Privacy Policy
Last updated
Ramest Technolabs is a Data Fiduciary under India's Digital Personal Data Protection Act, 2023. This policy is the notice the Act requires: it says exactly what personal data this website collects, why, who processes it, how long we keep it, and how you exercise your rights. Every statement here describes what our systems actually do.
Who We Are and Who to Contact
Ramest Technolabs (“we”), 2nd Floor, Iscon, RE11, Ambli Rd, Sanidhya, Ahmedabad, Gujarat 380058, India, decides why and how the personal data collected on this website is processed. Under the Act that makes us the Data Fiduciary, and you the Data Principal.
Grievance Officer (Data Protection)
- Dax Panara, Grievance Officer (Data Protection)
- Email: privacy@ramesttechnolabs.com
- Post: Ramest Technolabs, 2nd Floor, Iscon, RE11, Ambli Rd, Sanidhya, Ahmedabad, Gujarat 380058, India
- Phone: +91 9510903725
The Grievance Officer answers questions about your personal data, handles every request under this policy, and is named in every reply we send you (DPDP Rules, 2025, Rule 9).
What We Collect, and Where
We collect personal data only when you give it to us through a form on this site. We do not run analytics, advertising pixels or tracking cookies, and we do not buy data about you.
a. Home-page enquiry form
- Name, email address, phone number (with country code), company name, your message
- Time of submission, IP address, approximate country, browser type, Google reCAPTCHA spam score
- Your consent: which version of the notice applied and when you gave it
b. Contact-page form
- Everything in (a), plus the service and budget you select and any file you attach (a brief or specification — PDF, Office, image, ZIP or text, up to 10 MB)
c. Careers application form
- Full name, email address, mobile number, total experience, the position you apply for, your resume and everything it contains
- Time of submission, IP address, approximate country, browser type, Google reCAPTCHA spam score
- Your consent and which version of the notice applied
d. Data-rights request form
- Name, the email address you used with us, the type of request, what you write, time and IP address
e. Newsletter
- Email address and, optionally, name; the source and date of your consent; time and IP address of the sign-up. Subscription is double opt-in: nothing is sent until you confirm the link we email you.
We do not collect billing or shipping addresses, payment details, government identifiers or any special categories of data through this website.
Why We Process It, and on What Basis
- Enquiry and contact forms — to reply to your enquiry and, if you ask, prepare a proposal. Basis: your consent (Act s. 6), and for the reply itself the voluntary provision of your data for that purpose (s. 7(a)).
- Careers form — to evaluate your application for the position you selected and contact you about it. Basis: your consent. Decisions about your application are made by people, on the information you give us; we keep it complete and accurate (s. 8(3)).
- Newsletter — to send it to you. Basis: your consent, confirmed by double opt-in.
- Data-rights form — to verify, act on and answer your request. Basis: our legal obligation under the Act.
- Security records (IP address, browser, reCAPTCHA score, access logs) — to detect and block spam and abuse and to investigate a security incident (DPDP Rules, Rule 6(1)(c)). These are processed as part of the consent you give when submitting a form and are kept for the period in section 5.
We never sell personal data, never use it for profiling or automated decision-making, and never process it for a purpose you were not told about.
How Long We Keep It
The Act requires us to erase personal data once its purpose is served (s. 8(7)). The DPDP Rules, 2025 also require us to keep personal data and the logs of its processing for a minimum of one year from the date of processing (Rule 8(3)), for lawful requests by the State. So: nothing is deleted before 365 days from submission, and everything is deleted as soon after that as its purpose is over — automatically, by a scheduled job, with the erasure date recorded on the record.
- Enquiries: 12 months after the enquiry is closed, or 18 months after the last activity if it was never closed.
- Job applications: 12 months after the position is filled or the application is closed, or 18 months after the last activity. If you are hired, your application becomes part of your employment record.
- Attached files (briefs, resumes): deleted together with the record they belong to, and immediately when an enquiry or application is deleted in our console.
- Newsletter: until you unsubscribe. An unsubscribed address is removed 30 days later; a one-way hash of it is kept so you can never be re-added by mistake. Unconfirmed sign-ups are removed after 30 days.
- Data-rights requests: 12 months after they are resolved.
- Access and audit logs: 12 months, after which the personal data inside them is removed and only the event remains.
- Copies inside notification emails: our team deletes them when the related record is closed.
If you withdraw consent or ask for erasure, your data leaves active use immediately (it is removed from every list, export and email) and is permanently deleted at the end of the one-year minimum. We tell you the exact date in our reply.
How We Protect It
We apply the reasonable security safeguards the DPDP Rules require (Rule 6), including:
- Encryption in transit (HTTPS everywhere) and at rest for the database and for uploaded files, which are stored in private object storage and served only through an authorised, logged download.
- Access control: the console requires a login with role-based permissions; exporting data needs a separate permission.
- Visibility: every view, download, export, edit, deletion and erasure of personal data is written to an audit log kept for one year.
- Continuity: managed database backups so a failure does not lose or expose your data.
- Contracts with each processor above that require equivalent safeguards.
- Minimisation: no analytics or tracking scripts; application logs never contain your email or full IP address.
No method of transmission or storage is perfectly secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as section 8 explains.
Your Rights and How to Use Them
Under the Act you have the right to:
- Access (s. 11): a summary of the personal data we hold about you, what we do with it, and the identities of everyone we have shared it with.
- Correction, completion and updating (s. 12): fix anything inaccurate, incomplete or out of date.
- Erasure (s. 12(3)): have your data deleted, subject only to the one-year minimum above or another law that requires us to keep it.
- Withdraw consent (s. 6(4)): at any time, as easily as you gave it. Withdrawal does not affect processing that already happened lawfully.
- Nominate (s. 14): name a person who may exercise these rights for you if you die or become incapacitated.
- Grievance redressal (s. 13): have any concern about how we handle your data answered.
How to make a request
- Use the form at ramesttechnolabs.com/legal/data-rights, or email privacy@ramesttechnolabs.com.
- Give the email address you used on the form — that is how we find your records (Rule 14(1)). We send a verification link to it before acting, so no one else can request your data.
- We reply within 30 days (the Rules allow up to 90). Every reply includes the Grievance Officer's contact details.
- If you are not satisfied with our response, you may complain to the Data Protection Board of India (section 9).
Your duties under the Act (s. 15): do not impersonate anyone, do not suppress material information, do not file false or frivolous grievances, and give only verifiably authentic information when asking for a correction.
Personal Data Breaches
If personal data is accessed, disclosed, altered, destroyed or made unavailable without authorisation, the Act (s. 8(6)) and Rule 7 require us to tell you and the Data Protection Board of India. We will contact you at the email address on your record, without delay and in plain language, with: what happened and when, what data was involved, what may happen as a result, what we have done about it, what you can do to protect yourself, and who to contact. We report the breach to the Board immediately and file a detailed report within 72 hours.
Complaints and the Data Protection Board
- Step 1 — Contact the Grievance Officer: privacy@ramesttechnolabs.com or ramesttechnolabs.com/legal/data-rights. The Act asks you to give us the opportunity to resolve a grievance first (s. 13(3)).
- Step 2 — If you are not satisfied, complain to the Data Protection Board of India, established under section 18 of the Act. The Board works as a digital office; complaints are filed online through its portal.
- Step 3 — Appeals against the Board's decisions go to the Telecom Disputes Settlement and Appellate Tribunal (TDSAT).
Children
Under the Act a child is anyone under 18 (s. 2(f)), and a child's data may be processed only with verifiable parental consent (s. 9). This website and its forms are intended for adults (18 and over), and we do not knowingly collect a child's data. We never track children, profile them or target advertising at them. If you believe a child has submitted data, contact the Grievance Officer and we will delete it.
Where Your Data Is Stored
Our processors store data on servers outside India (mainly the United States), which the Act permits unless the Central Government restricts a country by notification (s. 16, Rule 15). We check those notifications and will move data if one applies. Each processor is bound by contract to protect your data to the standard the Act requires.
Cookies and Third-Party Scripts
This website sets no tracking or advertising cookies and loads no analytics. The only cookies are:
- Google reCAPTCHA v3 — loaded only when you start filling a form, to tell people from bots. Google receives your IP address and browser signals and may set its own cookies; this is covered by the consent you give on the form. See Google's privacy policy.
- Admin console — a session cookie used only by our staff to log in. It is never set for visitors.
Because there is nothing optional to consent to, this site shows no cookie banner. If that ever changes, this section and the forms will change first.
Changes to This Policy
This policy is versioned by its “last updated” date, and the notice on each form carries the same version. When wording changes, the new version is shown on every form from that moment; the version you consented under is recorded with your data and can always be produced. Material changes are announced on this page, and by email where we hold your address.
Contact Us
Data protection: Dax Panara, Grievance Officer (Data Protection) — privacy@ramesttechnolabs.com
General: hr@ramesttechnolabs.com · +91 9510903725
Address: 2nd Floor, Iscon, RE11, Ambli Rd, Sanidhya, Ahmedabad, Gujarat 380058, India
This policy is available in other Indian languages on request (Act s. 5(3)).
Questions about your data? Email our Grievance Officer at privacy@ramesttechnolabs.com or call +91 9510903725.
Read our Your Data Rights