Privacy Policy

Trusted Global DC (“TGD”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you visit trustedglobaldc.com, create an account or buy our hosting services, why we collect it, who we share it with, how long we keep it and the rights you have. It is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

1. Who is responsible for your data

For personal data collected through this website and our customer accounts, the data fiduciary is [Registered legal name of the company], trading as Trusted Global DC, [Registered office address], India. You can reach our Grievance Officer at [email protected] or +91 83296 09620.

Where you use our hosting services to store or process the personal data of your own customers or visitors, you are the data fiduciary for that data and we act only as your processor, on your instructions and under our Terms of Service.

2. What we collect

Category	Examples	When we collect it
Account details	Full name, email address, mobile number, password (stored only as a one-way hash), preferred domain name	When you sign up or update your profile
Billing details	Billing address, city, state, PIN code, country, GSTIN (optional), plan or service ordered, billing cycle, amounts paid, invoice history	When you place or renew an order
Payment references	Razorpay order ID, payment ID and payment status. We never receive or store your full card number, CVV, UPI PIN or net-banking credentials; those are entered directly on Razorpay’s checkout.	When you pay through Razorpay
Enquiries and support	Name, job title, phone number, email address and the message you send through the contact form; the content of emails and support tickets you send us	When you contact us
Security and technical data	IP address, browser and device type, pages requested, date and time of requests, sign-in attempts, lockouts and password-reset requests, server logs	Automatically, when you use the website or the Portal
Service data	Files, databases, email and other content you store on the hosting services you buy from us	When you use your hosting service. We process this only on your behalf.

We do not knowingly collect data from anyone under 18, and we do not collect biometric, health, caste, religious or other sensitive categories of data. If you believe a minor has given us personal data, contact us and we will delete it.

3. Why we use your data

• To create and manage your account, verify your identity and keep the account secure, including detecting repeated failed sign-ins and issuing password-reset links.
• To provision, deliver, support, renew and bill the services you order, and to issue GST-compliant invoices.
• To process payments and refunds through Razorpay and to investigate failed, duplicate or disputed payments.
• To respond to your enquiries, support requests and grievances.
• To send service messages such as order confirmations, renewal reminders, maintenance notices and security alerts.
• To send you information about new plans and offers where you have not opted out; every marketing email includes an unsubscribe link.
• To monitor, secure and improve the website and our infrastructure, including preventing fraud, abuse and attacks.
• To comply with our legal obligations, including tax, company-law and record-keeping requirements and lawful requests from courts and government agencies.

4. Legal basis

We process your personal data on the basis of your consent, given when you create an account, place an order or submit a form, and for the “legitimate uses” recognised by the DPDP Act, including performing the contract you have asked us to enter into, complying with the law, and responding to lawful orders. You may withdraw consent at any time as described in section 10; doing so does not affect processing that took place before withdrawal, and we may have to close services that cannot be provided without the data.

5. Who we share your data with

We do not sell or rent personal data. We share it only with:

• Razorpay Software Private Limited, our payment aggregator, to process payments and refunds. Razorpay’s own privacy policy governs the data you enter on its checkout.
• Infrastructure and data-centre partners who host the servers on which services are provisioned. They may hold service data and technical logs on our behalf under contractual confidentiality and security obligations.
• Email and messaging providers used to send account, billing and support messages.
• Professional advisers such as accountants, auditors and lawyers, where necessary.
• Courts, regulators and law-enforcement agencies where we are legally required to disclose data, including under the Information Technology Act, 2000 and the CERT-In directions.
• A successor business if we sell, merge or reorganise our business, in which case we will notify you.

6. Where your data is stored

Our customer database and website are hosted in India. Some hosting services may be provisioned in data centres operated by our partners in other countries, in which case the service data you place on those servers is stored there. Where personal data is transferred outside India we do so only to countries not restricted by the Central Government under the DPDP Act and with contractual safeguards in place.

7. How long we keep your data

Data	Retention period
Account and billing details	For as long as your account is active, and then for the period required by Indian tax and company law (currently up to eight years for financial records)
Service data on cancelled or expired services	Deleted within 30 days of termination of the service
Contact-form enquiries	Up to 24 months after the enquiry is closed
Security and server logs	At least 180 days, as required by the CERT-In directions, and normally no longer than 12 months
Password-reset tokens	Until used or expired, whichever is earlier

When data is no longer needed it is deleted or irreversibly anonymised.

8. How we protect your data

We follow reasonable security practices and procedures as required by the 2011 Rules, including encryption of data in transit (HTTPS), one-way hashing of passwords, account lockout after repeated failed sign-ins, role-based access to customer records, firewalls and DDoS mitigation, monitoring and logging, and regular patching. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach affects you, we will notify you and the relevant authorities as the law requires.

9. Cookies

We use a small number of cookies to keep you signed in and to secure the website. Details are in our Cookie Policy.

10. Your rights

Subject to applicable law you have the right to:

• Access a summary of the personal data we hold about you and how it is processed.
• Correct or update inaccurate or incomplete data by contacting support from your registered email address.
• Erase your data when it is no longer needed for the purpose it was collected or for a legal requirement.
• Withdraw consent to processing that relies on consent, and opt out of marketing messages.
• Nominate another person to exercise your rights if you die or become incapacitated, as provided by the DPDP Act.
• Raise a grievance with our Grievance Officer and, if you are not satisfied with our response, complain to the Data Protection Board of India.

To exercise any of these rights, email [email protected] from your registered email address. We may ask you to verify your identity. We respond within 30 days.

11. Marketing communications

We send occasional emails about new plans, upgrades and offers to registered customers. You can stop them at any time by using the unsubscribe link in the email or by contacting support. Service and billing messages are not marketing and will continue while you hold an account.

12. Third-party websites

The website contains links to third-party sites such as our social-media pages and Razorpay. Their privacy practices are their own; please read their policies before providing data to them.

13. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with its “last updated” date, and we will notify registered customers by email of any material change.

14. Visitors from the EEA and the United Kingdom

If you access our services from the European Economic Area or the United Kingdom, the General Data Protection Regulation may also apply. In that case the lawful bases for our processing are the performance of our contract with you, our legitimate interests in securing and improving our services, compliance with legal obligations and, for marketing, your consent. You have the additional rights to restrict or object to processing and to data portability, and you may lodge a complaint with your local supervisory authority.

15. Contact

Questions about this policy or about your personal data should be sent to our Grievance Officer, [Full name of the Grievance Officer], at [email protected], or by post to Grievance Officer, Trusted Global DC, [Registered office address], India.