Privacy
Policy.

Last updated: 28 September 2026. Please read this policy to understand how we handle your personal data.

1. 01

   Who We Are

   This Privacy Policy explains how Nerdtech Softwares LLP, a limited liability partnership registered in India ("NerdTech", "we", "us" or "our"), collects, uses, shares and protects personal data when you visit nerdtech.in (the "Website"), contact us, or engage us for software development and related services (the "Services").

   For personal data collected through the Website and our sales and client communications, NerdTech is the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023). Where we process personal data on behalf of a client inside software we build, host or maintain, we act as a data processor, and that processing is governed by our agreement and Data Processing Agreement with that client, not by this policy.

2. 02

   Personal Data We Collect

   Information you give us: your name, work email address, company name, country, industry, company stage, project type, project details and any other information you include when you submit our project form, email us, call us or message us on WhatsApp.

   Information collected automatically: IP address, approximate location derived from IP, browser and device type, operating system, referring page, pages viewed and time spent, collected through cookies and similar technologies (see Section 8).

   Information from client engagements: business contact details of client personnel, and any personal data contained in systems, files or test data that a client gives us access to in order to perform the Services.

   We do not intentionally collect sensitive personal data (such as health, financial account, biometric or government identification data) through the Website. Please do not submit it through our forms.

3. 03

   How We Use Personal Data and Our Legal Bases

   We use personal data to: (a) respond to enquiries, prepare proposals and quotes, and communicate with you about a potential project; (b) perform and manage contracts with our clients, including invoicing and support; (c) operate, secure, analyse and improve the Website; (d) send service-related communications and, where permitted, information about our Services; and (e) comply with legal, tax, accounting and regulatory obligations and protect our legal rights.

   Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: taking steps at your request before entering into a contract, and performance of a contract (a, b); our legitimate interests in running and growing our business securely, which we balance against your rights (a, c, d); your consent, where required by law, for non-essential cookies and marketing (c, d); and compliance with legal obligations (e). Where India's Digital Personal Data Protection Act, 2023 applies, we process personal data on the basis of your consent, which you give by submitting information to us, or for legitimate uses permitted by that Act.

   We do not use personal data for automated decision-making that produces legal or similarly significant effects on you.

4. 04

   How We Share Personal Data

   We do not sell personal data, and we do not share personal data for cross-context behavioural advertising.

   We share personal data only with: (a) service providers who process it on our behalf under contractual confidentiality and data protection obligations, including form handling (Formspree), website analytics (Google Analytics), cloud hosting, email and communication providers, and WhatsApp (Meta) when you choose to contact us there; (b) professional advisers such as lawyers, accountants and auditors; (c) authorities, courts or other parties where required by law or to protect our rights, property or safety or that of others; and (d) a buyer or successor in connection with a merger, acquisition or sale of assets, subject to this policy.

5. 05

   International Data Transfers

   We are based in India and serve clients worldwide, and our service providers may process data in other countries, including the United States. As a result, your personal data may be transferred to and processed in countries whose data protection laws differ from those in your country.

   Where the law requires it, we put appropriate safeguards in place for these transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, and we transfer data out of India only in accordance with applicable Indian law.

6. 06

   Data Retention

   We keep personal data only for as long as necessary for the purposes described in this policy. Enquiry and lead data is generally kept for up to 24 months after our last interaction with you, unless you become a client. Client contract, billing and project records are kept for the duration of the engagement and afterwards for as long as required by applicable tax, accounting and limitation laws.

   When data is no longer needed, we delete or anonymise it securely.

7. 07

   Security

   We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse and alteration, including encryption in transit, access controls based on least privilege, and multi-factor authentication for internal systems.

   No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities where required by law.

8. 08

   Cookies and Analytics

   Strictly necessary storage: we store your cookie choice in your browser's local storage so that we do not ask you again on every visit. This is needed for the Website to respect your choice and does not require consent.

   Analytics cookies: with your consent, we use Google Analytics, which sets cookies such as _ga and _ga_* (typically retained for up to 2 years) to measure how visitors use the Website, including pages visited, device type and approximate location. Google Analytics is not loaded, and these cookies are not set, unless you click "Accept" on our cookie banner. Google's use of this data is governed by Google's Privacy Policy.

   Managing your choice: you can accept or reject analytics cookies when you first visit, and change your choice at any time using the "Cookie settings" link in the Website footer. If you withdraw consent, we stop loading Google Analytics and delete its cookies from your browser for our domain. You can also block or delete cookies through your browser settings.

9. 09

   Your Rights

   Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request erasure; restrict or object to processing, including processing based on legitimate interests and direct marketing; receive your data in a portable format; withdraw consent at any time, without affecting processing carried out before withdrawal; and lodge a complaint with your local data protection authority.

   California residents have the right to know what personal information we collect, use and disclose, to request deletion and correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act.

   Individuals in India have the rights to access information about, correct, complete, update and erase their personal data, to grievance redressal, and to nominate another person to exercise these rights in the event of death or incapacity.

   To exercise any of these rights, email contact@nerdtech.in with the subject line "Privacy Request". We may need to verify your identity before acting on your request, and we will respond within the time required by applicable law, normally within 30 days.

10. 10

    Children

    The Website and Services are intended for businesses and are not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. 11

    Grievance Officer

    In accordance with Indian law, you may address any complaint or concern about the processing of your personal data to our Grievance Officer: Sachin Pandit, Nerdtech Softwares LLP, email contact@nerdtech.in, phone +91 9405649047. We will acknowledge your complaint promptly and aim to resolve it within the time required by law.

12. 12

    Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. If we make material changes, we will take reasonable steps to notify you, for example by posting a notice on the Website.

13. 13

    Contact Us

    Nerdtech Softwares LLP, India. Email: contact@nerdtech.in. Phone: +91 9405649047.