Privacy Policy — how we protect your data.

Website: www.altntechnology.com  ·  Effective date: 3 November 2026

This Privacy Policy explains how Altn Technology (“we”, “us”, “our”) collects, uses, shares and protects personal data when you visit www.altntechnology.com, chat with us, contact us or use our services. It is written to comply with India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together “DPDP”), the Information Technology Act, 2000 and its rules, and, for visitors in the European Union, EEA and United Kingdom, the General Data Protection Regulation (“GDPR” / “UK GDPR”).

Under DPDP we are the Data Fiduciary, and under GDPR the controller, of the personal data described here.

1. Who we are and how to contact us

Altn Technology
Bajrang Market, Assand Road, Panipat, Haryana, India
Email: info@altntechnology.com · Phone/WhatsApp: +91 79880 20649

Grievance Officer / privacy contact: Mani, info@altntechnology.com (subject: “Privacy request”). We acknowledge requests promptly and respond within the time required by law — under DPDP no later than 90 days, and under GDPR within one month (extendable where the law allows).

2. Personal data we collect

a) Information you give us

• Contact and quote forms: name, company, email, phone, city and the details of your request.
• Live chat and chatbot: the name, mobile number, email address and description you share before being connected to our team, and the full content of your chat messages and any files you send.
• Service delivery: information needed to deliver IT services, such as user lists, device details and support tickets.
• Feedback: chat ratings and comments.

b) Information collected automatically when you visit

• IP address and the approximate location derived from it (country, state, city and internet provider). We do not collect precise GPS location.
• Device and browser data: device type, operating system, browser, screen size and language.
• How you reached us: the referring website or search engine, and campaign tags in the link (e.g. utm_source).
• Activity on our website: pages visited, the order of pages, time on each page, links clicked and whether you are a returning visitor.
• Session recordings and heatmaps (Microsoft Clarity): mouse movements, clicks and scrolling, with form fields masked.
• Cookies and similar technologies — see section 7.

We do not ask for or intentionally collect sensitive data such as passwords for other services, financial account or card numbers (payments are handled by our payment gateway), health information, or government ID numbers through the website or chat. Please do not share such data in chat.

3. Why we use your data and our legal basis

• To answer your enquiries, chat with you and provide quotes and support — DPDP: your consent and the legitimate use of data you voluntarily provide for that purpose; GDPR: steps at your request before a contract (Art. 6(1)(b)) and our legitimate interests (Art. 6(1)(f)).
• To deliver contracted IT services — DPDP: consent / legitimate use; GDPR: performance of a contract (Art. 6(1)(b)).
• To understand and improve our websites (analytics, session recordings) and to see when visitors are on the site so our team can offer help (live visitor notifications) — DPDP: consent, which you can withdraw at any time (section 7); GDPR: consent (Art. 6(1)(a)) where required for cookies, otherwise legitimate interests.
• To keep our systems secure and prevent fraud, spam and abuse — DPDP: legitimate use; GDPR: legitimate interests.
• To meet legal obligations such as GST, accounting, tax and lawful requests from authorities — DPDP: compliance with law; GDPR: legal obligation (Art. 6(1)(c)).
• To send service updates and, if you agree, offers — you can unsubscribe at any time.

We do not sell your personal data and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Live chat, visitor tracking and notifications

Our chat (powered by our self-hosted platform) and our website analytics run on our own servers. When you browse www.altntechnology.com, our team may receive a notification showing that a visitor is on the site, the approximate city and internet provider, the device and browser, how the visitor arrived and the pages viewed, so we can offer timely help. If you start a chat, your chat is linked to this browsing history so our team understands your request. Chat transcripts are emailed to you only if you ask for them.

5. Who we share data with

We share personal data only with service providers (Data Processors) who process it on our instructions under contract, and only as needed:

• Our hosting and server providers for websites, chat, analytics, email and client systems.
• Google (Google Analytics 4, Search Console, Site Kit) and Microsoft (Clarity) for analytics and website improvement.
• Payment gateways where you pay online — we do not store full card or bank details.
• Software vendors and licensors (e.g. Microsoft, firewall and backup vendors) when you buy their products through us.
• Email delivery providers for sending messages, transcripts and invoices.
• Professional advisers (accountants, auditors, lawyers) and authorities where required by law.

Some providers (for example Google and Microsoft) may process data outside India, including in the USA. We use them only where permitted under DPDP (transfers are allowed except to countries restricted by the Government of India) and, for EU/UK visitors, with appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Analytics data (Matomo raw visit logs): up to 13 months, then deleted or kept only as anonymised totals.
• Live visitor notifications with no chat: up to 90 days.
• Chat conversations and enquiries: up to 3 years after your last interaction, so we can follow up and handle disputes, unless you ask us to delete them sooner.
• Contracts, invoices and billing records: 8 years, as required by GST and tax law.
• Security and access logs: at least 1 year, as required by law, and longer only where needed to investigate an incident.

When data is no longer needed for its purpose or the law, we delete or anonymise it. Under DPDP we may notify you before erasing data that has not been used for a long period.

7. Cookies, analytics and your choices

Your choices: you can block or delete cookies in your browser settings, use your browser’s “Do Not Track” setting (Matomo respects it), or opt out of our Matomo analytics below. You can also opt out of Google Analytics using Google’s browser add-on. Strictly necessary cookies (chat and client login) cannot be switched off without breaking those features.

8. Your rights

Under India’s DPDP Act

• Get a summary of the personal data we process about you and with whom it has been shared.
• Correct, complete, update or erase your personal data.
• Withdraw consent at any time, as easily as you gave it (this does not affect processing already done).
• Grievance redressal by our Grievance Officer, and if you are not satisfied, a complaint to the Data Protection Board of India.
• Nominate another person to exercise your rights in case of death or incapacity.

Under GDPR (EU/EEA/UK visitors)

• Access, rectification and erasure.
• Restriction of processing and data portability.
• Object to processing based on legitimate interests, including direct marketing.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any right, email info@altntechnology.com with the subject “Privacy request”. We may need to verify your identity before acting. There is no charge for reasonable requests.

9. How we protect your data

We use reasonable security practices in line with the IT Act and DPDP, including encrypted connections (HTTPS/TLS), access controls and strong authentication for staff, firewalls, regular patching, monitored and access-logged systems, and encrypted backups. Staff and processors are bound by confidentiality. No system is completely secure; if a personal data breach occurs, we will inform affected users and the Data Protection Board of India (and, where applicable, the relevant EU/UK authority) as required by law.

10. Children

Our websites and services are intended for businesses and adults. We do not knowingly collect personal data of children (under 18 in India; under 16 in the EU unless a lower national age applies). If you believe a child has shared data with us, contact us and we will delete it. Where we must process a child’s data, we will first obtain verifiable consent from a parent or lawful guardian.

11. Links to other websites

Our websites link to other sites, including our sister brands and partners. Their own privacy policies apply when you visit them.

12. Changes to this policy

We may update this policy when our services or the law change. We will post the new version here with a new effective date and, for significant changes, notify clients by email or on the website.