Privacy Policy

1. Who We Are

Antonio Paes Computer Services ("we", "us", "our") is a sole proprietorship providing software development, web design, IT infrastructure, and related digital services, operating from Goa, India. We are the Data Fiduciary as defined under the DPDP Act, 2023, with respect to any personal data we collect.

For all privacy-related enquiries, contact: contact@paesantonio.com

2. What Personal Data We Collect

We collect only the minimum personal data necessary to provide our services or respond to your enquiry:

• Contact information: Name, email address, phone number
• Communication data: Messages and enquiries submitted through our contact form
• Technical data: IP address, browser type, and access logs generated by your visit to our website (server logs only; no tracking cookies are set)
• Service data: Information provided during the course of a project engagement, including business requirements, content, and credentials you share for the purpose of delivering the service

We do not collect Sensitive Personal Data (as defined under IT Rules, 2011) unless explicitly required for a specific service, and with your prior written consent.

3. How We Use Your Personal Data

Your personal data is used solely for the following purposes:

• Responding to enquiries and providing quotations
• Delivering contracted services
• Communicating project updates and support
• Invoicing and record-keeping as required under applicable Indian law
• Complying with legal obligations

We do not use your data for unsolicited marketing. We do not sell, rent, or trade your personal data to any third party.

4. Lawful Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following grounds:

• Consent: Where you voluntarily provide data via our contact form
• Contract: Where processing is necessary to perform a contract for services you have engaged us to deliver
• Legitimate interest: For maintaining security and fraud prevention on our systems
• Legal obligation: Where required by Indian law (e.g., GST records, court orders)

5. Data Sharing and Disclosure

We do not share your personal data with third parties except:

• Service providers: SMTP/email service providers used solely to transmit your enquiry to us (your data is transmitted securely and not stored by them beyond delivery)
• Legal requirements: Where we are required by law, court order, or governmental authority to disclose information
• Business transfers: In the event of a change of ownership of the business, with appropriate confidentiality protections in place

Where data is shared with service providers outside India, such transfer complies with Section 16 of the DPDP Act, 2023.

6. Data Retention

We retain your personal data only for as long as necessary for the purpose it was collected:

• Enquiry data not resulting in a project: deleted within 12 months
• Project-related data: retained for 7 years from project completion for legal and accounting purposes
• Server access logs: retained for up to 90 days

7. Your Rights as a Data Principal

Under the DPDP Act, 2023, you have the following rights:

• Right to access: Request a summary of personal data held about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to grievance redressal: Lodge a complaint with us directly, and escalate to the Data Protection Board of India if unresolved
• Right to withdraw consent: Withdraw consent at any time; this does not affect the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, contact us via the contact page. We will respond within 30 days.

8. Security

We implement reasonable security practices and procedures as required under Rule 8 of the IT (SPDI) Rules, 2011. All custom software developed by us is built from scratch with security as a foundational principle — we do not use open-source CMS platforms with known shared vulnerabilities. Data transmitted via our contact form is protected by TLS/SSL encryption.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to using commercially reasonable means to protect your data.

9. Cookies and Tracking

This website does not set cookies on your device, nor does it use any third-party analytics, advertising trackers, or social media pixels. Server access logs are maintained for security purposes only and are not used to profile individual visitors.

10. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website or services after a revision constitutes acceptance of the updated policy.

12. Grievance Officer

In accordance with Rule 5(9) of the IT (SPDI) Rules, 2011 and Section 13 of the DPDP Act, 2023, any grievances related to the processing of personal data may be directed to:

We will acknowledge your grievance within 48 hours and endeavour to resolve it within 30 days.