Privacy Policy

This Privacy Policy explains how Heptley Webworks (OPC) Private Limited (“Heptley”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards your information when you visit heptley.com, contact us, or use our services. We are committed to protecting your privacy and handling your personal data in accordance with the Information Technology Act, 2000, the applicable rules made thereunder, and the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.

1. Information We Collect

We collect the following categories of information:

• Information you provide: Your name, business name, email address, phone number, project requirements, and any details you share through our contact form, quote requests, newsletter sign-up, WhatsApp, email, or during the course of a project.
• Billing and transaction information: Details required to process a purchase, such as your billing name, address, and the amount paid. Card, UPI, net-banking, and wallet details are collected and processed directly by our third-party payment gateway and are not stored on our servers.
• Information collected automatically: When you visit our website we may collect your IP address, browser type, device information, pages viewed, and referring URLs through cookies and analytics tools, to keep the site secure and to improve it.

2. How We Use Your Information

We use the information we collect to:

• Respond to enquiries and provide quotes;
• Deliver, maintain, and support the services you have engaged us for;
• Process payments and issue invoices and receipts;
• Send project updates, service communications, and (where you have opted in) offers;
• Operate, secure, and improve our website and services; and
• Comply with legal, tax, and regulatory obligations.

We process your personal data on the basis of your consent and/or to perform the services you have requested. We do not sell your personal data to anyone.

3. Cookies and Analytics

Our website uses cookies and similar technologies to remember your preferences, keep the site functioning, and understand how it is used through anonymised analytics. You can control or disable cookies through your browser settings, though some parts of the site may not work as intended if you do.

4. How We Share Information

We do not sell or rent your personal data. We may share it only with:

• Service providers: Hosting providers, payment gateways, email and analytics tools — and only to the extent needed to perform their function;
• Professional advisers: Our accountants, auditors, and legal counsel bound by strict confidentiality; and
• Authorities: Where disclosure is required by law, court order, or to protect our legal rights, property, or safety.

5. Payment Processing

Online payments on our website are handled by a secure, PCI-DSS compliant third-party payment gateway. When you make a payment, your card, UPI, net-banking, or wallet details are transmitted directly to and processed by that gateway under their own security standards and privacy policy.

Heptley does not collect, see, or store your full card number, CVV, UPI PIN, or banking passwords. We receive only confirmation of the transaction and limited billing details needed to fulfil your order and meet tax requirements.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes set out in this policy, to provide our services, and to comply with legal, accounting, and tax obligations. When data is no longer required, we securely delete or anonymise it.

7. Data Security

We apply reasonable technical and organisational measures — including access controls, encryption in transit, and trusted service providers — to protect your information against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and while we work hard to protect your data, we cannot guarantee absolute security.

8. Your Rights (DPDP Act, 2023)

Subject to applicable law, including the DPDP Act, 2023, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data where it is no longer required;
• Withdraw consent you have previously given; and
• Raise a grievance about how your data is handled.

To exercise any of these rights, email us at hello@heptley.com. We may need to verify your identity before acting on a request.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to read their privacy policies.

10. Children

Our website and services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on our website with an updated “Last updated” date, and takes effect when posted.

12. Grievance Officer & Contact

For any questions, requests, or complaints regarding this policy or your personal data, you may contact our Grievance Officer at hello@heptley.com or via postal mail at our registered address below.