Privacy Policy

Last Updated: 1 July 2026 · Effective Date: 1 July 2026

Allans ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how information is collected, used, disclosed, stored, and safeguarded when you visit our website www.allans.in, use our sales services, or interact with us. It is aligned with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), read together with the Information Technology Act, 2000 and other applicable laws of India. The DPDP Rules were notified in November 2025 and take effect in phases through 2026–2027; we are adopting DPDP-aligned practices ahead of the applicable compliance dates.

Under the DPDP Act, Allans acts as a Data Fiduciary in respect of the personal data it determines the purpose and means of processing, and you, the individual, are the Data Principal. By providing your personal data you consent to its processing for the specified purposes described here. This policy should be read with our Terms & Conditions and Cookie Policy.

1. Information We Collect

1.1 Personal Information You Provide

Information is collected when you register or create an account, request information about our services, fill out contact or enquiry forms, subscribe to communications, participate in surveys, contact us, apply for employment, enter into agreements, or attend our events.

1.2 Types of Personal Information Collected

• Identity Information: full name, date of birth, gender, photographs
• Contact Information: email, phone, postal address, city, state, country, PIN code
• Professional Information: company name, job title, department, business address, industry
• Financial Information: bank account, payment card, billing address, GST and tax identification (for business transactions)
• Project Information: requirements, specifications, objectives, budget ranges, timelines
• Employment Information: CV, qualifications, work experience, references, portfolio
• Communication & Account Information: messages, support tickets, feedback, username, encrypted password, preferences

1.3 Sensitive and Financial Data

Where necessary for a specific service and with your consent, more sensitive data — such as financial information (bank and payment details), and, only for relevant projects, health or medical information — may be collected. Such data is processed strictly for the stated purpose, held under heightened security measures, and retained only as long as needed. Under the DPDP Act, processing of children's data and certain categories carries additional obligations, which we observe where applicable.

1.4 Information Collected Automatically

When you visit our website, technical and usage information is collected automatically, including device information (IP address, device type, operating system, browser), usage data (pages visited, time spent, links clicked, referring URLs), general location based on IP, and analytics data such as navigation paths and session duration.

1.5 Information from Third-Party Sources

Information may be received from business partners and affiliates, social media platforms if you interact with our pages, marketing and analytics providers, public sources, and payment processors.

2. How We Use Your Information

Collected information is used to deliver, maintain, and improve our services; manage projects and provide technical support; manage accounts and fulfil contracts; respond to enquiries and send project and administrative communications; send marketing communications and event invitations with consent; analyse website usage and improve services; comply with legal obligations and prevent fraud; and process employment applications.

3. Legal Basis for Processing

Under the DPDP Act, personal data is processed on the basis of your consent — which is free, specific, informed, unconditional, and unambiguous, and which you may withdraw at any time — or for certain legitimate uses permitted by the Act (for example, a purpose for which you voluntarily provided data, or to comply with a legal obligation). We rely on consent for marketing, cookies, third-party sharing, and international transfers; on contract performance to deliver requested services; on legal obligation (Income Tax Act 1961, GST Act 2017, Companies Act 2013, and other laws); and on permitted legitimate uses where applicable. Where processing relies on consent, a clear notice describing the personal data and purpose is provided, and consent may be managed or withdrawn — including, where available, through a registered Consent Manager — by contacting [email protected]. Withdrawing consent does not affect processing carried out before withdrawal.

4. Disclosure and Sharing of Your Information

Your information may be shared with service providers and business partners (cloud infrastructure providers such as AWS, Azure, and Google Cloud; payment processors such as Razorpay, PayU, PayPal, and Stripe; email services; analytics services; CRM; communication tools; and marketing platforms), all contractually obligated to maintain confidentiality. Information may also be disclosed in business transfers, to legal and regulatory authorities, to protect rights and safety, and with your consent.

We do not sell, rent, lease, or trade your personal information to third parties for their independent marketing purposes.

5. Cookies and Tracking Technologies

Cookies, web beacons, and similar technologies are used to enhance your experience. Types include essential, performance/analytics, functional, marketing/advertising, and social media cookies. Preferences can be managed through browser settings, our cookie consent tool, and industry opt-out tools. See our Cookie Policy for full details.

6. Data Security Measures

Technical measures include SSL/TLS encryption in transit and AES-256 encryption at rest, RBAC and MFA access controls, firewalls and intrusion detection, secure cloud infrastructure with ISO 27001 and SOC 2 certifications, regular security updates, vulnerability scanning, and secure development practices. Organisational measures include employee training, confidentiality agreements, security policies, incident response, background checks, and access logging. In the event of a personal data breach, we will notify you and the Data Protection Board of India as required under the DPDP Act and DPDP Rules, 2025, with details of the breach and the measures being taken.

7. Data Retention

Information is retained only as long as necessary. Active client data is kept for the service relationship plus warranty period; inactive accounts for 3–5 years; financial records for 7 years (Income Tax Act and Companies Act); employment records for the duration of employment plus 3–7 years; marketing data until consent is withdrawn or 3 years of inactivity; and website analytics for 26 months. When no longer needed, data is securely deleted or anonymised.

8. Your Rights as a Data Principal

Under the DPDP Act, 2023 you have the right to: access a summary of the personal data we process about you and the processing activities; correction, completion, and updating of your data; erasure of your personal data where it is no longer needed for the purpose or where you withdraw consent, subject to legal retention requirements; grievance redressal through our readily available mechanism; and nomination of another individual to exercise your rights in the event of death or incapacity. You may also withdraw consent at any time. To exercise any right, email [email protected] with the subject "Data Principal Request." We respond to valid requests within the timelines prescribed under the DPDP Rules, 2025 at no charge, and may verify your identity before acting. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.

9. Third-Party Links

Our website may contain links to third-party websites and services that we do not control. We are not responsible for their privacy practices, content, or security. Review their policies before providing personal information.

10. Children's Privacy

Our services are not directed to children under 18, and personal information from children is not knowingly collected without parental consent. Parents who believe their child has provided information should contact [email protected] for deletion.

11. International Data Transfers

Your information may be transferred to and processed in countries outside India where our providers or infrastructure are located, with appropriate safeguards including standard contractual clauses, equivalent or higher security standards, and reputable providers such as AWS, Google Cloud, and Microsoft Azure.

12. Changes to This Privacy Policy

This policy may be updated to reflect changes in our practices, technologies, or legal requirements. The "Last Updated" date will be revised, and material changes notified by email to active clients. Continued use after changes constitutes acceptance.

13. Grievance Redressal Mechanism

In accordance with the DPDP Act, 2023 and DPDP Rules, 2025, a Data Protection / Grievance Officer has been appointed to address questions and complaints about how your personal data is handled. Email [email protected] or [email protected] with the subject "Privacy Grievance." Complaints are acknowledged promptly and resolved within the timelines prescribed under the DPDP Rules. If your grievance is not resolved to your satisfaction, you may lodge a complaint with the Data Protection Board of India.

14. Governing Law and Jurisdiction

This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000. Any disputes are subject to the exclusive jurisdiction of the courts of Mumbai, Maharashtra, India.

Contact Us

Allans
Registered Office: 101, Parvati CHSL, Chakala, Andheri East, Mumbai, Maharashtra 400059, India

Email: [email protected]
Phone: +91-91369-58750
Website: www.allans.in
LinkedIn: linkedin.com/company/allans

Business Hours: Monday to Friday 10:00 AM – 7:00 PM IST · Saturday 10:00 AM – 2:00 PM IST · Sunday Closed