PRIVACY POLICY

 

Powercret Solutions (“Company,” “we,” “us,” or “our”) is a certified Microsoft consulting and implementation partner headquartered at B401-404, Times Square 2, Thaltej, Ahmedabad, Gujarat 380054, India, with operational presence in the United States and Australia. We provide services including Digital Transformation Consulting, Microsoft Implementation Services, Managed Support Services, Staff Augmentation, and associated technology solutions across Dynamics 365, Power Platform, Azure, AI and Copilot, and SharePoint and Microsoft 365 (collectively, the “Services”).

This Privacy Policy (“Policy”) governs the collection, use, processing, storage, transfer, and disclosure of personal data obtained from individuals (“you” or “your”) who access or interact with our website located at www.powercret.com (the “Website”), submit enquiries or forms through the Website, apply for careers, or otherwise engage with the Company in connection with the Services.

By accessing the Website or submitting any information to us, you acknowledge that you have read, understood, and expressly consent to the collection and processing of your personal data as described in this Policy. If you do not accept any provision of this Policy, you must immediately discontinue access to and use of the Website. This Policy is to be read alongside our Terms and Conditions; in the event of conflict on data privacy matters, this Policy prevails.

 

1. SCOPE OF THIS POLICY

This Policy applies to all personal data processed by or on behalf of Powercret Solutions in connection with:

• any use of or visit to the Website, including passive browsing;
• submission of the contact or enquiry form on the Website;
• subscription to marketing communications or newsletters via the Website;
• careers applications submitted through the Website or by email;
• communications between you and Powercret Solutions by any channel in connection with the Services; and
• any engagement for the delivery of consulting, implementation, managed support, or staff augmentation services.

This Policy does not apply to the data practices of Microsoft Corporation or any other third-party platform, service, or application that we do not own or control, including Microsoft Dynamics 365, Power Platform, Azure, and associated products. Users of those platforms should consult the relevant privacy documentation published by Microsoft.

 

2. INFORMATION WE COLLECT

We collect only such personal data as is necessary for the specified purposes set out in this Policy. Collection is limited to the following categories:

• Information You Provide Directly: When you complete the contact form, request a consultation, subscribe to our newsletter, respond to a marketing communication, or otherwise interact with the Website, you may provide us with:
  • Full name: used to personalise communications and identify you as a contact;
  • Business email address: our primary channel for responding to enquiries, delivering service communications, and, where consent is given, sending marketing materials;
  • Company or organisation name: used to understand your business context and tailor our response to your specific requirements;
  • Phone number: used for follow-up conversations or urgent communications where you have indicated a preference for phone contact;
  • Consultation booking and appointment scheduling information: including preferred meeting times, scheduling requests, and related communication details submitted by you through the Website for the purpose of arranging consultations, discovery calls, or service discussions;
  • Service interest: the category of services you select when submitting an enquiry (Digital Transformation Consulting, Implementation Services, Managed Support Services, Staff Augmentation), used solely to route your enquiry appropriately; and
  • Marketing consent: the explicit opt-in selection you make on the contact form indicating your wish to receive insight, news, and update communications from us.
• Careers Applications

If you submit a careers application through the Website or directly to us, we collect such information as is contained in your curriculum vitae or cover letter, including your name, contact details, educational and professional history, and any other information you voluntarily provide. This data is used solely for the purpose of evaluating your application and, if successful, for the purposes of employment onboarding.

 

• Automatically Collected Technical Data

When you access or navigate the Website, certain technical and behavioural data is collected automatically through standard web technologies, including server logs, cookies, and analytics platforms. This includes:

• IP address and derived approximate geographic location;
• browser type, version, and operating system;
• pages visited, time spent per page, referral source URL, and navigation sequence;
• device type, screen resolution, and hardware identifiers; and
• session and interaction data used to identify errors and improve Website performance.

This data is collected in aggregate or pseudonymised form. No individually identifiable profiles are built from this data for advertising or third-party commercial purposes.

 

3. COOKIES AND SIMILAR TECHNOLOGIES

The Website uses cookies and similar tracking technologies to enable essential functionality, measure performance, and improve your browsing experience. Cookies are small text files placed on your device by a web server. The categories of cookies we use are:

• Strictly necessary cookies: required for the Website to function and cannot be disabled. They include session management cookies that keep you logged in during a session and security tokens.
• Analytics and performance cookies: used to collect aggregated data on how visitors interact with the Website, including pages visited and time on site, enabling us to identify and resolve performance issues.
• Functional cookies: used to remember choices you have made (such as language preference or previously completed form fields) to improve your experience on return visits.

You may configure your browser to refuse or delete cookies. Note that disabling cookies may impair certain Website features.

 

4. PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

We process personal data only where we have a lawful and valid basis for such processing under applicable data protection laws. Depending on the nature of the processing activity, such legal basis may include your consent, the necessity of processing for the performance of a contract or prior to entering into a contract, compliance with legal or regulatory obligations, protection against fraud or unauthorised activity, permitted uses recognised under applicable law, including fraud prevention, network and information security, service improvement, lawful business operations, and the establishment, exercise, or defence of legal claims. We process your personal data only for specified, explicit, and legitimate purposes. Each processing activity is described below together with its basis:

• Responding to enquiries and consultations: when you submit the contact form or request a consultation, we process your name, email, phone number, company, and service interest to respond to your request and schedule the appropriate follow-up. This is necessary to take steps at your request prior to a potential contractual engagement.
• Delivering the Services: where you engage us for Digital Transformation Consulting, Implementation Services, Managed Support Services, Staff Augmentation, or other related technology and consulting services, we process the personal data necessary to perform our contractual obligations, manage client engagements, deliver support, coordinate implementation activities, and maintain service quality.
• Cross-border project coordination and communication: where required in connection with the delivery of our Services to international clients and partners, we may process personal data for facilitating cross-border communications, project coordination, implementation activities, technical support, and related business operations across the jurisdictions in which we operate;
• Marketing communications: where you have checked the opt-in box on the Website contact form or otherwise provided express consent, we process your email address and name to send you insights, updates, and news relating to Microsoft technologies and our Services. You may withdraw this consent at any time by clicking the unsubscribe link in any marketing email or by contacting us directly, without affecting the lawfulness of processing carried out prior to withdrawal.
• Website analytics and improvement: we process automatically collected technical data to analyse usage patterns, identify technical errors, and improve the Website’s structure, content, and performance. This processing is conducted in aggregate form using third-party analytics tools as described in Section 5.
• Security and fraud prevention: we process technical and account data to detect, prevent, and respond to fraudulent, unauthorised, or unlawful activity, and to protect the integrity of our systems and the safety of our users.
• Legal and regulatory compliance: we process and retain personal data to the extent required by applicable laws and regulations, including the Digital Personal Data Protection Act, 2023 (India) (“DPDP Act”), the Information Technology Act, 2000, and any applicable laws of the jurisdictions in which we operate, including the United States and Australia.
• Careers and recruitment: we process data submitted in careers applications solely to evaluate suitability for open or future roles, communicate with candidates, and, where applicable, complete employment onboarding.
• Business operations and dispute resolution: we retain certain data as necessary to enforce our agreements, protect our legal rights, and resolve any disputes that may arise in connection with the Services.

 

 

We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyse aggregated data on how visitors use the Website. Google Analytics uses cookies to collect information including pages visited, time on site, referral sources, and device type. This data is transmitted to and stored on Google’s servers. Google operates under its own privacy policy, details of which are available at https://policies.google.com/privacy

We have configured Google Analytics with IP anonymisation enabled, meaning your IP address is truncated before transmission to Google’s servers. We do not permit Google to use Website analytics data for its own advertising network. You may opt out of Google Analytics tracking at any time by installing the Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout.

 

6. DATA SHARING AND DISCLOSURE

We do not sell, rent, lease, or otherwise trade your personal data to any third party. Disclosure of your data occurs exclusively in the following circumstances:

• Service Providers and Data Processors: We engage carefully selected third-party service providers who assist in the operation and delivery of the Website and Services. These include providers of cloud hosting and infrastructure, email and communication platforms, customer relationship management software, lead management systems, marketing automation tools, web analytics, and cybersecurity monitoring. All such providers are engaged under written data processing agreements that impose strict obligations of confidentiality, security, purpose limitation, and data minimisation. No service provider is permitted to use your data for purposes other than those for which it was shared.
• Microsoft Ecosystem Partners: As part of our consulting, implementation, managed support, and digital transformation services, we may work within Microsoft platforms and environments utilised by our clients, including Dynamics 365, Power Platform, Azure, Microsoft 365, and related technologies. Any processing of personal data occurring directly within Microsoft-hosted environments shall additionally be subject to Microsoft’s applicable privacy and security commitments. We encourage users and clients to review Microsoft’s Privacy Statement available at https://privacy.microsoft.com/en-us/privacystatement .
• International Transfers: Powercret Solutions operates across India, the United States, and Australia, and may engage service providers located outside your country of residence. Where your personal data is transferred to or processed in a jurisdiction other than India, we ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms recognised under applicable law. By using the Website or Services, you acknowledge and consent to such transfers where necessary for the delivery of the Services.
• Legal and Regulatory Disclosure: We may disclose your personal data where required to do so by applicable law, court order, governmental direction, or regulatory authority having jurisdiction over the Company. Prior to any such disclosure, we will assess the legal validity of the request and, where permitted by law, seek to notify you. We reserve the right to legally challenge any request that we consider to be unlawful, overbroad, or inconsistent with applicable data protection standards.
• Protection of Rights and Safety: We may disclose your information where we have a reasonable and good-faith belief that such disclosure is necessary to protect the rights, property, or safety of Powercret Solutions, our clients, staff, or the general public, or to detect, prevent, or address fraud, security incidents, or unlawful activity.
• Corporate Transactions: In the event of a merger, acquisition, corporate restructuring, amalgamation, or sale of all or substantially all of the assets of the Company, your personal data may form part of the transferred assets. In such circumstances, we will take all steps necessary to ensure that the acquiring entity is bound by data protection obligations consistent with this Policy. You will be provided with prior written notice of any material change in how your data is managed, and we will obtain your consent where required by applicable law.

 

7. DATA RETENTION

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The factors that determine retention periods include:

• the nature, volume, and sensitivity of the data;
• the applicable statutory, regulatory, or contractual retention obligation;
• the ongoing legitimate business need, including resolution of disputes, enforcement of contracts, and fraud prevention; and
• any instructions you provide regarding deletion or rectification.

As a general guide: enquiry and contact form data is retained for the period of the business relationship and for a reasonable period thereafter; Service delivery data is retained for the duration of the applicable contract and for such further period as required by law or legitimate business necessity; marketing data is retained until you withdraw consent or exercise your right to erasure; careers application data is retained for a reasonable period following the close of the relevant recruitment process.

 

Upon expiry of the applicable retention period, data is securely deleted, anonymised, or de-identified in accordance with recognised data disposal standards. Where anonymisation is performed, all personally identifiable elements are stripped such that the residual data cannot be re-linked to any individual. Anonymised data may be retained indefinitely for analytical or statistical purposes. In limited circumstances, data may be retained beyond the standard period solely to comply with legal obligations, prevent fraud, or resolve active disputes, always within the bounds of applicable data protection law.

 

8. DATA SECURITY

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental or unlawful destruction, loss, alteration, or disclosure. These measures include, without limitation:

• encryption of data in transit using TLS and at rest using industry-standard protocols;
• role-based access controls restricting data access to authorised personnel only;
• regular security assessments and vulnerability management processes;
• intrusion detection and monitoring systems; and
• mandatory data protection awareness training for all personnel who handle personal data.

Notwithstanding the foregoing, no method of data transmission over the internet or method of electronic storage is entirely secure. We cannot guarantee absolute protection against all threats, and transmission of personal data to and from the Website is conducted at your own risk. You are solely responsible for maintaining the confidentiality of any credentials used to access our services and must notify us immediately at [info@powercret.com] upon becoming aware of any unauthorised access to or use of your account.

 

9. YOUR RIGHTS AS A DATA PRINCIPAL

Subject to applicable law, you have the following rights with respect to your personal data held by us. These rights are recognised under the Digital Personal Data Protection Act, 2023 (India) and, where relevant, under the applicable data protection laws of the United States and Australia:

• Right of Access information: you may request confirmation of whether we hold personal data about you and, where we do, obtain a copy of that data together with information about how it is being processed you may request a summary of the personal data being processed by us, the processing activities undertaken in relation to such data, and the identities of data fiduciaries and data processors with whom such personal data has been shared, in accordance with applicable law.
• Right to Correction: you may request that we correct any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure: you may request deletion of your personal data where such data is no longer necessary for the purpose for which it was processed, where consent has been withdrawn, or where retention is no longer required under applicable law, subject always to our legal and regulatory obligations.
• Right to Withdraw Consent: where processing is based on your consent (including consent to receive marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Grievance Redressal: you have the right to readily available means of grievance redressal in relation to any act or omission regarding the performance of obligations in relation to your personal data under applicable law;
• Right to Object: you may object to processing carried out on the basis of our legitimate interests where you believe your interests, rights, or freedoms override those interests.
• Right to Nominate: under the DPDP Act, 2023, you may nominate another individual to exercise your data protection rights on your behalf in the event of your incapacity or death.

To exercise any of the rights above, or to submit a complaint or query regarding data processing, please send a written request to our Grievance Officer at info@powercret.com. We will respond within the timeframe prescribed under applicable law and may require verification of your identity before processing the request. Certain rights are subject to statutory limitations and may not be exercisable in all circumstances.

 

10. MARKETING COMMUNICATIONS

We send marketing, insight, and update communications by email only where you have provided express prior consent by checking the opt-in box on our contact form or by otherwise consenting to receive such communications. We do not send unsolicited marketing communications.

 

Each marketing email contains a clearly visible unsubscribe mechanism. You may opt out of all marketing communications at any time by clicking the unsubscribe link in any such email or by writing to us at info@powercret.com. Unsubscribing from marketing emails does not affect transactional or service-related communications, which we may continue to send where necessary for the performance of a contract or compliance with a legal obligation.

 

11. THIRD-PARTY WEBSITES, PLATFORMS, AND SOCIAL MEDIA

The Website contains hyperlinks to third-party websites and platforms, including Microsoft’s product pages, and references to our social media profiles on LinkedIn, Instagram, and Facebook. This Policy does not apply to any third-party website, platform, or service that we do not own or operate. We exercise no control over the content, privacy practices, or data collection activities of such third parties and accept no responsibility or liability in connection therewith.

 

When you interact with our social media profiles or click through to third-party platforms, your personal data is processed by those platforms in accordance with their own privacy policies. We strongly encourage you to review the privacy documentation of any third-party platform before providing personal data on that platform.

 

12. CHILDREN’S PRIVACY

The Website and all Services offered by Powercret Solutions are directed exclusively at business professionals and organisations. They are not intended for and must not be used by any individual under the age of eighteen (18) years. We do not knowingly collect personal data from persons under eighteen years of age. If we become aware or have reason to suspect that personal data of a minor has been submitted to us without appropriate parental or guardian consent, we will take immediate steps to delete that data from our records. If you are a parent or guardian and believe that a minor has provided personal data to us, please contact us at info@powercret.com without delay.

 

13. GOVERNING LAW AND JURISDICTION

This Policy is governed by and shall be construed in accordance with the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules framed thereunder, and such other legislation as may be applicable to the processing of personal data in India. Any dispute, claim, or controversy arising out of or relating to this Policy, including any question of its validity, interpretation, breach, or enforceability, shall be subject to the exclusive jurisdiction of the competent civil courts situated at Ahmedabad, Gujarat, India.

 

Nothing in this Policy is intended to exclude or limit any rights you may have under applicable mandatory consumer protection or privacy legislation in your jurisdiction.

 

14. CHANGES TO THIS POLICY

We reserve the right to amend, update, or revise this Policy at any time. Changes may be made to reflect developments in applicable law, changes to our business activities, or updates to our data processing practices. Material changes will be communicated to you by prominently posting the revised Policy on the Website with an updated “Last Revised” date and, where we hold your contact details and the change is material, by direct email notification.

 

The revised Policy takes effect from the date stated as the effective date. Your continued use of the Website or Services following publication of a revised Policy constitutes your acceptance of the changes. If you do not agree to a revised Policy, you must discontinue use of the Website and Services and, where applicable, request deletion of your personal data in accordance with Section 9.

 

15. CONTACT AND GRIEVANCE OFFICER

For any questions, requests, concerns, or complaints regarding this Policy or the processing of your personal data, you may contact our designated Grievance Officer, as required under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000:

 

Powercret Solutions

Email: info@powercret.com

Phone: +91 987-981-3647

Address: B401-404, Times Square 2, Thaltej, Ahmedabad, Gujarat 380054, India

Website:

 

We are committed to acknowledging receipt of your complaint within forty-eight (48) hours and to resolving it within the period prescribed under applicable law. If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India, once constituted under the DPDP Act, or to the relevant supervisory authority in your jurisdiction.