1. About This Policy
Helious Tech Solutions Private Limited ("Helious", "we", "us", or "our") is committed to protecting the personal data of every individual who visits our website at www.heliostechsolutions.in (the "Website"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under applicable Indian law.
This Policy is published in compliance with:
- The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules");
- The Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules notified thereunder; and
- Any other applicable laws and regulations in India.
By using this Website, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy should be read together with our Terms of Service and Cookie Policy.
By accessing or using this Website and voluntarily submitting your personal data, you provide your free, specific, informed, and unambiguous consent to the processing of your personal data in accordance with this Privacy Policy.
Nothing in this Policy shall be construed to create any contractual or client relationship, and all use of the Website remains subject to the Terms of Service.
2. Data Fiduciary
For the purposes of the DPDP Act, Helious Tech Solutions Private Limited is the Data Fiduciary in respect of personal data collected through this Website.
Registered Name: Helious Tech Solutions Private Limitedsd
Registered Address: 1st Floor, Wing B, Enkay Centre, Vanijya Nikunj, Phase V, Udyog Vihar, Sector 19, Gurugram, Haryana – 122016
Email: legal@heliostechsolutions.in
Website: www.heliostechsolutions.in
3. What Personal Data We Collect
We collect only the personal data that you voluntarily provide to us through our Website. This includes:
We follow the principle of data minimisation and collect only such data as is necessary for specified purposes.
3.1 Contact & Enquiry Information
- Full name
- Business email address
- Phone number
- Company name and designation
- Nature of your enquiry or message
3.2 Technical & Analytics Data
When you visit our Website, we automatically collect certain technical data through Google Analytics (GA4). This includes:
- IP address (anonymised by default in GA4)
- Browser type and version
- Device type and operating system
- Pages visited, time spent on pages, and navigation paths
- Geographic location at the city or country level
- Referral source (how you found our Website)
This data is collected in aggregate and is not used to identify you as an individual. We do not collect sensitive personal data as defined under the SPDI Rules (including passwords, financial information, health data, or biometric data) through this Website.
Such data is collected in aggregated and anonymised form to the extent possible and is not intended to identify you individually.
For details on cookies and tracking technologies, please refer to our Cookie Policy.
4. Purpose and Legal Basis for Processing
We process your personal data only for the following purposes:
- Responding to your enquiry or demo request: We use your name, email, phone number, company name, and message details to respond to requests you submit through our website. This processing is based on your consent, as you voluntarily provide this information.
- Sending follow-up communications about our products and services: We may use your name and email address to send relevant follow-up information regarding our products and services. This processing is based on our legitimate interest and/or your consent, where applicable.
- Improving website performance and user experience: We use anonymised analytics data to understand website usage, improve functionality, and enhance user experience. This processing is based on our legitimate interest.
- Complying with legal obligations: We may process personal data where necessary to comply with applicable laws, regulations, or lawful requests from authorities. This processing is based on our legal obligations.
Where processing is based on your consent, you may withdraw such consent at any time. Withdrawal shall not affect the lawfulness of processing prior to such withdrawal.
Where processing is undertaken for legitimate business purposes, such processing shall be reasonable, proportionate, and limited to what a user would reasonably expect in the context of an informational website.
5. How We Share Your Data
Helious does not monetise personal data or engage in the sale of personal data for commercial gain. We may share your data only in the following limited circumstances:
- Google LLC (Google Analytics): For website analytics. Google processes anonymised usage data in accordance with its own privacy policy. We have enabled IP anonymisation in our GA4 configuration.
- Legal and Regulatory Authorities: Where required by law, court order, or governmental authority in India.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
Any third-party service providers we engage are contractually required to process personal data only as instructed by us and in accordance with applicable law.
6. Data Retention
We retain your personal data for no longer than necessary to fulfil the purposes for which it was collected:
- Contact form submissions: Retained for up to 3 years from the date of submission for follow-up and business development purposes, unless you request earlier deletion.
- Analytics data: Retained in Google Analytics for 14 months (our configured retention period), after which it is automatically deleted.
- We may retain data for longer periods where required for compliance with legal obligations, dispute resolution, or enforcement of our rights under applicable agreements.
7. Data Security
We implement reasonable technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:
- Secure HTTPS transmission for all Website communications
- Access controls limiting who within Helious can access personal data
- Regular review of our data collection and storage practices
No method of internet transmission or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant authorities as required under the DPDP Act.
While we implement reasonable technical and organisational measures, you acknowledge that no system is completely secure. To the fullest extent permitted under applicable law, Helious shall not be liable for unauthorised access, data breaches, or loss of data arising from events beyond its reasonable control.
In the event of a data breach, Helious shall comply with applicable notification obligations under the DPDP Act.
8. Your Rights as a Data Principal
Under the DPDP Act, 2023, you have the following rights in respect of your personal data that we process:
- Right to Access: You may request information about the personal data we hold about you and the purposes for which it is processed.
- Right to Correction and Erasure: You may request correction of inaccurate or incomplete data, or erasure of data where we no longer have a legal basis to retain it.
- Right to Grievance Redressal: You may raise a grievance with our designated point of contact (see Section 10).
- Right to Nominate: You may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.
- Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
To exercise any of these rights, please write to us at legal@heliostechsolutions.in. We will respond to your request within a reasonable timeframe and in accordance with applicable law.
Helious reserves the right to verify your identity before processing any request to prevent unauthorised access or misuse of personal data.
Requests that are manifestly unfounded, excessive, or repetitive may be declined in accordance with applicable law.
9. Children's Data
Our Website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
10. Grievance Officer
In accordance with the IT Act, 2000 and DPDP Act, 2023, we have designated a Grievance Officer to address privacy-related concerns:
Grievance Officer: Legal & Compliance Team
Helious Tech Solutions Private Limited
1st Floor, Wing B, Enkay Centre, Vanijya Nikunj, Phase V, Udyog Vihar, Sector 19, Gurugram, Haryana – 122016
Email: legal@heliostechsolutions.in
Response Time: Within 30 days of receipt of grievance
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the revised Policy on this page with an updated "Last Updated" date. We encourage you to review this Policy periodically. Continued use of the Website after changes constitutes acceptance of the updated Policy.
Continued use of the Website after such changes shall constitute acceptance of the updated Policy.
12. Governing Law
This Privacy Policy is governed by the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at Gurugram, Haryana.
13. Limitation of Liability
To the fullest extent permitted under applicable law, Helious shall not be liable for any indirect, incidental, consequential, or special damages arising out of or in connection with the processing of personal data under this Policy.
Nothing in this Policy shall limit liability where such limitat