Information we collect
We collect personal information you voluntarily provide, as well as data gathered automatically when you interact with our services or website.
Personal information
Automatically collected
- Device information — IP address, browser type, operating system
- Usage data — pages visited, time spent, features used
- Location data — general geographic location based on IP address
- Log information — access times, error logs, clickstream data
Sensitive personal information
In accordance with Indian law, we treat the following categories with enhanced protection measures — financial information (bank and card details), government identification numbers (PAN, Aadhaar), biometric information, and health information where relevant to service delivery.
How we use your information
We process your information for specific, defined purposes that enable us to deliver and improve our services.
- Service deliveryProviding and maintaining our services, processing transactions, and managing your account.
- Customer supportResponding to inquiries, troubleshooting issues, and providing technical assistance.
- Business operationsImproving our services, developing new features, and conducting internal research.
- MarketingSending promotional communications with your consent, personalised offers, and service updates.
- SecurityDetecting and preventing fraud, unauthorised activities, and security breaches.
- Legal complianceMeeting regulatory requirements, tax obligations, and responding to lawful requests.
- AnalyticsUnderstanding user behaviour, measuring performance, and optimising user experience.
Legal basis for processing
We process your personal information on one or more of the following legal grounds.
- Contractual necessityProcessing required to perform our contract with you.
- Legal obligationProcessing required to comply with Indian laws and regulations.
- Legitimate interestsProcessing for our legitimate business interests, balanced against your rights.
- ConsentProcessing based on your explicit consent, which you may withdraw at any time.
For sensitive personal information, we rely on explicit consent or specific legal requirements under Indian law.
Information sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances.
All third-party service providers who process personal information on our behalf are contractually obligated to implement appropriate security measures and use data only for purposes we specify.
International data transfers
Your personal information may be transferred to, stored, and processed in countries other than India where our service providers operate. We ensure appropriate safeguards are in place for all such transfers.
- Data transfer agreements incorporating standard contractual clauses
- Service providers located in countries with adequate data protection laws
- Additional security measures implemented for all cross-border transfers
By using our services, you consent to the transfer of your information to countries outside India, subject to the safeguards described in this policy.
Security measures
We implement comprehensive technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.
- End-to-end encryption for data in transit and encryption at rest
- Role-based access controls, multi-factor authentication, and least-privilege principles
- Firewalls, intrusion detection systems, and regular vulnerability assessments
- Secure data centres with 24/7 monitoring and physical access controls
- Regular internal and external security audits and penetration testing
- Documented incident response procedures and breach notification protocols
- Regular security awareness training and confidentiality agreements for all staff
Security notice — While we maintain robust security measures, no system is completely secure. We cannot guarantee absolute protection against all threats. In the event of a data breach, we will notify affected users and relevant authorities as required by Indian law.
Data retention
We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
| Data category | Retention period |
|---|---|
| Customer account data | 3 years after account closure |
| Transaction records | 7 years — Indian tax regulations |
| Marketing data | Until consent withdrawal or 2 years of inactivity |
| Support communications | 3 years after resolution |
| Website analytics | 26 months from last activity |
| Legal documents | 10 years or as required by law |
Your rights and choices
You have meaningful rights over your personal information. To exercise any of these rights, contact us at privacy@duotech.com — we will respond within 30 days as required by Indian law.
Verification — For security purposes, we may need to verify your identity before processing certain requests. We may decline requests that are frivolous, jeopardise others' privacy, or are extremely impractical. You may also lodge complaints with the relevant data protection authority in India.
Cookies and tracking
We use cookies and similar tracking technologies to operate our website and understand how it is used.
You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.
Children's privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly. Parents or guardians may contact us to review or request deletion of their child's information.
Changes to this policy
We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements.
- The updated policy will be posted on our website with a revised date
- Material changes will be communicated by email or prominent website notice
- Continued use of our services after changes constitutes acceptance
- Previous versions of this policy are available upon request
Contact us
If you have questions about this privacy policy or how we handle your personal information, please reach out through any of the following channels.