Privacy Policy

1Introduction

T4L Corporation India Private Limited, operating as Tech4LYF Corporation (“Tech4LYF”, “Company”, “we”, “us” or “our”), respects the privacy of individuals and is committed to processing personal data in a lawful, fair, transparent and secure manner.

This Privacy Policy explains how we collect, use, store, process, disclose, transfer and protect personal data when individuals:

• Visit or interact with our website;
• Contact us through enquiry forms, email, telephone, social media or other channels;
• Request quotations, demonstrations, proposals or consultations;
• Purchase or use our products or services;
• Use software, mobile applications, dashboards, cloud platforms or IoT systems operated by Tech4LYF;
• Participate in projects implemented by Tech4LYF for its clients;
• Apply for employment or internship opportunities;
• Act as representatives of clients, vendors, contractors or business partners; or
• Otherwise interact with Tech4LYF.

By providing personal data to us, you acknowledge that it may be processed in accordance with this Privacy Policy, applicable contractual terms and applicable law.

2Scope of This Policy

This Privacy Policy applies to personal data processed directly by Tech4LYF in connection with:

• Corporate websites and landing pages;
• Client enquiries and lead management;
• CRM, sales and customer-support activities;
• Software and application development;
• Cloud-hosted applications and platforms;
• Mobile applications;
• IoT devices, gateways, sensors and monitoring systems;
• ERP, CRM and Odoo implementations;
• Artificial-intelligence and automation services;
• Managed support, maintenance and AMC services;
• Recruitment, vendor management and business operations.

3Definitions

Personal Data means any data about an identifiable individual, whether the individual is identified directly or indirectly.

Processing includes collecting, recording, organising, storing, modifying, retrieving, using, analysing, transmitting, sharing, restricting, deleting or otherwise handling personal data.

Client Data means data provided, uploaded, collected, generated or controlled by a client in connection with a project or service supplied by Tech4LYF.

Services means the websites, software, mobile applications, IoT solutions, cloud systems, ERP solutions, AI services, consulting, support and other services provided by Tech4LYF.

Data Principal means the individual to whom personal data relates.

Data Processor means an organisation that processes personal data on behalf of another organisation and according to its documented instructions.

4Personal Data We May Collect

Depending on the nature of your interaction with Tech4LYF, we may collect the following categories of information.

4.1 Identity and Contact Information

• Full name;
• Company or organisation name;
• Designation and department;
• Postal or business address;
• Email address;
• Telephone or mobile number;
• Profile photograph;
• Signature;
• Government-issued identification, where required for lawful business purposes.

4.2 Business and Commercial Information

• Project requirements;
• Requests for quotation;
• Proposal and negotiation information;
• Contract details;
• Purchase orders;
• Invoice and payment information;
• GST and company-registration information;
• Communication history;
• Customer-support and complaint records;
• Meeting notes and project documentation.

4.3 Account and Authentication Information

• Username;
• Encrypted or hashed password;
• User role and access permissions;
• Login history;
• Authentication records;
• Session and security tokens;
• Password-reset and account-recovery information.

Users are responsible for maintaining the confidentiality of their account credentials and for immediately reporting suspected unauthorised access.

4.4 Technical and Usage Information

• IP address;
• Browser type;
• Device type;
• Operating system;
• Device identifiers;
• Application version;
• Access date and time;
• Pages or application features used;
• Crash reports;
• Error logs;
• Audit logs;
• Network and performance information;
• Referring URLs;
• Cookies and similar technologies.

4.5 Mobile Application Information

Depending on the features of a particular application and the permissions granted by the user, we may process:

• Device information;
• Camera or photograph access;
• File and media access;
• Approximate or precise location;
• Bluetooth or connected-device information;
• Push-notification tokens;
• Microphone or audio data;
• Biometric or sensor-generated data;
• Contacts, only where necessary for a specific feature and with appropriate permission.

Permissions may be controlled through the device settings, although disabling a required permission may affect the relevant functionality.

4.6 IoT and Industrial Data

Our IoT and industrial systems may process:

• Sensor readings;
• Equipment identifiers;
• Machine-status information;
• Location or installation details;
• Device health and connectivity data;
• Temperature, vibration, energy, pressure or similar measurements;
• Door, shutter, rack, asset or occupancy status;
• Maintenance and alarm information;
• Gateway and communication logs;
• User actions performed through dashboards or remote-control systems.

Industrial or machine data may become personal data when it can be linked to an identifiable operator, employee, visitor, customer or authorised user.

4.7 Recruitment Information

• Resume or curriculum vitae;
• Educational and employment history;
• Professional qualifications;
• Portfolio and work samples;
• Salary expectations;
• Interview notes;
• References;
• Identity, background or verification information where legally permitted.

4.8 Sensitive or High-Risk Information

Certain client projects, including healthcare, financial, KYC, access-control, workforce-management or biometric systems, may involve information requiring enhanced protection.

Such information will be processed only where necessary, contractually authorised and supported by appropriate legal, technical and organisational controls.

5How We Collect Personal Data

We may collect personal data:

• Directly from the individual;
• Through website or application forms;
• Through phone calls, email, messaging platforms or meetings;
• Through contracts, quotations, invoices and project documents;
• Through software applications, dashboards or IoT devices;
• From a client, employer or authorised organisation;
• From vendors, implementation partners or service providers;
• Through publicly available business sources;
• Through cookies, logs and analytics technologies;
• During technical support, maintenance or troubleshooting;
• Through recruitment platforms or employee referrals.

6Purposes for Which We Process Personal Data

Tech4LYF may process personal data for the following purposes:

• Responding to enquiries and requests;
• Understanding business and technical requirements;
• Preparing quotations, proposals and demonstrations;
• Conducting client onboarding and verification;
• Entering into and performing contracts;
• Developing, testing, deploying and maintaining software;
• Operating cloud platforms, dashboards and mobile applications;
• Configuring and managing IoT devices;
• Providing ERP, Odoo, AI and automation services;
• Authenticating users and controlling access;
• Providing technical support and incident resolution;
• Monitoring system performance, availability and security;
• Preventing fraud, misuse and unauthorised access;
• Processing invoices and payments;
• Maintaining accounting, tax and statutory records;
• Communicating project, service and support updates;
• Improving our products, services and internal processes;
• Conducting analytics and business reporting;
• Managing vendors, subcontractors and partners;
• Protecting Tech4LYF’s legal and commercial interests;
• Establishing, exercising or defending legal claims;
• Recruiting and evaluating candidates;
• Complying with laws, court orders and regulatory obligations;
• Sending business or marketing communications where permitted.

We will not intentionally process personal data for purposes that are materially incompatible with the purposes communicated at the time of collection unless permitted by law or supported by fresh notice or consent.

7Grounds for Processing

Depending on the circumstances, we may process personal data:

• With the individual’s consent;
• To perform or prepare to enter into a contract;
• To respond to a request voluntarily initiated by the individual;
• To comply with a legal or regulatory obligation;
• To protect the safety, security or integrity of our systems;
• To establish, exercise or defend legal rights;
• For employment-related purposes;
• For other uses permitted under applicable law.

Where processing is based on consent, the individual may withdraw consent through the method communicated by Tech4LYF. Withdrawal will not affect processing lawfully undertaken before the withdrawal.

Some services may not remain available where the required data can no longer be processed.

8Tech4LYF’s Role in Client Projects

Where Tech4LYF processes Client Data on behalf of a client:

• The client determines why and how the data is collected and used;
• Tech4LYF processes the data according to the client’s documented instructions and contract;
• The client is responsible for establishing a lawful basis for collection and processing;
• The client is responsible for supplying appropriate privacy notices and obtaining required permissions or consents;
• Tech4LYF may assist the client in responding to rights requests, security incidents and regulatory requirements where contractually agreed;
• Tech4LYF will not independently sell or commercially exploit Client Data.

Individuals whose data is controlled by a Tech4LYF client should normally submit privacy requests directly to that client. Tech4LYF may refer such requests to the relevant client.

9Cookies and Similar Technologies

Our websites and applications may use cookies, local storage, SDKs, pixels or similar technologies to:

• Maintain login sessions;
• Remember user preferences;
• Secure accounts;
• Measure website or application performance;
• Detect misuse or suspicious activity;
• Understand how users interact with our services;
• Improve functionality and user experience;
• Support permitted marketing or analytics activities.

Where legally required, optional cookies will be used only after consent is obtained.

Users may manage cookies through browser or application settings. Blocking essential cookies may prevent certain services from functioning correctly.

10Marketing Communications

We may use business contact information to communicate information about:

• Tech4LYF services;
• Product updates;
• Relevant technology solutions;
• Events, demonstrations and consultations;
• Renewals, maintenance and support services.

Recipients may unsubscribe through the method included in the communication or by contacting us.

Operational communications relating to contracts, projects, security, invoicing or service delivery may continue even after marketing communications are declined.

11Artificial Intelligence and Automated Processing

Tech4LYF may use artificial-intelligence-assisted tools for activities such as:

• Document drafting;
• Requirement analysis;
• Code assistance;
• Support classification;
• Workflow automation;
• Forecasting and analytics;
• Knowledge retrieval;
• System monitoring;
• Lead prioritisation.

Where AI tools process personal data, Tech4LYF will apply appropriate contractual, access-control and security measures based on the nature and risk of the processing.

Where an application makes a decision with a significant effect on an individual, appropriate human review or other safeguards may be implemented where required by applicable law or the relevant client contract.

12Disclosure of Personal Data

Tech4LYF may disclose personal data to:

• Employees and authorised personnel;
• Group companies or affiliated business units;
• Cloud-hosting and data-centre providers;
• Communication, email, SMS or notification providers;
• Payment gateways and financial institutions;
• Analytics, monitoring and cybersecurity providers;
• ERP, CRM, Odoo and project-management providers;
• Professional advisers, auditors and insurers;
• Subcontractors and implementation partners;
• Government, regulatory or law-enforcement authorities;
• Courts, tribunals or legal representatives;
• Parties involved in a merger, restructuring, investment, acquisition or transfer of business.

Access will be limited to what is reasonably necessary for the relevant purpose. Service providers may be contractually required to maintain confidentiality, use data only for authorised purposes and implement reasonable security safeguards.

13Third-Party Services and Integrations

Our products and projects may integrate with third-party services such as:

• Cloud-hosting platforms;
• Payment gateways;
• SMS, email and messaging providers;
• Maps and location services;
• Social-login providers;
• Analytics platforms;
• ERP and CRM platforms;
• AI-model providers;
• Device manufacturers;
• Telecom, SIM, GSM or IoT connectivity providers.

Third-party providers may process information under their own terms and privacy policies. Tech4LYF is not responsible for the independent privacy practices of third parties that are not under its control.

Clients are responsible for approving third-party integrations selected for their projects and for reviewing the applicable commercial and privacy terms.

14Payment Information

Where online payments are enabled, payment information may be processed directly by an authorised payment-gateway or banking provider.

Unless specifically required for an agreed service, Tech4LYF does not intentionally store complete debit-card, credit-card, UPI PIN or internet-banking credentials.

Payment providers remain responsible for information processed through their independent payment systems.

15International Processing and Transfers

Tech4LYF, its clients or its service providers may use cloud infrastructure or technical resources located outside India.

Where personal data is transferred or accessed internationally, Tech4LYF will take reasonable steps to ensure that:

• The transfer is permitted under applicable law;
• The recipient is subject to appropriate contractual or security obligations;
• Client-specific hosting or localisation requirements are followed where contractually agreed;
• Any restrictions notified by competent authorities are observed.

Specific data-hosting locations may depend on the cloud provider, subscription plan and written project scope.

16Data Security

Tech4LYF implements reasonable technical and organisational safeguards proportionate to the nature of the data and associated risk. These measures may include:

• Encryption in transit and, where appropriate, at rest;
• Authentication and role-based access control;
• Password hashing and credential-management controls;
• Logging, monitoring and audit trails;
• Firewalls and network-security controls;
• Secure development and code-review practices;
• Backup and recovery procedures;
• Vulnerability and dependency management;
• Restricted administrative access;
• Employee confidentiality obligations;
• Vendor and subcontractor security requirements;
• Incident-response and escalation procedures;
• Data masking, tokenisation or pseudonymisation where appropriate.

Clients are responsible for maintaining the security of systems, credentials, devices, hosting environments or infrastructure under their control.

17Personal Data Breaches

Where Tech4LYF becomes aware of a personal-data breach, it will assess the nature and impact of the incident and take reasonable steps to:

• Contain and investigate the incident;
• Mitigate potential harm;
• Restore affected systems;
• Preserve relevant evidence and logs;
• Notify the affected client;
• Notify affected individuals or competent authorities where required;
• Implement corrective measures intended to prevent recurrence.

Where Tech4LYF acts as a Data Processor, breach notifications may be made to the relevant client, which will remain responsible for regulatory and individual notifications unless otherwise required by law or contract.

18Data Retention

Tech4LYF retains personal data only for as long as reasonably necessary for:

• The purpose for which it was collected;
• Providing contracted services;
• Maintaining business and accounting records;
• Security, audit and fraud-prevention requirements;
• Statutory or regulatory compliance;
• Resolving disputes;
• Enforcing contractual rights;
• Establishing or defending legal claims;
• Backup, disaster-recovery and business-continuity requirements.

Retention periods may vary according to the type of data, project, contract and legal obligation.

Client Data will ordinarily be retained and deleted according to the relevant contract, project closure procedure, client instruction and applicable law.

Deletion from active systems may not immediately remove data from secure backup systems. Backup data may remain until the applicable backup cycle expires, unless earlier deletion is technically feasible and legally required.

19Children’s Personal Data

Tech4LYF’s general corporate website and business services are not intended to independently solicit personal data from children.

Where a client project is specifically designed for children or may process children’s data, appropriate age-verification, parental or guardian consent and safety controls must be implemented as required by applicable law.

Clients must inform Tech4LYF before supplying children’s personal data and must confirm that all required permissions have been obtained.

20Rights of Individuals

Subject to applicable law and any valid exceptions, an individual may request:

• Confirmation of whether personal data is being processed;
• A summary of the personal data being processed;
• Access to relevant processing information;
• Correction of inaccurate or misleading data;
• Completion of incomplete data;
• Updating of outdated data;
• Erasure of personal data that is no longer required;
• Withdrawal of consent;
• Grievance redressal;
• Information about organisations with whom data has been shared, where applicable;
• Nomination of another person to exercise applicable rights in the event of death or incapacity;
• Escalation to the competent data-protection authority where permitted.

Tech4LYF may request reasonable information to verify the identity and authority of the person making the request.

A request may be refused or restricted where:

• Retention or processing is required by law;
• The request affects the rights of another person;
• The information is subject to legal privilege;
• The request is fraudulent, abusive or manifestly unfounded;
• The data is required for legal claims, security investigations or contractual enforcement;
• Tech4LYF is acting solely as a processor for another organisation.

21Responsibilities of Individuals

Individuals interacting with Tech4LYF are expected to:

• Provide accurate and complete information;
• Update information when it changes;
• Protect login credentials;
• Avoid sharing another person’s data without authority;
• Use Tech4LYF services lawfully;
• Report suspected unauthorised access or misuse;
• Comply with the applicable product or service terms.

Where a person supplies personal data concerning another individual, that person represents that they have the authority to do so.

22External Websites and Links

Tech4LYF websites, applications or communications may contain links to external websites or services.

Tech4LYF does not control and is not responsible for the security, availability, content or privacy practices of independent external services. Users should review the privacy notice of the external service before providing personal data.

23Business Reorganisation

If Tech4LYF undergoes a merger, acquisition, investment, restructuring, sale of assets or transfer of business, personal data may be disclosed or transferred as part of that transaction.

Any successor or acquiring organisation will be expected to process the transferred personal data in accordance with applicable law and the commitments applicable at the time of transfer.

24Changes to This Privacy Policy

Tech4LYF may update this Privacy Policy to reflect:

• Changes in law or regulation;
• New products or services;
• Changes in technology or business operations;
• Updated security practices;
• Regulatory or contractual requirements.

The updated version will be published with a revised “Last Updated” date. Where a change materially affects how personal data is processed, additional notice or consent may be provided where required.

26Governing Law and Jurisdiction

This Privacy Policy will be interpreted in accordance with the laws of India.

Subject to the jurisdiction of competent regulatory authorities, courts and tribunals, disputes relating to this Privacy Policy will be subject to the jurisdiction of the competent courts at Chennai, Tamil Nadu, India.