Privacy Policy

At Techract Solutions Ltd. (“Techract,” “we,” “our,” or “us”), we recognize that enterprise trust is founded on uncompromising data protection. As a provider of bespoke software engineering, cloud architecture, and technical consulting, safeguarding the intellectual property, personal data, and operational telemetry of our clients is fundamental to our business model.

This Privacy Policy outlines how we collect, process, store, and protect information when you interact with our website, engage our engineering advisory services, or execute commercial contracts with us. All client engagements are additionally governed by bilateral mutual Non-Disclosure Agreements (NDA) and Master Services Agreements (MSA).

We collect only the minimum volume of data required to deliver our technical services and evaluate solution viability:

• Contact & Account Identifiers: Name, corporate email address, telephone number, job title, and organization name provided via our inquiry or consultation forms.
• Technical & Discovery Specifications: Architectural requirements, infrastructure specs, technology stack preferences, and operational objectives submitted during scoping sessions.
• Telemetry & Usage Logs: IP address, browser user-agent, operating system, pages visited, and referring URLs collected automatically via secure server access logs for performance monitoring and DDoS mitigation.
• Client Codebases & Repositories: When granted authorized access under an NDA, code repositories, system schemas, and logs are audited strictly through secure, ephemeral sandbox environments.

We process your information under lawful grounds recognized by the General Data Protection Regulation (GDPR Article 6) and global privacy statutes:

Techract implements defense-in-depth architectural safeguards aligned with SOC2 Type II and ISO 27001 guidelines:

Techract provides services to global enterprises. Where data is transferred across international borders outside the European Economic Area (EEA) or the United Kingdom, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• International Data Transfer Agreements (IDTA) compliant with the UK Information Commissioner’s Office (ICO).
• Region-isolated data residency hosting (e.g., EU-only or US-only multi-cloud zones) upon client request.

We do not sell, rent, or monetize your data. We partner only with SOC2-compliant enterprise cloud infrastructure providers under strict Data Processing Agreements (DPA):

Our website uses strictly necessary cookies and local storage tokens required for navigation security, theme state persistence, and form submission verification. We do not employ third-party ad retargeting networks or invasive cross-site trackers.

Depending on your jurisdiction (including the EU/UK GDPR, California CCPA/CPRA, and relevant data protection laws), you possess statutory rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally mandated.
• Right to Restrict or Object: Restrict or object to processing under certain conditions.

If you have questions, data subject requests, or security inquiries regarding this Privacy Policy, please contact our Data Governance & Legal Compliance Office: