💻 Sai Tek Services – Comprehensive Privacy Policy
Â
Effective Date: [May 2, 2024]
Sai Tek Services (“we,” “us,” or “the Company”) is committed to protecting the privacy and security of the data entrusted to us by our clients, users of our software, and recipients of our IT services. This Privacy Policy details the types of data we collect, how it is processed, protected, and your rights concerning your personal information in compliance with relevant data protection laws.
Â
1. Scope and Application
Â
This policy applies to all services offered by Sai Tek Services, including IT consulting, custom software development, managed IT services, cloud services, support, and professional training (“Services”).
Â
2. Information Collection and Categories
Â
We collect and process various categories of information based on your interaction with our Services:
| Category of Data | Examples of Data Collected | Purpose of Collection |
| Identification & Contact Data (PII) | Name, job title, company name, business address, professional email, and phone number. | Account setup, service contracts, billing, and communication. |
| Client Data (Processed Data) | Data processed by our systems on behalf of clients (e.g., client customer records, proprietary files, application logs). | Processed solely as a data processor based on the client’s instructions and contractual requirements. |
| Technical & Usage Data | IP addresses, device identifiers, system configurations, usage patterns, application logs, and diagnostic data. | Service delivery, system optimization, security analysis, and troubleshooting. |
| Financial & Billing Data | Payment card details (tokenized), bank account information, invoice history, and tax information. | Processing payments for services, subscription management, and financial reconciliation. |
| Support & Feedback Data | Content of support tickets, communication transcripts, and survey responses related to the Services. | Customer service, quality assurance, and service improvement. |
Â
3. Legal Basis for Processing
Â
We process your data based on the following legal grounds:
-
Contractual Necessity: Processing is necessary for the performance of a service contract (e.g., providing IT support, fulfilling a development project).
-
Legitimate Interests: Processing is necessary for our legitimate interests (e.g., maintaining the security and integrity of our client systems, preventing fraud, and conducting business analysis), provided your fundamental rights do not override these interests.
-
Consent: We rely on consent for specific processing activities, such as non-essential marketing communication, where required by law.
-
Legal Obligation: Processing is necessary to comply with legal or regulatory obligations (e.g., financial reporting, law enforcement requests).
Â
4. Data Security, Confidentiality, and Integrity
Â
-
Data Processor Role: When handling Client Data, we act as a data processor and adhere strictly to the client’s instructions as outlined in the Service Agreement or Data Processing Addendum (DPA).
-
Technical Security: We employ robust security measures, including multi-layer encryption, access controls, network security monitoring, and regular security audits to protect data.
-
Confidentiality: Access to Client Data and sensitive system information is strictly restricted to authorized employees on a need-to-know basis, subject to comprehensive confidentiality and non-disclosure agreements.
-
Incident Response: We maintain a formal incident response plan to address security breaches promptly and notify affected parties as required by law.
Â
5. Data Sharing and Disclosure
Â
We may share your data under the following circumstances:
-
Sub-processors and Vendors: With trusted cloud hosting providers, software vendors (e.g., for necessary licenses), payment processors, and sub-contractors who assist us in providing the core Services. These entities are contractually required to uphold equivalent security and privacy standards.
-
Client’s Instructions: Client Data is shared only with parties explicitly directed by the client or as necessary to integrate with client-requested third-party systems.
-
Legal Compliance: When mandated by a valid court order, subpoena, or applicable regulatory requirement, we may disclose information after providing reasonable notice to the affected client, where legally permissible.
-
Corporate Transactions: In connection with a merger, acquisition, or sale of assets, subject to confidentiality agreements.
Â
6. Your Data Rights
Â
Depending on the jurisdiction, you may have the following rights concerning your personal data:
-
Right to Access & Portability: To request confirmation of data processing and obtain a copy of your personal data in a portable format.
-
Right to Rectification: To correct inaccurate or incomplete data.
-
Right to Erasure (‘Right to be Forgotten’): To request deletion of your personal data, subject to legal and contractual retention obligations.
-
Right to Object & Restriction: To object to processing based on legitimate interests or to request restriction of processing.
Â
7. 📢 Notification and Communication Consent
Â
By accepting this policy, you acknowledge and consent to receive notifications and promotional communications from us through various channels, including but not limited to email, mobile push notifications, SMS, RCS (Rich Communication Services), WhatsApp, or any other digital communication platforms.
If you prefer not to receive such updates or marketing communications, you may opt out by contacting us at info@saitekservices.shop.