Privacy Policy

Who we are

DigiCloak is a brand operated by Shine Ventures ("DigiCloak", "we", "us", "our"), headquartered in Chennai, Tamil Nadu, India. This policy applies to the website at digicloak.in and to information you share with us directly over WhatsApp, phone or email when you get in touch about our procurement, cybersecurity, or audit and certification services.

Information we collect

This website does not use contact forms, sign-up forms or online checkout of any kind. We do not ask you to submit personal information through the site itself. Information reaches us in two ways:

• Information you give us directly. When you message us on WhatsApp, call, or email us, we receive whatever you choose to share — typically your name, phone number, email address, company name, and the nature of your enquiry.
• Information collected automatically. Like most websites, our hosting and analytics tooling may automatically log standard technical data such as your approximate location (derived from IP address), browser type, device type, pages viewed, and referring site, for the purpose of understanding site usage and keeping the site secure.

We do not knowingly collect financial account details, government ID numbers, or sensitive personal data through this website.

How we use it

We use the information described above to:

• Respond to your enquiry and scope a proposed engagement
• Deliver, administer and support any service you engage us for
• Maintain records required for invoicing, audits, or regulatory compliance connected to services we provide
• Understand aggregate website usage so we can improve the site
• Meet our own legal, tax and regulatory obligations in India

We do not sell personal information, and we do not use it for unrelated marketing without your consent.

Cookies & analytics

The site may use essential and analytics cookies or similar technologies (for example, to measure page views) to help us understand how the site is used. These do not power any advertising network, and no forms means no cookie can be tied back to a submission you made on this site. You can control or delete cookies through your browser settings at any time.

Sharing & disclosure

We do not sell or rent personal information. We may share information with:

• Delivery and audit partners who need it to fulfil a specific engagement you have asked us for (for example, a CERT-In empanelled auditing organisation delivering a joint audit)
• Professional advisors, such as accountants or legal counsel, under confidentiality obligations
• Authorities, where disclosure is required by Indian law, regulation, or a valid legal process

Retention & security

We retain personal information only for as long as reasonably necessary for the purposes described above, or as required by applicable law (including statutory record-keeping for invoicing and audits). We apply reasonable technical and organisational safeguards to protect information in our care, in line with the standards we help our own clients implement — including access controls, encryption in transit, and restricted internal access on a need-to-know basis. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights under the DPDP Act, 2023

If you are located in India, the Digital Personal Data Protection Act, 2023 gives you certain rights as a data principal in respect of personal data we hold about you, including the right to:

• Request a summary of the personal data we hold about you and how it is being processed
• Request correction or updating of inaccurate or incomplete personal data
• Request erasure of personal data that is no longer necessary for the purpose it was collected, subject to our legal retention obligations
• Withdraw consent for any processing that relies on consent, at any time
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a grievance with us, and if unresolved, approach the Data Protection Board of India

To exercise any of these rights, contact our Grievance Officer using the details below.

Children's privacy

This website and our services are intended for businesses and professional enquiries. We do not knowingly collect personal information from children, and the site is not directed at anyone under the age of 18.

Third-party links

Our site may link out to third-party resources (for example, WhatsApp, or a certification body's website). We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies separately.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.

Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and applicable Indian information technology rules, the Grievance Officer for DigiCloak (Shine Ventures) is:

We aim to acknowledge grievances within a reasonable time and resolve them as promptly as possible.