Your information.
Handled responsibly.

This Privacy Policy applies to the website and business communications of Mahalaxmi Tech Solutions, a software development partnership firm based in Maharashtra, India.

This Policy is intended to describe our practices in accordance with applicable Indian data protection and information technology laws, including, to the extent applicable, the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

India has also enacted the Digital Personal Data Protection Act, 2023 and notified the Digital Personal Data Protection Rules, 2025. Those requirements are subject to the commencement timelines notified by the Government of India. We intend to review and update this Policy and our practices as additional provisions become applicable to us.

You may browse our website without directly providing personal information to us.

If you choose to contact Mahalaxmi Tech Solutions, including through email or a project enquiry, we may receive information such as:

• Your name
• Your business or organisation name
• Your email address
• Information about your project, software requirement or business workflow
• Information contained in documents or messages that you voluntarily send to us

Our website hosting and security infrastructure may also generate technical information such as IP address, browser type, device information, request timestamps, server logs and similar diagnostic information.

Our general corporate website does not require you to submit sensitive personal data or information for ordinary browsing or project enquiries.

Please do not send passwords, banking credentials, payment card information, medical or health information, biometric information or other highly sensitive information through a general enquiry email unless we have specifically requested it for a lawful and necessary purpose and an appropriate secure method has been agreed.

Where sensitive personal data or information is specifically required and the SPDI Rules apply, we will seek appropriate consent and use such information only for the stated lawful purpose.

Personal information may be used only for legitimate business purposes connected with our operations and the reason you contacted us.

These purposes may include:

• Responding to your enquiry
• Understanding your software or business requirement
• Preparing proposals, quotations or project discussions
• Communicating regarding an existing or proposed project
• Providing and supporting our software development services
• Maintaining appropriate business and communication records
• Operating, maintaining and securing our website and systems
• Complying with applicable legal obligations

We do not intend to use your information for a purpose that is unrelated to the reason it was collected without an appropriate legal basis, consent or further notice where required.

When you voluntarily send us an email or project enquiry, you provide the information necessary for us to receive and respond to that communication.

Where applicable law requires specific consent, including for collection or use of sensitive personal data or information, we will seek such consent before processing the information for that purpose.

You may choose not to provide information that is optional. If certain information is necessary to respond to or perform a requested service, we may be unable to proceed without that information.

You may contact us if information provided by you is inaccurate or requires correction. Where legally applicable, you may also request withdrawal of consent for future processing, subject to legal, contractual and operational requirements.

Mahalaxmi Tech Solutions does not sell or rent personal information to advertisers or data brokers.

We may share limited information with trusted service providers where reasonably necessary to operate our business. These providers may include:

• Website hosting or cloud infrastructure providers
• Email and communication service providers
• Technical or security service providers
• Professional advisers where legitimately required

Such providers are expected to process information only for the relevant service and subject to appropriate confidentiality, contractual or legal safeguards where applicable.

Information may also be disclosed where required by law, court order, lawful government request or where reasonably necessary for the prevention, investigation or handling of unlawful activity or security incidents.

Where sensitive personal data is transferred to another entity or jurisdiction and the SPDI Rules apply, such transfers will be handled in accordance with applicable transfer requirements.

We intend to retain personal information only for as long as it is reasonably required for the purpose for which it was collected or as otherwise permitted or required by applicable law.

The actual retention period may depend on the nature of the communication or project, contractual requirements, accounting or business records, dispute resolution, security requirements and legal obligations.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it in accordance with our applicable processes and legal obligations.

We take reasonable technical and organisational measures appropriate to the nature of the information we handle and our business operations.

Depending on the system and information involved, such measures may include:

• Restricting access to information to authorised persons
• Appropriate account and credential controls
• Secure hosting and system configuration
• Software and security updates
• Reasonable backup and recovery practices where applicable
• Confidentiality obligations for persons who handle information

No method of internet transmission or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security of information transmitted online.

Our hosting or technical infrastructure may process basic server logs and other information necessary to deliver, maintain and secure the website.

The website may use strictly necessary browser storage, cookies or similar technologies where required for website functionality or security.

We do not intend to use personal information for behavioural advertising without appropriate disclosure and any consent required by applicable law.

If we introduce material analytics, advertising or additional tracking technologies in the future, this Policy and any required cookie or consent controls will be updated accordingly.

This website and our software development services are primarily intended for businesses, organisations, founders and professionals.

We do not intentionally seek personal information from children through our general business enquiry channels.

If you believe that a child has submitted personal information to us through the website or a business enquiry without appropriate authorisation, please contact us so that we can review and, where appropriate, delete or otherwise address the information.

We may update this Privacy Policy when our website, business processes, technologies, service providers or applicable legal requirements change.

The latest version will be published on this page. Where appropriate, we will also update the effective or last updated date shown above.

We encourage users who interact with us regularly to review this Policy periodically.