Privacy Policy

Overview & Scope

CoreNex InfoTech ("we", "our", "us") is committed to protecting the privacy and personal data of our clients, website visitors, and users. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data.

This policy applies to all information collected through our website corenexinfotech.com, direct client engagements, emails, contact forms, and any other means of communication with us.

Information We Collect

A. Information You Provide Directly:

• Full name, business name, email address, phone number, and physical address — provided via contact forms, emails, or project agreements.
• Project details, business requirements, and briefs shared during consultation or project onboarding.
• Payment information (billing details, GST number). We do not store card numbers or banking details directly — payments are processed through secure third-party gateways.
• Credentials and access information shared strictly for project execution, handled with strict confidentiality protocols.
• The Client is solely responsible for ensuring that any personal data provided to CoreNex InfoTech has been collected lawfully with all required permissions and consents.

B. Information Collected Automatically:

• IP address, browser type, operating system, device type, and screen resolution.
• Pages visited, time spent on site, referral sources, and click behavior via analytics tools (e.g., Google Analytics).
• Cookies and similar tracking technologies (see Cookie Policy section).

C. Information from Third Parties:

• If you reach out via LinkedIn, social media, or business directories, we may collect publicly available profile information for follow-up communication.

How We Use Your Information

• To respond to enquiries and provide project estimates or consultations.
• To execute agreed services — development, design, maintenance, and support.
• To send project updates, invoices, progress reports, and important notifications.
• To process payments and maintain billing records as required by law.
• To improve our website's usability and content based on usage patterns.
• To send service-related communications (not promotional emails without consent).
• To comply with legal, regulatory, and tax obligations under Indian law.
• To protect our rights, prevent fraud, and ensure the security of our systems.

We will only contact you for marketing or promotional updates if you have explicitly opted in. You can unsubscribe at any time by replying to any such email or contacting us directly.

Information Sharing & Disclosure

We do not sell or share your personal data with third parties except in the following circumstances:

• Service Partners: We may share limited information with trusted freelancers, sub-contractors, or technology partners engaged to assist in delivering your project. All such parties are bound by confidentiality obligations.
• Payment Processors: Payment-related information is shared with our payment gateway partners (e.g., Razorpay, PayPal) solely for transaction processing.
• Analytics Providers: Anonymized website usage data is shared with analytics platforms to help us improve our services.
• Legal Requirement: We may disclose information if required by law, court order, or government authority in India or an applicable jurisdiction.
• Business Transfer: In the event of a merger, acquisition, or sale of business assets, client data may be transferred to the successor entity, and you will be notified in advance.

Data Retention

• Project-related data and communication records are retained for a minimum of 3 years after project completion for business, legal, and accounting purposes.
• Contact form submissions and enquiries are retained for 1 year if no project engagement follows.
• Credentials and sensitive access information are deleted immediately upon project completion or upon Client request in writing.
• Financial and billing records are retained for 7 years as required under Indian accounting and tax laws (GST Act, IT Act).
• Certain information may be retained despite deletion requests where required by law, tax regulations, fraud prevention, dispute resolution, or contractual obligations.

You may request deletion of your personal data at any time by writing to us at corenexinfotech@gmail.com.

Data Security

We implement industry-standard technical and organizational measures to protect your personal information:

• All website communications are encrypted via SSL/TLS (HTTPS).
• Client credentials are stored using secure, encrypted methods and are never shared with unauthorized personnel.
• Access to sensitive project data is restricted to team members who require it for service delivery (least-privilege principle).
• We conduct periodic security reviews of our internal systems and processes.
• We use secure, access-controlled cloud storage for project files and communications.

CoreNex InfoTech shall not be liable for data breaches, outages, or security incidents occurring within third-party services, hosting providers, or cloud platforms beyond our reasonable control.

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic site functionality such as page navigation and form submissions. Cannot be disabled without affecting site performance.
• Analytics Cookies: Help us understand visitor behavior (e.g., Google Analytics). Data is anonymized and aggregated.
• Preference Cookies: Remember your settings and preferences across sessions.
• Marketing Cookies: Used only if you have explicitly consented to receiving targeted communications from us.

You can manage or disable non-essential cookies through your browser settings at any time. By continuing to use our website, you consent to our use of cookies as described in this Policy.

Your Rights

As a data subject, you have the following rights regarding your personal information held by us:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data, subject to legal retention obligations.
• Right to Restriction: You may request that we limit how we process your data in certain circumstances.
• Right to Data Portability: You may request your data in a machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Complain: You may lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact us at corenexinfotech@gmail.com. We will acknowledge your request within 7 business days and respond within 30 days.

Children's Privacy

Our services are intended for businesses and adults aged 18 years and above. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has submitted personal information to us without verifiable parental or guardian consent, we will delete such information promptly.

If you believe we have inadvertently collected such information, please contact us immediately at corenexinfotech@gmail.com.

Third-Party Links

Our website may contain links to third-party websites, tools, or platforms. CoreNex InfoTech is not responsible for the privacy practices, content, or security of such external websites. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information. The inclusion of any link on our website does not imply our endorsement of that website or its services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. The updated version will be posted on our website with a revised "Last Updated" date.

If the changes are material, we will notify active clients via email at least 14 days before the changes take effect. Your continued use of our services after such updates constitutes your acceptance of the revised Policy.

Contact Us — Privacy Concerns

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us: