Privacy Policy
What personal data we collect, why, who we share it with, and the rights you have.
Last updated: 15 October 2026
This policy explains how Natlig Technologies (OPC) Private Limited ("Natlig", "we", "us") handles personal data when you visit natlig.com, contact us, apply for a job, or work with us. It is written to meet India’s Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the Information Technology Act, 2000, and the rules made under them.
1. Who we are
Natlig Technologies (OPC) Private Limited, a One Person Company registered in India.
Email: info@natlig.com · Phone: +91 94480 10826
For personal data collected through this website, we decide why and how it is used, so we are the "Data Fiduciary" under the DPDP Act.
2. What we collect and why
We only ask for what we need to reply to you. Each form tells you what it is for and asks for your consent before you send it.
| Where | What we collect | Why | Basis |
|---|---|---|---|
| Contact form (contact page) | Name, email, message; optionally phone, company and the service you’re interested in | To reply to your enquiry | Your consent |
| Plan builder (homepage) | Name, phone/WhatsApp number, business stage and type, the goals you picked and the services suggested | To send you the plan and discuss it | Your consent |
| Call-back form (homepage) | Name, phone number, what you need help with, budget range, urgency and any brief you choose to attach | To call you back | Your consent |
| Email, phone or WhatsApp | Whatever you choose to send us | To reply and keep a record of the conversation | Your consent |
| Job applications (by email) | Your CV and the details you send | To assess your application | Your consent |
| Website hosting logs | IP address, browser type, pages requested and time of request | To deliver the site, keep it secure and prevent abuse | Legitimate uses permitted by law (security) |
Please don’t send us passwords, bank or card details, Aadhaar or PAN numbers, health information, or other people’s personal data through our forms. We don’t need them to reply to you.
3. What we don’t do
- We don’t use cookies, analytics, advertising pixels or tracking scripts on this website. See our Cookie Policy.
- Our fonts are hosted on our own site, so loading a page doesn’t send your data to font providers.
- We don’t sell or rent personal data, and we don’t use it for advertising profiles.
4. Transfers outside India
Some of our providers store data outside India, for example in the United States. The DPDP Act allows this, except to countries the Government of India restricts. We will follow any such restriction.
5. How long we keep it
- Enquiries that don’t lead to work with us: up to 24 months, then deleted.
- Client records and invoices: for the engagement, then as long as Indian tax and company law requires.
- Job applications: up to 12 months, unless you ask us to delete them sooner.
- Hosting logs: kept by Netlify under its own retention settings.
If you withdraw consent or ask us to delete your data, we delete it unless the law requires us to keep it.
6. Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete or update it;
- ask us to erase it;
- withdraw your consent at any time (this is as easy as giving it: just email us). Withdrawal doesn’t affect what we did before;
- raise a grievance with us, and then with the Data Protection Board of India if you’re not satisfied;
- nominate someone to exercise these rights for you if you die or become unable to.
To use any of these rights, email info@natlig.com with the subject "Privacy request". We may need to confirm your identity first.
7. Grievance Officer
Email: info@natlig.com (subject "Grievance")
Phone: +91 94480 10826
We will acknowledge your grievance and resolve it within one month of receiving it.
8. Security
We protect personal data with reasonable security safeguards, including encrypted connections (HTTPS), access limited to the people who need it, and providers that maintain their own security programmes. No system is perfectly secure. If a personal data breach happens, we will inform the people affected and the Data Protection Board of India as the law requires.
9. Children
This website and our services are meant for adults. We don’t knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
10. Data we handle for clients
When we deliver services such as security testing, brand monitoring, reputation analysis or takedowns, we process data on our client’s instructions under a written agreement. In that work we act as our client’s Data Processor. For brand monitoring and reputation analysis, we work with publicly available content and report at the level of the brand, not by building profiles of private individuals.
11. Changes to this policy
We will update this page when our practices change and show the date of the latest version at the top. If a change affects how we use data you have already given us, we will ask for your consent again where the law requires it.
12. Contact
Questions about this policy: info@natlig.com or +91 94480 10826.