Privacy Policy

RIMGURU Services Private Limited is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA). We respect your privacy rights and are committed to keeping your information secure, accurate, and confidential.

Last Updated: January 1, 2024

Data Protection Officer

Email: dpo@host4india.com

Address: C-24, Platina Heights, 7th Floor, C-Block, Sector 62, Noida, Uttar Pradesh 201307, India

For any questions about this policy or to exercise your privacy rights, contact our Data Protection Officer using the details above.

What Personal Data We Collect

We collect only the personal data necessary to provide our services. Personal data means any information that identifies you or can be used to identify you.

Account Information

  • Full name
  • Email address
  • Phone number
  • Company name (if applicable)
  • Billing address
  • GST number (if applicable)

Payment Information

  • Payment method details (processed by payment processors)
  • Billing history
  • Transaction records
  • Invoice details

We do not store complete credit card numbers. Payment processing is handled by PCI-DSS compliant third-party processors.

Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Operating system
  • Server access logs
  • Service usage data
  • Performance metrics

Communication Data

  • Support ticket messages
  • Email correspondence
  • Chat transcripts
  • Phone call records (when applicable)

Service Data

  • Domain names registered
  • Server configurations
  • Backup data
  • File uploads to your hosting account
  • Database content

Legal Basis for Processing Your Data

  • Contract Performance: we process data necessary to provide services you have purchased from us.
  • Legal Obligation: we process data to comply with Indian tax laws, accounting requirements, and court orders.
  • Legitimate Interest: we process data to prevent fraud, improve our services, and maintain security.
  • Consent: we process data for marketing communications only with your explicit consent, which you can withdraw anytime.

How We Use Your Personal Data

Service Delivery

  • Creating and managing your account
  • Provisioning hosting services
  • Processing payments and invoices
  • Providing technical support

Communication

  • Sending service notifications
  • Responding to inquiries
  • Providing updates about your services
  • Sending security alerts

Security & Compliance

  • Detecting and preventing fraud
  • Monitoring for security threats
  • Complying with legal obligations
  • Enforcing our terms of service

Improvement & Marketing

  • Analyzing service performance
  • Improving our products
  • Sending promotional offers (with consent)
  • Conducting customer surveys

Third Parties Who Receive Your Data

We share your data with trusted third-party service providers who help us deliver our services. All third parties are contractually bound to protect your data.

  • Payment Processors (Razorpay, PayU, Stripe, PayPal) — processing payments securely
  • Analytics (Google Analytics) — understanding website usage and improving user experience
  • Support Tools (Zoho Desk) — managing customer support tickets and communications

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

International Data Transfers

Some of our service providers (such as payment processors and analytics tools) may store or process your data outside India. When we transfer data internationally, we ensure:

  • The recipient country provides adequate data protection
  • We use Standard Contractual Clauses approved for data transfers
  • Service providers implement appropriate security safeguards
  • Transfers comply with DPDPA requirements

You have the right to obtain information about safeguards we use for international transfers. Contact our Data Protection Officer for details.

How Long We Keep Your Data

Active customer accountsDuration of service + 3 years
Inactive accounts (no active services)1 year, then deleted
Payment and invoice records7 years (tax law requirement)
Support tickets and communications2 years
Server logs and technical data90 days
Marketing consent recordsUntil consent is withdrawn
Backup data (if services availed)As per retention policy, then overwritten

After retention periods expire, we securely delete or anonymize your data. Some data may be retained longer if required by law or for legitimate legal purposes (such as dispute resolution).

Your Privacy Rights

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

  • Right to Access — request a copy of the personal data we hold about you.
  • Right to Correction — request correction of inaccurate or incomplete personal data.
  • Right to Erasure — request deletion of your personal data when no longer necessary, subject to legal retention obligations.
  • Right to Data Portability — request your data in a structured, machine-readable format.
  • Right to Withdraw Consent — withdraw consent for consent-based processing at any time.
  • Right to Grievance Redressal — file a complaint with our DPO, escalating to the Data Protection Board of India if unsatisfied.

How to Exercise Your Rights

Contact our Data Protection Officer at dpo@host4india.com with your full name and account email, the specific right you wish to exercise, details of your request, and proof of identity.

We will respond within 30 days. The first request per year is free; for excessive or repetitive requests, we may charge a reasonable administrative fee.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze usage, and deliver personalized content.

  • Essential Cookies — required for the website to function (session cookies, authentication tokens, security cookies). These cannot be disabled.
  • Analytics Cookies — help us understand how visitors use our website (Google Analytics, performance monitoring).
  • Marketing Cookies — track activity to show relevant advertisements (retargeting pixels, conversion tracking). These require your consent.

You can control cookies through your browser settings; disabling cookies may affect website functionality. To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on.

Data Security

Technical Measures

  • SSL/TLS encryption for data transmission
  • Encrypted data storage
  • Firewall protection
  • Regular security audits
  • Intrusion detection systems
  • Secure backup procedures

Organizational Measures

  • Access controls and authentication
  • Employee training on data protection
  • Confidentiality agreements with staff
  • Regular security reviews
  • Incident response procedures
  • Vendor security assessments

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify affected users within 72 hours via your registered email address
  • Report the breach to the Data Protection Board of India as required by law
  • Describe the nature of the breach and data affected
  • Explain the likely consequences and measures taken
  • Provide recommendations to protect yourself from potential harm

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent as required by DPDPA. If you believe your child has provided us with personal data without your consent, contact dpo@host4india.com and, upon verification, we will delete such information within 30 days.

Marketing Communications

We send marketing communications only with your explicit consent. You can opt out at any time by clicking "unsubscribe" in any marketing email, updating preferences in your account, contacting support@host4india.com, or replying "UNSUBSCRIBE". Opting out of marketing does not affect transactional emails (invoices, service notifications, security alerts).

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or services. For material changes we will update the "Last Updated" date, notify you via email, and post a notice on our website for 30 days. For significant changes, we may request your renewed consent. Continued use of our services after changes constitutes acceptance of the updated policy.

Complaints and Grievances

Step 1: Contact our Data Protection Officer at dpo@host4india.com. We will acknowledge within 3 business days and provide a resolution within 30 days.

Step 2: If you are not satisfied with our response, you can file a complaint with the Data Protection Board of India as established under DPDPA 2023.

Contact Information

Company: RIMGURU Services Private Limited

Email: dpo@host4india.com

Support Email: support@host4india.com

Registered Office: C-24, Platina Heights, 7th Floor, C-Block, Sector 62, Noida, Uttar Pradesh 201307, India

Effective Date: January 1, 2024
This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 and other applicable Indian laws.