, how we process it, and who we have shared it with.
- Right to correction — have inaccurate or incomplete data corrected, completed or updated.
- Right to erasure — have your data deleted once it is no longer needed.
- Right to withdraw consent — at any time, as easily as you gave it.
- Right to grievance redressal — have a complaint handled by our Grievance Officer, and escalate it to the Data Protection Board of India if you are not satisfied.
- Right to nominate — appoint a nominee to exercise these rights for you in the event of your death or incapacity.
Make a request with our data rights request form or by emailing our Grievance Officer. We may ask you to verify your identity, and we respond within 30 days.
7. Grievance Officer
Name: Moin Khan
Designation: Grievance Officer, XenTegra India
Email: moin.khan@xentegra.com
Phone: 000 1800 050 3456
Address: Office No. 101 Centura Square, 430, Rd Number 27, Wagle Industrial Estate, Thane (West), Maharashtra 400604, India
Response time: within 30 days
We acknowledge grievances promptly and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
8. Children's data
This site is for businesses and professionals. It is not directed at children (anyone under 18) and we do not knowingly collect their personal data: our forms ask you to confirm you are 18 or older before you submit. If we ever need to process a child's personal data, we will first obtain verifiable consent from their parent or lawful guardian, as Section 9 requires. We never track children's behaviour or target them with advertising. If you believe a child has sent us information, contact our Grievance Officer and we will delete it.
9. Security and breaches
All traffic to this site is encrypted (HTTPS). Form submissions go to a database that only authorised staff can read. If a breach affects your personal data, we will inform you and the Data Protection Board as the DPDP Rules require.
10. Changes to this policy
We will update this page if our practices change and revise the date at the top.