Privacy Policy

1. Who we are

iSecNet Solutions Pvt. Ltd. ("iSecNet", "we", "us") is a DPIIT-recognised, ISO 27001:2022 certified cybersecurity firm based in Hyderabad, Telangana, India. We are the Data Fiduciary for personal data you submit through this website. You can reach our privacy contact at parveen@isecnetsolution.com.

2. What we collect and why

We collect only the minimum personal data needed to respond to you. The following table lists every data point, where it is collected, and why.

We do not collect your IP address, user-agent, location, or any other passive identifier. We do not use marketing pixels (Meta, LinkedIn Insight, etc.).

3. Cookies we use

• Essential (always on): isecnet_admin_session — only set when you log into the admin panel. Signed, HTTP-only, SameSite=Strict. Expires when you close the browser.
• Essential (always on): isecnet_cookie_consent_v1 (localStorage) — remembers your cookie choice for 1 year.
• Analytics (consent-gated): Google Tag Manager / Google Analytics cookies (_ga, _gid) — only loaded after you click "Accept all". You can change your choice any time via Cookie Preferences.

4. Third parties we share data with

We use a small number of processors to deliver our services. Each is listed below with its role and privacy policy.

• Hostinger (hosting + email infrastructure): stores the database and delivers transactional email (contact replies, application confirmations). Hostinger Privacy Policy
• Google (Tag Manager, Analytics, Fonts): page analytics and font delivery. Only loaded after you accept cookies; fonts are loaded from Google's CDN on every page. Google Privacy Policy
• Cloudflare (Font Awesome CDN): icon font delivery. Cloudflare Privacy Policy
• WhatsApp / Meta (chat widget): if you click the floating WhatsApp button, a chat session is opened with Meta. We receive whatever message you send. WhatsApp Privacy Policy

We do not sell your data, trade it, or use it for any purpose beyond responding to you.

5. How long we keep your data

• Contact form submissions: retained for 12 months after the last interaction, then permanently deleted.
• Career applications: retained for 18 months after the hiring decision, then permanently deleted. If you are hired, your record moves to our HR system under a separate policy.
• Analytics data: aggregated in Google Analytics and retained per Google's default (14 months). We do not export or store identifiable analytics data.

You may request earlier deletion at any time — see section 7.

6. How we keep your data safe

As a cybersecurity firm, we hold ourselves to higher standards than we'd require from our own clients. Measures include: TLS-encrypted transit, encrypted-at-rest database on Hostinger, password hashing (bcrypt with per-user salt), signed session cookies, application-layer rate limiting, and strict input validation. Access to production data is limited to a single administrator. We do not transfer your data outside India except via our hosting providers (Hostinger, Google, Cloudflare) as listed in section 4.

7. Your rights under DPDP

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or outdated data.
• Erase your data (right to be forgotten).
• Withdraw consent at any time (for cookie-based analytics, use Cookie Preferences).
• Nominate another person to exercise these rights if you become incapable of doing so.
• Grievance redressal — complain to our Grievance Officer (below) and, if unresolved, escalate to the Data Protection Board of India.

To exercise any of these rights, email parveen@isecnetsolution.com with the subject "DPDP Request" and enough information for us to verify your identity (the email address or phone number you used to contact us is usually enough). We will respond within 30 days.

8. Children's data

Our services are intended for business contacts and working professionals. We do not knowingly collect personal data from anyone under 18. If you are a minor applying for a role, please ask a parent or guardian to submit on your behalf. If you believe we have unintentionally collected data from a minor, email parveen@isecnetsolution.com and we will delete it promptly.

9. Grievance Officer

In accordance with the DPDP Act, 2023 and the Information Technology Act, 2000, our designated contact for data-protection queries and complaints is:

10. Changes to this policy

We may update this Privacy Policy as our services or applicable law change. The "Last updated" date at the top reflects the most recent revision. Significant changes will be announced on this page. Continued use of the site after an update constitutes acceptance of the revised policy.