1. Introduction

Prime Infotech Solution(Prime Biz) (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information when you visit our website, purchase software products, obtain software licences, or use our digital services.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information and how you can exercise your privacy rights.

This policy is intended to address applicable Indian privacy and information technology laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025, the Information Technology Act, 2000, and applicable rules made under that Act, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable.

By using our website or services, you acknowledge that you have read this policy. Where consent is legally required, we will seek consent through an appropriate mechanism. Accessing the website does not, by itself, constitute consent to every type of data processing described here.

2. About Prime Infotech Solution(Prime Biz)

Business Name: Prime Infotech Solution(Prime Biz)
Website: https://www.primeinfotech.biz/
Email: salesdesk@primeinfotech.biz
Phone: +91 92235 12166
Registered Business Address: Office No 14, 3^rd Floor, Creative Industrial Estate, N M Joshi Marg, Lower Parel(E), Mumbai – 400011
Privacy Contact / Grievance Officer: Ms.Shagufta Ansari
Privacy Contact Email: salesdesk@primeinfotech.biz

For the purposes of applicable data protection law, the entity that determines the purposes and means of processing personal data will be responsible for the corresponding obligations.

3. Personal Information We Collect

Depending on how you interact with our website, we may collect the following categories of information:

1. Personal and contact information

• Name and surname.
• Email address.
• Telephone or mobile number.
• Billing and business address.
• Company name and business contact details, where applicable.

1. Order and transaction information

• Order and invoice numbers.
• Purchased software products and licence details.
• Transaction references and payment status.
• Billing records and refund or cancellation requests.
• Relevant customer support and order-related communications.

Payment card details, banking credentials, and other sensitive payment information should be handled by authorised payment providers wherever possible. We will describe any payment information collected directly by us accurately in our actual practices.

1. Technical and usage information

Depending on our website configuration and the technologies enabled, we may collect:

• Internet Protocol (IP) address.
• Browser type and operating system.
• Device and diagnostic information.
• Website pages visited and interaction data.
• Cookies and similar technology identifiers.
• Security logs and information used to detect suspicious activity.

1. Customer support information

We may process information that you voluntarily provide when contacting us about product installation, licence activation, technical problems, billing disputes, refunds, or other enquiries.

Please do not submit passwords, payment credentials, or other highly sensitive information through ordinary support messages unless a secure and authorised process specifically requires it.

4. How We Collect Information

We may collect personal information:

• Directly from you when you complete a contact form, place an order, request a quotation, or contact customer support.
• Through our website when you browse or use its features.
• Through authorised payment gateways and service providers in connection with transactions.
• From software publishers, distributors, or business partners where necessary to fulfil an order or provide a service and where legally permitted.
• Through cookies, analytics tools, and security technologies, where enabled and subject to applicable consent requirements.

Where required by law, we will provide an appropriate privacy notice and obtain valid consent before processing personal data.

5. Purposes for Processing Personal Information

We process personal information only for specified and lawful purposes, subject to the legal basis applicable to the processing.

These purposes may include:

• Processing orders, payments, invoices, and refunds.
• Delivering software products, licence keys, downloads, and related services.
• Activating licences and providing technical support.
• Responding to customer enquiries and resolving complaints.
• Maintaining business and accounting records.
• Detecting and preventing fraud, unauthorised access, and security incidents.
• Maintaining website functionality and improving service performance.
• Sending transactional messages about orders, renewals, and support requests.
• Sending promotional communications where appropriate permission or another lawful basis is available.
• Complying with applicable legal, regulatory, tax, and law-enforcement obligations.

We will not use personal data for an unrelated purpose in a manner inconsistent with applicable law and any consent or notice requirements.

6. Consent and Your Choices

Where consent is required under applicable law, we will seek consent that is free, specific, informed, unconditional, and unambiguous, through a clear affirmative action.

You may be able to decline optional data collection, marketing communications, or non-essential cookies without affecting unrelated website functions.

Where processing is based on consent, you may withdraw that consent using the available consent controls or by contacting us at the details provided in this policy. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

We will explain any consequences of withdrawing consent where continued processing is necessary to provide a requested product or service or where another lawful basis applies.

We will not treat consent as a condition for processing data that is not necessary for the relevant service, except where permitted by law.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, remember preferences, maintain security, and understand website performance.

Depending on the tools enabled, cookies may include:

• Essential cookies: Necessary for core website functions and security.
• Preference cookies: Used to remember selected settings.
• Analytics cookies: Used to understand how visitors interact with the website.
• Advertising cookies: Used for advertising or campaign measurement, if such technologies are implemented.

Where required, we will seek consent before using non-essential cookies or similar technologies. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

This section should be updated to identify the actual cookies, analytics tools, advertising tools, and third-party technologies used on our website.

8. Sharing and Disclosure of Information

We do not sell personal data as a commercial product.

We may disclose or make personal information available to the following categories of recipients, where necessary and legally permitted:

• Payment service providers: To process payments, refunds, and transaction verification.
• Software publishers and distributors: To fulfil software orders, activate licences, or provide publisher-supported services.
• Technology and hosting providers: To host, maintain, secure, and operate our website.
• Customer support providers: To respond to enquiries and resolve service issues.
• Professional advisers: Lawyers, accountants, auditors, and other professional advisers where required.
• Government and regulatory authorities: Where disclosure is required or authorised by applicable law or a lawful order.

We will take appropriate steps to ensure that service providers handling personal data on our behalf are subject to appropriate contractual, confidentiality, and security obligations.

We will not disclose personal data to third parties for their independent marketing purposes without the required permission or other lawful basis.

9. Storage, Retention, and Deletion

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal requirements, contractual obligations, and legitimate recordkeeping needs.

For example:

• Order and invoice records may be retained to comply with accounting and tax requirements.
• Customer support records may be retained to resolve disputes and maintain service history.
• Security logs may be retained for an appropriate period to investigate misuse or security incidents.
• Marketing preferences may be retained as needed to honour opt-in and opt-out requests.

When personal information is no longer required, we will take appropriate steps to erase it or otherwise dispose of it securely, unless retention is required or permitted by applicable law.

We will establish and maintain appropriate retention periods based on the types of data we collect and the purposes for which we use it.

10. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction.

Depending on the nature and volume of information handled, these measures may include:

• Access controls and restricted permissions.
• Secure website connections and appropriate encryption.
• Authentication and account security measures.
• Security monitoring, backups, and system maintenance.
• Confidentiality obligations for personnel and service providers.
• Procedures for investigating and responding to security incidents.

No method of transmission or electronic storage is completely secure. However, we will take appropriate measures to protect personal information in accordance with applicable law and the risks associated with the processing.

11. Personal Data Breaches

If we become aware of a personal data breach affecting information handled by us, we will investigate the incident, take appropriate steps to contain and mitigate its effects, and comply with applicable reporting and notification requirements.

Where notification to affected individuals or relevant authorities is required, we will provide the information and notifications within the timeframes prescribed by the applicable law.

Customers may contact us using the details in this policy to report a suspected privacy or security incident involving our website or services.

12. Your Privacy Rights

Subject to the applicable law and its commencement provisions, you may have rights concerning your personal data, including the right to:

• Obtain information about the personal data we process and the relevant processing activities.
• Request correction of inaccurate or misleading personal data.
• Request completion or updating of personal data where applicable.
• Request erasure of personal data where legally available and where retention is not required by law.
• Withdraw consent where processing is based on consent.
• Exercise applicable grievance-redressal rights.
• Nominate another individual to exercise specified rights in the event of death or incapacity, as provided under applicable law.
• Make a complaint to the appropriate authority where legally entitled to do so.

To exercise a right, contact us using the details in Section 2. We may request reasonable information to verify your identity and locate the relevant records.

We will respond within the period required by the applicable law. Requests may be subject to lawful exceptions, including requirements to retain records or protect the rights of others.

13. Children’s Personal Data

Our website and software-related services are intended for individuals and businesses legally capable of using the relevant products and services.

We do not knowingly seek to collect children’s personal data except where legally permitted and supported by the required safeguards.

Where the DPDP Act’s provisions concerning children’s personal data apply, we will comply with the applicable requirements relating to verifiable parental or lawful guardian consent and any relevant restrictions or exemptions.

If you believe that a child has provided personal information to us in circumstances that are not permitted, please contact us so that we can review the matter and take appropriate action.

14. International Data Transfers

Some of our hosting providers, payment processors, software publishers, or other service providers may process or store information outside India.

Where personal data is transferred outside India, we will comply with applicable Indian law, including any restrictions, conditions, or government requirements applicable to the transfer.

We will also take appropriate steps to ensure that service providers handling personal data maintain suitable safeguards consistent with their contractual obligations and applicable law.

15. Third-Party Websites and Software

Our website may contain links to third-party websites, software publishers, payment gateways, or external services.

Those third parties may have their own privacy policies and data handling practices. We encourage you to review their policies before providing personal information directly to them.

This Privacy Policy applies to personal data processed by Prime Infotech Solution within the scope described here. It does not automatically govern independent processing carried out by third-party providers.

16. Grievance Redressal

If you have a question, concern, or complaint about how we collect or use personal information, you may contact our designated privacy contact or Grievance Officer.

Name: Ms.Shagufta Ansari
Designation: DPO
Email: salesdesk@primeinfotech.biz
Postal Address: Office No 14, 3^rd Floor, Creative Industrial Estate, N M Joshi Marg, Lower Parel(E), Mumbai – 400011

Please include a description of your concern and sufficient information to help us identify the relevant transaction or data processing activity.

We will acknowledge, investigate, and respond to complaints within the applicable legal timeframe. If you are dissatisfied with our response, you may pursue any further remedy available under applicable law, including approaching the competent authority where entitled to do so.

17. Compliance with Indian Laws

We intend to maintain this policy and our data handling practices in accordance with applicable Indian laws, including:

• The Digital Personal Data Protection Act, 2023, and the Digital Personal Data Protection Rules, 2025, as their provisions become applicable.
• The Information Technology Act, 2000, to the extent applicable.
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable.
• Other applicable legal, regulatory, consumer protection, and recordkeeping requirements.

Our compliance measures will be updated as relevant statutory provisions come into force and as the nature of our products, services, and data processing changes.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, data processing practices, or applicable legal requirements.

The revised policy will be published on this page with an updated effective date.

Where required by law, we will provide additional notice or seek consent before implementing material changes to our data processing practices.

19. Contact Us

For questions about this Privacy Policy, personal information, or privacy requests, please contact:

Prime Infotech Solution(Prime Biz)
Website: https://www.primeinfotech.biz/
Email: salesdesk@primeinfotech.biz
Phone: +91 92235 12166
Address: [Insert complete registered business address]

We appreciate your trust and are committed to handling your personal information responsibly and transparently.