Trust Centre

Privacy and data protection

How HMR Infotech handles personal data under the DPDP Act 2023 and GDPR.

Version 1.0 · Last reviewed 2026-09-27

This page explains how HMR Infotech handles personal data in two roles: when you use our website, and when we work on a client's systems.

On our website

HMR Infotech Private Limited decides how the data you send through our forms is used, so we are the Data Fiduciary under India's Digital Personal Data Protection Act 2023 and the controller under the GDPR. Our Privacy notice sets out what we collect, why, who handles it for us, where, and for how long.

On client projects

When we work on a client's systems, the client decides how its data is used. We act as the client's Data Processor and handle personal data only on its documented instructions, under a data processing agreement signed before work starts. In practice this means:

  • We process client personal data only for the engagement, and only the fields the work needs.
  • Our people are bound by confidentiality, and only those assigned to the engagement get access.
  • We do not use client data to train AI models, and we do not share it with anyone the client has not approved.
  • We help the client answer requests from the people whose data it holds, and support its impact assessments.
  • We report any personal data breach to the client without undue delay, so it can meet its own duties to the Data Protection Board of India and, where relevant, EU or UK regulators.
  • At the end of the engagement we return or delete the data, as the client chooses, and confirm it in writing.

Sub-processors

For our own website we use Cloudflare, Google Workspace, Resend and Cal.com. For client projects we use only the tools and sub-processors the client approves in writing, and we tell the client before adding a new one.

Data locations

Where a client needs data to stay in India or another region, we design and run the work to keep it there, and we record that requirement in the contract.

Make a privacy request

Email privacy@hmrinfotech.com or write to our Grievance Officer at HMR Infotech Private Limited, B 501, Flora Heritage, Bisrakh, Gautam Buddha Nagar 201306, Uttar Pradesh, India. We reply within 30 days.