Effective Date: [Sep 19, 2024] | Last Updated: [Mar 16, 2025]

1. Purpose and Governance

AltiusNxt Technologies (“we”, “our”, or “us”), a provider of eCommerce product data enrichment, PIM solutions, and web store development, processes personal data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act). It aligns with applicable Indian laws (Information Technology Act, 2000, and SPDI Rules) and global best practices, including GDPR principles. This policy applies to all digital platforms, including websites, client portals, and APIs.

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Categories Collected

• Professional Data: Client names, job titles, email addresses, and project specifications.
• Technical Data: IP addresses, device identifiers, and cookies (strictly for session management).
• Usage Data: Website pages visited, Time spent

2.2 Exclusion of Sensitive Data

We do not process:

• Financial credentials, health records, or biometric data.
• Data from individuals under 18 years without parental consent.

3. Legal Grounds for Processing

BasisApplication

Consent	Newsletters, demo requests, and optional analytics.
Contract	Service delivery, client onboarding, and invoicing.
Legal Compliance	Tax filings, audit trails, and regulatory responses.
Legitimate Interest	Fraud prevention and service optimization.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Authorized service providers under strict confidentiality.
• Regulatory authorities, if legally required
• Affiliates or business partners for legitimate business purposes

5. Data Security

We maintain strong data protection controls aligned with ISO 27001:2022 (Information Security) and ISO 9001:2015 (Quality Management) by TUV Austria. Appropriate administrative, technical, and physical safeguards include:

• Technical: AES-256 encryption, multi-factor authentication, and intrusion detection systems.
• Access restrictions and encryption protocols
• Regular audits and vulnerability assessments

6. Data Principal Rights

• Access, correct, or delete your personal data.
• Withdraw consent at any time (where processing is based on consent)
• Object to or restrict data processing in certain circumstances.
• Lodge a complaint with a relevant data protection authority.

7. International Data Transfers

• Current Practice: All data processed within India.
• Future Compliance: Will implement DPDP-prescribed safeguards (e.g., contractual clauses) for cross-border transfers.

8. Children’s Privacy

• Prohibition: Services are not designed for users under 18.
• Deletion Protocol: Inadvertently collected minor data is purged within 48 hours of verification.

9. Policy Updates

• Notice Period: Material changes communicated via email/website 30 days in advance.
• User Rights: Continued service use constitutes acceptance; users may terminate agreements if terms are unacceptable.

10. Cookies and Tracking

We may use cookies and similar technologies to enhance your experience. You can manage your cookie preferences through your browser settings.