Who we are
This website, kreonsolutions.com, is run by Kreon Solutions, a sole proprietorship atOffice 501, 5th floor, Mani Mahal, 356 Kalbadevi Road, Marine Lines (E), Mumbai 400002, India (“Kreon”, “we”, “us”). For the personal data described here we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and the controller under the UK and EU General Data Protection Regulation.
What we collect, why, and on what basis
| Personal data | Purpose | Service | Basis |
|---|---|---|---|
| Name, company, phone number, email address, the details of your enquiry | Replying to you, discussing and quoting for a project | Answering business enquiries | You gave it to us for this purpose (DPDP Act, section 7(a)); your consent |
| Contracts, invoices and correspondence with clients | Delivering and supporting a project; tax and accounting | Software projects and support | Our contract with you; legal obligations |
| IP address, browser, pages requested, time (website logs) | Keeping the site running, secure and free of abuse; investigating incidents | This website | Legitimate uses permitted by law, including security |
| Pages visited, device type, approximate location, from Google Analytics 4 | Understanding which pages are useful and improving the site | This website | Your consent in the cookie banner |
| CVs and application details | Considering you for a role | Hiring | Your consent; you can withdraw it at any time |
The project form on this site stores nothing. Pressing send opens WhatsApp with your message filled in, and nothing reaches us until you send it there. Optional cookies load only if you accept them; see the cookie policy.
We do not ask for financial, health, biometric or government identity information through this website. We do not sell personal data, and we do not use it for automated decisions about you.
Children
This site is meant for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.
Who we share it with
- Service providers (Data Processors) who help us operate: website hosting, email (Microsoft 365), and WhatsApp (Meta) when you message us there. They may use the data only to provide their service to us, under contract.
- Analytics and advertising providers listed in the cookie policy, only if you accept those cookies.
- Authorities, only when Indian law requires it.
Some providers process data outside India, including in the United States and the European Union. The DPDP Act allows such transfers except to countries the Government of India restricts. Where the GDPR applies, transfers rely on adequacy decisions or standard contractual clauses.
How long we keep it
- Enquiries that do not become projects: up to 2 years from our last contact, then erased.
- Client records: while we work together, then as long as tax and accounting law requires.
- Job applications: up to 1 year, unless you ask us to delete them sooner.
- Website logs: at least 1 year, as the DPDP Rules require, so that security incidents can be investigated; then erased.
- Your cookie choice: 12 months, or until we change this policy, then we ask again.
When you withdraw consent, or the purpose is complete, we erase the data unless a law requires us to keep it.
Your rights
Under the DPDP Act you can ask us to:
- Access: give you a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- Correct and update it, or complete it if it is incomplete;
- Erase it, unless the law requires us to keep it;
- Withdraw consent at any time, as easily as you gave it. For cookies, use “Cookie settings” at the foot of any page. Withdrawal does not affect what was done before it;
- Nominate another person to exercise these rights for you in case of death or incapacity;
- Raise a grievance with us, and then with the Data Protection Board of India.
If the GDPR applies to you, you can also restrict or object to processing, and receive your data in a portable format.
To use any of these rights, contact our grievance officer below. We may ask you to confirm your identity first. We aim to reply within 30 days, and in every case within the 90 days the DPDP Rules allow.
Grievance officer
Mitesh, Kreon Solutions, answers all questions, requests and complaints about personal data:
- Email: mi•••@kreonsolutions.com Show
- Phone: +91 70216 ••••• Show (Mon to Sat, 11:00 am to 7:00 pm IST)
- WhatsApp: message us
- Post: Kreon Solutions, Office 501, 5th floor, Mani Mahal, 356 Kalbadevi Road, Marine Lines (E), Mumbai 400002, India
If you are not satisfied with our answer, you can complain to the Data Protection Board of India. In the UK or EU, you can complain to your data protection authority.
How we protect it
We use encrypted connections, access limited to the people who need it, and logging that lets us detect misuse. Our providers must keep equivalent safeguards. No system is perfectly secure. To report a weakness, see responsible disclosure.
If there is a breach
If personal data we hold is exposed, we will tell the people affected without delay: what happened, the likely consequences, what we are doing about it and what they can do. We will inform the Data Protection Board of India without delay and send it a full report within 72 hours, and report cyber incidents to CERT-In as Indian law requires.
Data in systems we build for clients
When we build or support software for a client, the personal data inside it belongs to the client. We are their Data Processor: we handle it only on their instructions, under our contract with them, and their privacy policy applies. Some client apps have their own privacy policies hosted on this site.
Language
This notice is in English. If you would like it in Hindi, Marathi, Gujarati or any other language listed in the Eighth Schedule to the Constitution of India, ask our grievance officer and we will provide it.
Changes
We will update this page when our practices change and show the date at the top. If a change affects what you agreed to, we will ask for your consent again. To learn more about the law itself, read our guide to the DPDP Act.