Privacy Policy

This Privacy Policy explains how Adormax (“Adormax”, “we”, “us”) collects, uses, stores, shares and protects personal data when you visit adormax.com, submit an enquiry, message us on WhatsApp, or engage us for services.

It is written to meet the requirements of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).

1. Who we are

Under the DPDP Act we are the Data Fiduciary for the personal data described in this policy — that is, we decide why and how it is processed. You are the Data Principal.

2. Personal data we collect

We collect only what we need in order to reply to you and deliver the services you engage us for.

2.1 Data you give us directly

• Contact details — your name, email address, and phone or WhatsApp number.
• Business details — company name, the service you are interested in, and an indicative budget range, where you choose to provide them.
• Enquiry content — whatever you write in the message field of our contact form, or send us by email or WhatsApp.
• Consent record — the fact that you ticked the consent box, together with the date, time and IP address at which you did so. We keep this because the DPDP Act requires us to be able to demonstrate that consent was given.

2.2 Data collected automatically

• Technical data — IP address, browser type and version, device type, operating system, referring URL, and the pages you viewed.
• Usage data — how you arrived at the site, which pages you visited, and how long you stayed, collected through analytics as described in section 7.

2.3 Data we collect during a client engagement

If you engage us for services, we may additionally process billing details, access credentials you provide for systems we are asked to work on, and any content you supply for your website or application. Credentials are handled as described in section 9 and are deleted at the end of the engagement.

2.4 What we do not collect

We do not ask for, and you should never send us, financial account passwords, card numbers, CVV codes, Aadhaar numbers, biometric data, health information, or any other sensitive personal data not required for the service. Our contact form explicitly warns against this. If you send such information anyway, we will delete it.

3. Why we process your data

We do not sell your personal data, rent it, or share it with advertisers. We do not use your enquiry data to build marketing profiles, and we do not add you to a mailing list because you contacted us.

4. Consent and legal basis

We process your personal data on the basis of the consent you give when you tick the consent box on our contact form, or when you message us voluntarily by email, phone or WhatsApp.

Where processing is necessary for a purpose that the DPDP Act treats as a legitimate use — for example, complying with a legal obligation such as tax record-keeping, or responding to a lawful order — we rely on that basis instead.

Consent is requested in clear language, at the point of collection, and is never bundled with anything else. You are never required to consent to marketing in order to receive a reply to a business enquiry.

5. WhatsApp Business API and messaging

Adormax uses the WhatsApp Business Platform, operated by Meta Platforms, Inc. and its affiliates, to communicate with clients and enquirers. This section explains what that means for your data.

• We message you only after you opt in. Opt-in happens when you tick the consent box on our contact form, message us first on WhatsApp, or give explicit permission in writing. We do not purchase phone number lists and we do not send unsolicited WhatsApp messages.
• What we send. Acknowledgement of your enquiry, project updates, appointment reminders, documents relevant to your engagement, and replies to your questions. We do not send promotional broadcasts unless you have separately and explicitly opted in to receive them.
• Data shared with Meta. To deliver a message we transmit your phone number and message content through the WhatsApp Business Platform. Meta processes this data as an independent controller under its own terms. Please refer to the WhatsApp Business Data Transfer Addendum and the WhatsApp Privacy Policy.
• Business Solution Providers. We may route WhatsApp messages through a Meta-authorised Business Solution Provider. Any such provider is bound by contract to process data only on our instructions and to apply appropriate security measures.
• Opting out. Reply STOP to any WhatsApp message from us, or email support@adormax.com, and we will stop messaging you on WhatsApp. This does not prevent us from replying to a message you send us afterwards.
• Other third-party APIs. Where we integrate a third-party API on your behalf as part of a project — a CRM, a payment gateway, an email service — that provider processes data under its own terms, and we will name the provider in your project scope document before integration begins.

6. Who we share data with

We share personal data only in the following circumstances, and only to the extent necessary:

• Hosting and email providers that store our website data and deliver our email.
• Meta Platforms and authorised WhatsApp Business Solution Providers, as described in section 5.
• Analytics providers, as described in section 7.
• Professional advisers — accountants and legal advisers — where required.
• Government authorities, courts or law enforcement, where we are legally required to disclose.

Every service provider we use is engaged under a contract that limits them to processing data on our instructions. We do not authorise any of them to use your data for their own purposes.

7. Cookies and analytics

This website does not use advertising cookies, tracking pixels, or cross-site behavioural profiling.

We use Google Analytics 4 and Google Search Console to understand aggregate traffic patterns — how many people visit, which pages they read, and which search queries bring them here. Analytics is configured with IP anonymisation, and we do not use it to identify individual visitors. You can opt out entirely using the Google Analytics Opt-out Browser Add-on, or by enabling “Do Not Track” in your browser.

A small number of strictly necessary cookies may be set to keep the site functioning correctly. These do not track you across other websites.

8. How long we keep data

When a retention period ends, data is deleted or irreversibly anonymised. If you ask us to erase your data sooner, we will do so except where we are legally required to keep it.

9. How we protect data

We follow reasonable security practices and procedures as required by Rule 8 of the SPDI Rules and section 8(5) of the DPDP Act, proportionate to the nature of the data we hold:

• All traffic to adormax.com is encrypted over HTTPS with a valid TLS certificate.
• Enquiry records are stored outside the publicly accessible area of the web server.
• Access is limited to the members of our team who need it to do their work.
• Client credentials are stored in an encrypted password manager, never in plain text, email or chat.
• Our contact form uses server-side validation, rate limiting, and spam protection.
• Software and dependencies are kept patched.

No system is perfectly secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India without undue delay, as required by the DPDP Act.

10. Your rights as a Data Principal

Under the DPDP Act you have the following rights, and we will act on any of them free of charge:

• Right to access — ask for a summary of the personal data we hold about you, what we are doing with it, and who we have shared it with.
• Right to correction — have inaccurate or incomplete data corrected, completed, or updated.
• Right to erasure — ask us to delete your personal data where we no longer need it for the purpose it was collected, and where no law requires us to retain it.
• Right to grievance redressal — raise a complaint with our Grievance Officer, as set out in section 14.
• Right to nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any right, email support@adormax.com with the subject line “Data Principal Request”. We will acknowledge within 48 hours and respond substantively within 30 days. We may ask you to verify your identity before we act, so that we do not disclose your data to someone else.

11. Withdrawing consent

Withdrawing consent is as easy as giving it. Email support@adormax.com with the subject line “Withdraw Consent”, or reply STOP to any WhatsApp message from us. No explanation is required and no fee applies.

Once you withdraw consent we will stop processing your data for the purposes it covered, and delete it unless we are legally required to keep it. Withdrawal does not affect the lawfulness of processing that happened before you withdrew, and it may mean we can no longer provide a service you have asked for.

12. Children’s data

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data of any individual under 18 years of age. Where we become aware that we hold such data without verifiable parental consent, we will delete it. Consistent with section 9 of the DPDP Act, we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

13. Cross-border transfers

Some of the service providers we rely on — including hosting, email, analytics, and the WhatsApp Business Platform — process data on servers located outside India. Where personal data is transferred outside India, we do so in accordance with section 16 of the DPDP Act and only to countries not restricted by the Central Government, and we require appropriate contractual safeguards from each provider.

14. Grievance redressal

In accordance with Rule 5(9) of the SPDI Rules and section 13 of the DPDP Act, we have appointed a Grievance Officer. If you are unhappy with how we have handled your personal data, contact them first:

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India established under the DPDP Act.

15. Changes to this policy

We may update this policy as our services or the law change. The “last updated” date at the top of this page always reflects the current version. Where a change materially affects how we handle your data, we will notify you by email or WhatsApp before it takes effect, and — where the change requires it — ask for fresh consent.

Questions about this policy? Email support@adormax.com or call +91 81918 06038.