Privacy Policy

1 Scope & Introduction

Digistaa Digital (“Digistaa”, “we”, “our”, or “us”) provides digital design, software development, search optimization, marketing, and artificial intelligence solutions. This Privacy Policy applies to personal data collected via our website (digistaa.com), client portals, communication channels, and associated digital services.

By accessing our services or submitting information through our web forms, you acknowledge the terms outlined in this policy. If you do not agree with any practices described herein, please refrain from using our platforms.

2 Information We Collect

We collect information necessary to provide high-performance digital services and maintain transparent client communication:

• Directly Provided Information: Full name, corporate email address, telephone number, company name, project specifications, and inquiry details submitted through our contact and proposal forms.
• Technical & Telemetry Data: IP address, browser type and version, operating system, referrer URL, pages visited, time spent on pages, and network device identifiers.
• Payment & Billing Data: Commercial invoicing details, VAT/GST numbers, and corporate billing addresses (payment transactions are processed via PCI-DSS Level 1 certified gateways; we never store raw credit card numbers).

3 Legal Bases for Processing (GDPR)

Under Article 6 of the General Data Protection Regulation (GDPR), we process personal data under the following lawful bases:

4 How We Use Your Data

We utilize collected data strictly for the following business purposes:

• Delivering customized project proposals, software architectures, and marketing audits.
• Executing contractual obligations, milestones, software deployments, and client support.
• Improving website speed, responsiveness, and user experience.
• Preventing fraudulent activity, unauthorized API access, and cybersecurity threats.

5 Cookies & Tracking Technologies

We utilize cookies and similar tracking technologies to analyze site performance and maintain session states. You can modify your browser settings to decline non-essential cookies at any time without compromising core site navigation.

6 Third-Party Sharing & Processors

We never sell, rent, or trade your personal data. We disclose data solely to vetted third-party service providers bound by strict Data Processing Agreements (DPAs):

• Cloud Infrastructure & Hosting (AWS, Cloudflare)
• CRM & Client Communication Platforms
• Payment Gateways (Stripe, Razorpay)

7 International Data Transfers

Where data is transferred internationally, we ensure adequate protection through standard contractual clauses (SCCs) approved by the European Commission and industry-standard encryption protocols.

8 Data Retention & Erasure

We retain personal information only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, or regulatory requirements. Once expired, records are securely expunged or irreversibly anonymized.

9 Your Privacy Rights (GDPR & CCPA)

Depending on your geographic jurisdiction, you hold enforceable rights regarding your personal data:

• Right of Access: Request a complete copy of personal records held by Digistaa.
• Right to Rectification: Request prompt correction of inaccurate or incomplete data.
• Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal records.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Opt-Out: Opt-out of any marketing or promotional communications at any time.

10 Security Safeguards

Digistaa implements multi-layered cybersecurity protocols including TLS 1.3 encryption in transit, AES-256 encryption at rest, regular vulnerability scans, role-based access controls (RBAC), and strict zero-trust operational protocols.