Privacy Notice

Last updated: 11 August 2026

This notice explains what personal data LoTeHIm Solutions collects through this website, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it.

We are established in India and this notice is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. In the language of that law, Piyush Kamra (sole proprietor), trading as LoTeHIm Solutions, is the Data Fiduciary and you are the Data Principal. Where you are located in the EU, the UK, the UAE or Saudi Arabia, the section on visitors outside India explains the additional rights we extend to you.

Who we are

• Entity: Piyush Kamra (sole proprietor), trading as LoTeHIm Solutions
• Registered address: Sector 48, Gurugram, Haryana, India 122001
• Contact: [email protected]

What we collect, and why

We collect only what we need to answer you and to run the website. Each item below is tied to the single purpose it serves.

If you submit the enquiry form

• Name, work email, company, country — so we can identify who is asking and reply to the right person.
• Company size and the description of your situation — so we can judge whether procurement is a real lever for you before the call, and prepare for it.

We ask for your agreement on the form before you send it. That agreement is the basis on which we process these details, and you can withdraw it at any time (see Your rights).

If you book a diagnostic call

• Name, email, and anything you type into the booking form — collected by Calendly on our behalf so the meeting can be scheduled and calendar invitations sent.

If you write to us directly

• Your email address and the contents of your message — so we can reply and keep a record of the conversation.

Automatically, when you visit

• Server logs — IP address, browser and device type, pages requested, date and time, and the referring page. These are generated by our web server, are needed to keep the site available and secure, and are used for no other purpose.
• Analytics — if and when we enable website analytics, this notice will name the provider and describe what is measured before any non-essential measurement is switched on.

Cookies and tracking

This website sets no advertising cookies and no cross-site tracking cookies. We do not run advertising pixels and we do not build profiles of visitors.

Two things about the site do involve a third party in your browser:

• Web fonts are requested from Google Fonts each time a page loads, which means Google LLC receives your IP address and basic browser and device information in order to return the typefaces. That request is made by your browser directly to Google; we do not send Google anything else about you, and we do not use the fonts to identify or track you. Google may process this information on servers outside India — see Google’s privacy policy. If you would prefer to avoid it entirely, a content blocker that blocks fonts.googleapis.com and fonts.gstatic.com will stop the request; the site remains fully readable in a fallback typeface.
• The booking button takes you to Calendly, which is a separate service with its own privacy notice. Nothing is sent to Calendly until you click through.

If we later add analytics or any non-essential cookie, we will ask for your agreement first, make refusing as easy as accepting, and will not make any part of the site conditional on you agreeing.

Who we share it with

We do not sell personal data and we do not share it for anyone else's marketing. We use a small number of service providers who process data only on our instructions and only for the service they provide:

• Calendly — scheduling of diagnostic calls.
• Google Fonts (Google LLC, United States) — delivery of typefaces. Receives your IP address and basic browser and device information on page load, and nothing else.
• Our website hosting and email providers — Amazon Web Services (website hosting) and Microsoft (email).

We will also disclose personal data where we are legally required to, or where it is necessary to establish or defend a legal claim.

Transfers outside India

Some of the providers above process data on servers outside India. Where that happens we rely on the provider's contractual data-protection commitments, and we transfer only what the service requires. We do not transfer personal data to any territory that the Central Government has restricted under the DPDP Act.

How long we keep it

• Enquiries that do not lead to a conversation: deleted within 24 months of your last contact with us.
• Enquiries that lead to a client relationship: retained for the duration of the engagement and then for as long as tax, accounting and contractual record-keeping law requires.
• Server logs: retained for 90 days, then deleted.

If you ask us to erase your data earlier, we will, unless we are required by law to keep it.

Your rights

As a Data Principal under the DPDP Act you can ask us to:

• Tell you what we hold — a summary of your personal data and how it is being processed, and who we have shared it with.
• Correct or complete it — if anything we hold about you is wrong or out of date.
• Erase it — unless we are required to keep it for a legal purpose.
• Withdraw your agreement — at any time, as easily as you gave it. Write to us and we will stop processing and delete what we hold. Withdrawing does not undo anything we lawfully did before you withdrew.
• Nominate someone — to exercise these rights on your behalf in the event of your death or incapacity.
• Raise a grievance — see below.

Send any of these requests to [email protected]. We acknowledge within 3 working days and complete the request within 7 working days. If we cannot act on a request, we will tell you why and on what legal ground.

Grievance Officer

If you are unhappy with how we have handled your personal data or a request about it, contact our Grievance Officer:

• Name: Piyush Kamra
• Designation: Founder and Grievance Officer
• Email: [email protected]
• Address: Sector 48, Gurugram, Haryana, India 122001

We acknowledge grievances within 3 working days and aim to resolve them within 30 days. If you are not satisfied with the outcome, you may complain to the Data Protection Board of India.

Visitors outside India

We market to clients in the UAE, Saudi Arabia, Europe and the United States, so some visitors are covered by other laws.

• EU and UK (GDPR): we process enquiry data on the basis of your consent and our legitimate interest in responding to business enquiries. You additionally have the right to object, the right to restrict processing, the right to data portability, and the right to complain to your national supervisory authority.
• UAE (Federal Decree-Law 45/2021): you have equivalent rights of access, correction, erasure, restriction and objection, and the right to withdraw consent.
• Saudi Arabia (PDPL): you have rights of access, correction, destruction and withdrawal of consent, exercisable through the contact above.

Use the same contact address for any of these. We do not apply a lower standard depending on where you are.

Security

Enquiry data is transmitted over TLS, stored on access-controlled systems, and is available only to the people who need it to respond to you. If a breach affecting your personal data occurs, we will notify you and the Data Protection Board of India in the manner and within the timelines the DPDP Rules require.

Children

This is a business-to-business website. It is not directed at children and we do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, write to us and we will delete it.

Client and engagement data

Personal data and confidential business information processed during a client engagement is governed by the engagement agreement and the solution design agreed with that client, including approved systems, access controls, retention periods and deletion obligations. That agreement, not this notice, governs those datasets. Our approach to data used in AI-assisted delivery is set out on the Data handling page.

Changes to this notice

If we change how we use personal data, we will update this page and change the date at the top. Where the change is material, we will say what changed.

Contact

Questions about this notice go to [email protected].