Back to Home
Privacy and Data Protection (DPDP Act, 2023)

Privacy Policy

How Certain Systems collects, uses and protects your personal data, and how you stay in control.

Effective date: 24 October 2026 • Version 3.1

English ಕನ್ನಡ தமிழ் हिन्दी

What we collect

Your contact details and what you send us: WhatsApp and e-mail messages, enquiries, orders, invoices, and visiting cards you hand us.

Why

To answer you, deliver our work, invoice and meet the law. Offers and campaigns only with your consent.

You decide

On WhatsApp send START, YES PROMO, STOP PROMO, STOP or DELETE MY DATA to +91 72599 74251.

Where it is kept

On our own server in Bangalore. A few named service providers help us (section 5). We never sell your data.

In short, on WhatsApp: when you write to us we use your number and messages to reply. We send you updates only after you send START, and offers only after you send YES PROMO. STOP ends all WhatsApp messages from us; STOP PROMO ends only offers.

1 Who we are

Certain Systems, a proprietorship in Bangalore, Karnataka, India, provides engineering, embedded-systems and IT software services and runs certainsystems.in. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary: we decide why and how your personal data is used.

  • Proprietor: Gangatharan J
  • GSTIN: 29ADPPG1805P1Z2
  • Privacy contact: [email protected] (details in section 13)

2 What we collect

FromData
WhatsAppYour mobile number, WhatsApp profile name, the messages, photos and documents you send, delivery and read status.
E-mailYour e-mail address, name and the messages you send.
Customers and suppliersName, company, designation, GSTIN, address, phone, e-mail, enquiries, quotations, orders, invoices and payments.
Events and exposVisiting cards you hand us: name, company, designation, phone, e-mail, address.
Our staff's recordsBills and receipts our staff submit, which may show the issuer's contact details.
This websiteTechnical data every visit needs (IP address, browser). With your consent: Google Analytics statistics (section 11).

We do not ask for passwords, OTPs, card numbers or government ID numbers on WhatsApp or e-mail. Please do not send them.

3 Why we use it, and on what basis

PurposeBasis under the DPDP Act
Answering your questions, quotations, technical discussions, supportYou contacted us for this (legitimate use, Section 7(a))
Delivering projects, orders, invoices, payments, GST and tax recordsOur contract with you, and our legal obligations
Following up on a conversation we had at an event (from your visiting card)The purpose you gave us the card for (legitimate use). Not marketing
WhatsApp updates about your orders and requestsYour consent: send START (Meta also requires this opt-in)
Offers, news and campaigns by WhatsApp or e-mailOnly with your consent: YES PROMO on WhatsApp, or subscribing by e-mail. A visiting card alone is not consent
Website statistics (Google Analytics)Your consent in the cookie banner
Security, preventing misuse, meeting legal requestsLegal obligations and legitimate use

4 Your consent and how to change it

Withdrawing consent is as easy as giving it. Send these words to our WhatsApp number +91 72599 74251; you get a confirmation each time:

SendEffect
STARTReceive WhatsApp updates about your orders and requests
YES PROMOAlso receive offers and news
STOP PROMOStop offers and news; order updates continue
STOP (or UNSUBSCRIBE)Stop all WhatsApp messages from us
DELETE MY DATAAsk us to delete your data (section 9)
PRIVACYReceive the link to this policy

For e-mail, use the unsubscribe link in our mails or write "unsubscribe" to [email protected]. For the website, use Cookie settings. A withdrawal applies from then on; it does not undo what was lawfully done before. We keep a record of each consent and withdrawal, with the version of this policy shown at the time, as proof that we respected your choice.

5 Who processes your data for us

We never sell or rent your personal data. These service providers (Data Processors) handle it only to provide their service to us:

ProviderWhat forData involved
Meta Platforms (WhatsApp Business Platform)Sending and receiving WhatsApp messagesMobile number, profile name, messages and media
CloudflareSecure connection, protection and login for our website and business systemsAll traffic to our website and systems, including IP addresses
GoogleE-mail (Google Workspace), and Google Analytics if you allow itE-mails; with your consent, visit statistics (including your IP address and a cookie ID)
TelegramInternal tool: our staff send bills, receipts and visiting cards to our own systemThe contents of those documents

We also disclose data when Indian law, a court or an authorised government agency requires it.

6 Data outside India

Meta, Google, Cloudflare and Telegram may store or process data on servers outside India. The DPDP Act allows this except to countries the Government of India restricts; we will follow any such restriction.

7 Where we keep it and how we protect it

  • Our business system (ERPNext) and its database run on a self-hosted server at our premises in Bangalore.
  • All connections are encrypted (TLS). Only authorised people can open our business systems, after a sign-in with a one-time code.
  • Messages from WhatsApp are accepted only when Meta's digital signature on them is valid.
  • Backups are encrypted and kept on a separate disk.
  • If a personal data breach happens, we will inform the affected people and the Data Protection Board of India as the DPDP Rules require.

8 How long we keep it

DataKept for
Text of WhatsApp and e-mail conversationsDeleted automatically 3 years after each message
Record that a message was exchanged (number, date) and your consent historyAs long as we need to prove we respected your choices
Invoices, orders and payment recordsAs tax law requires: GST 72 months, Income Tax 8 years
Contacts and visiting-card detailsReviewed every year; deleted when there has been no contact for 3 years, or earlier on request
Google Analytics statisticsAs set in our Analytics account, at most 14 months

9 Your rights

  • Access: a summary of the personal data we hold about you, what we do with it and with whom we share it.
  • Correction and update: fix or complete your data.
  • Erasure: delete your data. Records the law makes us keep (such as GST invoices) are kept but used for nothing else, and we tell you what was kept and why.
  • Withdraw consent at any time (section 4).
  • Grievance: complain to us about how we handle your data.
  • Nominate a person who may use these rights for you in case of death or incapacity.

How: send DELETE MY DATA (or your request) on WhatsApp to +91 72599 74251, or e-mail [email protected]. A request from your own WhatsApp number or e-mail address is treated as coming from you; otherwise we may ask you to confirm. We acknowledge within 48 hours and answer within 30 days.

If you are not satisfied with our answer to a grievance, you may complain to the Data Protection Board of India.

10 Children

Our services are for businesses and adults (18 years or older). We do not knowingly collect data from children. If you believe a child has sent us personal data, tell us and we will delete it.

11 Cookies on this website

  • Necessary: your cookie choice, stored in your browser, and security checks by Cloudflare. Always on.
  • Analytics (only if you allow): Google Analytics cookies to count visits and see which pages are used.

We ask once and remember your choice in your browser. We ask again only if we change what we use cookies for. Change your choice at any time: Cookie settings.

12 Languages

This policy is available in English, ಕನ್ನಡ, தமிழ் and हिन्दी. It is available in any other language of the Eighth Schedule of the Constitution on request to [email protected]. If the versions differ, the English version applies.

13 Contact and grievance officer

Grievance and Data Protection Contact

Name: Gangatharan J, Proprietor

Organisation: Certain Systems, Bangalore, Karnataka, India

E-mail: [email protected]

WhatsApp (START, STOP, DELETE MY DATA): +91 72599 74251

Telephone: +91 98453 33350

We acknowledge privacy requests and grievances within 48 hours and resolve them within 30 days.

14 Changes to this policy

When we change this policy we publish the new version here with a new date and version number. If a change affects what you consented to, we will ask you again.

VersionDateChange
3.124 October 2026Website fonts now come from our own server: loading a page no longer sends your IP address to Google
3.024 October 2026Rewritten for the DPDP Act: all data sources, purposes and their basis, service providers, data outside India, retention, rights, cookies, languages
2.124 October 2026Single privacy contact; WhatsApp business number
2.02026First policy covering WhatsApp Business
Return to Homepage