In short
- We collect only what we need to answer enquiries, deliver projects and support the systems we build.
- We never sell personal data.
- Data stored in the software we build for you (for example, your customers or cable subscribers) belongs to you. We process it only on your instructions.
- You can ask to see, correct or delete your data at any time by writing to our grievance officer.
Overview
This policy is issued by Bela Enterprises, which owns and operates the Nandhika brand and nandhika.in (“Nandhika”, “we”, “us”, “our”). It applies to personal data we handle through our website, during sales and project work, and in the hosted software, websites and business solutions we provide.
We follow the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 and the rules made under them.
Data we collect
Data you give us
- Contact details: name, business name, email, phone number and address, when you enquire, request a quote or sign up.
- Project information: details about your business processes, requirements and feedback.
- Billing details: GSTIN, billing address and payment records. Card and UPI payments are handled by our payment partners; we do not store full card numbers.
- Account details: usernames and roles for people who log in to systems we provide.
- Support messages: the content of tickets, emails, calls and chats with our team.
Data collected automatically
- Usage and device data: IP address, browser type, device, pages visited and time spent on our website.
- System logs: sign-in times, actions and error logs in hosted solutions, used for security and troubleshooting.
How we use your data
- to reply to enquiries and prepare quotes;
- to design, build, deliver, host and support your software or website;
- to manage billing, invoicing and tax records;
- to keep our systems secure and to detect and prevent fraud or misuse;
- to improve our website, products and services;
- to send service updates, and, if you agree, news about our products (you can opt out at any time);
- to meet our legal obligations.
Consent and legal basis
We process personal data with your consent, which you give when you submit your details or agree to this policy, or for legitimate uses allowed by the DPDP Act. These include fulfilling a service you asked for, meeting legal requirements, and responding to emergencies.
You may withdraw consent at any time by writing to us. Withdrawing consent does not affect processing that has already happened. It may mean we can no longer provide some services.
Data we process for clients
Our clients use our software to store data about their own customers, for example POS customers, account holders, ticket requesters or cable network subscribers. For this data:
- the client decides what is collected and why, and acts as the Data Fiduciary;
- we act as a Data Processor and handle it only to provide and support the service, under the client's instructions and our agreement with them;
- we do not use client data for our own marketing, and we do not sell it.
If you are a customer of one of our clients and have a question about your data, please contact that business first. We will help them respond.
How we protect data
We use reasonable security safeguards to protect personal data, including:
- encrypted connections (HTTPS) and encryption of sensitive data where appropriate;
- role-based access, so people see only the data they need;
- regular backups, updates and security monitoring;
- confidentiality commitments from our staff and service providers.
No system can be guaranteed completely secure. If a personal data breach occurs, we will inform affected clients, the Data Protection Board of India and affected individuals as the law requires.
How long we keep data
- Enquiries that do not lead to a project are kept for up to 24 months.
- Client and billing records are kept for as long as tax and accounting laws require, generally 8 years.
- Data in hosted solutions is kept while the client's agreement is active. After it ends, we return or delete it as described in our Terms & Conditions.
- Security logs are kept for up to 12 months, or longer where the law requires.
Your rights
Under the DPDP Act you have the right to:
- access a summary of the personal data we hold about you and how it is processed;
- correct, complete or update inaccurate or incomplete data;
- erase data that is no longer needed, unless we must keep it by law;
- withdraw consent at any time;
- nominate another person to exercise your rights in case of death or incapacity;
- raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.
To use any of these rights, contact our grievance officer (below). We may need to confirm your identity first. We aim to respond within 30 days.
Children's data
Our website and services are meant for businesses and are not directed at children under 18. We do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Storage and transfers
We store data on servers located in India wherever possible. Some service providers may process data in other countries. When this happens, we make sure the transfer is allowed under Indian law and that the data stays protected to the standard described in this policy.
Grievance officer
For questions, requests or complaints about your personal data, contact:
Grievance Officer: [name]
Email: support@nandhika.in
Phone: +91 90385 92023
Address: Krishnapur, Deypara, Garalgacha, Chanditala, Hooghly, West Bengal – 712708
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.
Changes to this policy
We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. If we make significant changes, we will tell active clients by email and, where needed, ask for fresh consent.