What we collect
Your contact details and what you send us: WhatsApp and e-mail messages, enquiries, orders, invoices, and visiting cards you hand us.
Why
To answer you, deliver our work, invoice and meet the law. Offers and campaigns only with your consent.
You decide
On WhatsApp send START, YES PROMO, STOP PROMO, STOP or DELETE MY DATA to +91 72599 74251.
Where it is kept
On our own server in Bangalore. A few named service providers help us (section 5). We never sell your data.
In short, on WhatsApp: when you write to us we use your number and messages to reply. We send you updates only after you send START, and offers only after you send YES PROMO. STOP ends all WhatsApp messages from us; STOP PROMO ends only offers.
1 Who we are
Certain Systems, a proprietorship in Bangalore, Karnataka, India, provides engineering, embedded-systems and IT software services and runs certainsystems.in. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary: we decide why and how your personal data is used.
- Proprietor: Gangatharan J
- GSTIN: 29ADPPG1805P1Z2
- Privacy contact: [email protected] (details in section 13)
2 What we collect
| From | Data |
|---|---|
| Your mobile number, WhatsApp profile name, the messages, photos and documents you send, delivery and read status. | |
| Your e-mail address, name and the messages you send. | |
| Customers and suppliers | Name, company, designation, GSTIN, address, phone, e-mail, enquiries, quotations, orders, invoices and payments. |
| Events and expos | Visiting cards you hand us: name, company, designation, phone, e-mail, address. |
| Our staff's records | Bills and receipts our staff submit, which may show the issuer's contact details. |
| This website | Technical data every visit needs (IP address, browser). With your consent: Google Analytics statistics (section 11). |
We do not ask for passwords, OTPs, card numbers or government ID numbers on WhatsApp or e-mail. Please do not send them.
3 Why we use it, and on what basis
| Purpose | Basis under the DPDP Act |
|---|---|
| Answering your questions, quotations, technical discussions, support | You contacted us for this (legitimate use, Section 7(a)) |
| Delivering projects, orders, invoices, payments, GST and tax records | Our contract with you, and our legal obligations |
| Following up on a conversation we had at an event (from your visiting card) | The purpose you gave us the card for (legitimate use). Not marketing |
| WhatsApp updates about your orders and requests | Your consent: send START (Meta also requires this opt-in) |
| Offers, news and campaigns by WhatsApp or e-mail | Only with your consent: YES PROMO on WhatsApp, or subscribing by e-mail. A visiting card alone is not consent |
| Website statistics (Google Analytics) | Your consent in the cookie banner |
| Security, preventing misuse, meeting legal requests | Legal obligations and legitimate use |
4 Your consent and how to change it
Withdrawing consent is as easy as giving it. Send these words to our WhatsApp number +91 72599 74251; you get a confirmation each time:
| Send | Effect |
|---|---|
| START | Receive WhatsApp updates about your orders and requests |
| YES PROMO | Also receive offers and news |
| STOP PROMO | Stop offers and news; order updates continue |
| STOP (or UNSUBSCRIBE) | Stop all WhatsApp messages from us |
| DELETE MY DATA | Ask us to delete your data (section 9) |
| PRIVACY | Receive the link to this policy |
For e-mail, use the unsubscribe link in our mails or write "unsubscribe" to [email protected]. For the website, use Cookie settings. A withdrawal applies from then on; it does not undo what was lawfully done before. We keep a record of each consent and withdrawal, with the version of this policy shown at the time, as proof that we respected your choice.
5 Who processes your data for us
We never sell or rent your personal data. These service providers (Data Processors) handle it only to provide their service to us:
| Provider | What for | Data involved |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Sending and receiving WhatsApp messages | Mobile number, profile name, messages and media |
| Cloudflare | Secure connection, protection and login for our website and business systems | All traffic to our website and systems, including IP addresses |
| E-mail (Google Workspace), and Google Analytics if you allow it | E-mails; with your consent, visit statistics (including your IP address and a cookie ID) | |
| Telegram | Internal tool: our staff send bills, receipts and visiting cards to our own system | The contents of those documents |
We also disclose data when Indian law, a court or an authorised government agency requires it.
6 Data outside India
Meta, Google, Cloudflare and Telegram may store or process data on servers outside India. The DPDP Act allows this except to countries the Government of India restricts; we will follow any such restriction.
7 Where we keep it and how we protect it
- Our business system (ERPNext) and its database run on a self-hosted server at our premises in Bangalore.
- All connections are encrypted (TLS). Only authorised people can open our business systems, after a sign-in with a one-time code.
- Messages from WhatsApp are accepted only when Meta's digital signature on them is valid.
- Backups are encrypted and kept on a separate disk.
- If a personal data breach happens, we will inform the affected people and the Data Protection Board of India as the DPDP Rules require.
8 How long we keep it
| Data | Kept for |
|---|---|
| Text of WhatsApp and e-mail conversations | Deleted automatically 3 years after each message |
| Record that a message was exchanged (number, date) and your consent history | As long as we need to prove we respected your choices |
| Invoices, orders and payment records | As tax law requires: GST 72 months, Income Tax 8 years |
| Contacts and visiting-card details | Reviewed every year; deleted when there has been no contact for 3 years, or earlier on request |
| Google Analytics statistics | As set in our Analytics account, at most 14 months |
9 Your rights
- Access: a summary of the personal data we hold about you, what we do with it and with whom we share it.
- Correction and update: fix or complete your data.
- Erasure: delete your data. Records the law makes us keep (such as GST invoices) are kept but used for nothing else, and we tell you what was kept and why.
- Withdraw consent at any time (section 4).
- Grievance: complain to us about how we handle your data.
- Nominate a person who may use these rights for you in case of death or incapacity.
How: send DELETE MY DATA (or your request) on WhatsApp to +91 72599 74251, or e-mail [email protected]. A request from your own WhatsApp number or e-mail address is treated as coming from you; otherwise we may ask you to confirm. We acknowledge within 48 hours and answer within 30 days.
If you are not satisfied with our answer to a grievance, you may complain to the Data Protection Board of India.
10 Children
Our services are for businesses and adults (18 years or older). We do not knowingly collect data from children. If you believe a child has sent us personal data, tell us and we will delete it.
11 Cookies on this website
- Necessary: your cookie choice, stored in your browser, and security checks by Cloudflare. Always on.
- Analytics (only if you allow): Google Analytics cookies to count visits and see which pages are used.
We ask once and remember your choice in your browser. We ask again only if we change what we use cookies for. Change your choice at any time: Cookie settings.
12 Languages
This policy is available in English, ಕನ್ನಡ, தமிழ் and हिन्दी. It is available in any other language of the Eighth Schedule of the Constitution on request to [email protected]. If the versions differ, the English version applies.
13 Contact and grievance officer
Grievance and Data Protection Contact
Name: Gangatharan J, Proprietor
Organisation: Certain Systems, Bangalore, Karnataka, India
E-mail: [email protected]
WhatsApp (START, STOP, DELETE MY DATA): +91 72599 74251
Telephone: +91 98453 33350
We acknowledge privacy requests and grievances within 48 hours and resolve them within 30 days.
14 Changes to this policy
When we change this policy we publish the new version here with a new date and version number. If a change affects what you consented to, we will ask you again.
| Version | Date | Change |
|---|---|---|
| 3.1 | 24 October 2026 | Website fonts now come from our own server: loading a page no longer sends your IP address to Google |
| 3.0 | 24 October 2026 | Rewritten for the DPDP Act: all data sources, purposes and their basis, service providers, data outside India, retention, rights, cookies, languages |
| 2.1 | 24 October 2026 | Single privacy contact; WhatsApp business number |
| 2.0 | 2026 | First policy covering WhatsApp Business |