Legal
Privacy Policy
How NXBIRD collects, uses and protects your personal data, and the choices and rights you have.
Draft – lawyer review required
This document is a working draft prepared in good faith and has not yet been reviewed by a lawyer. It may change. Items marked [like this] are still being confirmed.
1. Who we are
This website, nxbird.com, is operated by Nxbird Private Limited ("NXBIRD", "we", "us"), a company incorporated in India (CIN U72900MH2021PTC355564), based at Nala Sopara, Maharashtra 401209. Our registered office address is listed on our About page. For the personal data described here, NXBIRD is the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Questions about this policy: info@nxbird.com or +91 91186 02900.
2. What this policy covers
This policy covers personal data we receive through this website and through enquiries you send us by email, phone or WhatsApp. When we deliver a project for a client, how we handle that client's data is also governed by the written agreement for that project.
3. Personal data we collect and why
| Data | Why we use it | Basis |
|---|---|---|
| Name, email, phone, company name and project requirements you send us | To respond to your enquiry, discuss your project and prepare a quote | Your consent, or data you voluntarily provide for this purpose |
| Your choice about receiving updates | To send occasional updates from NXBIRD, only if you opted in | Your separate, optional consent |
| Client contact, billing and project details | To deliver the agreed services, invoice and meet legal obligations such as GST | Your agreement with us, and legal obligations |
| Technical data recorded by our hosting provider (IP address, browser type, pages requested, time) | To keep the website running and secure, and to investigate misuse | Security safeguards required by law |
We do not ask for sensitive data such as financial account details, health information or government ID numbers through this website. Please do not include such details in your enquiry.
How the quote form currently works
At present, the Get a Quote form does not store anything on our website. When you press send, it opens WhatsApp or your email app with your message filled in, and you choose whether to send it. We receive your details only when you send that message.
4. Cookies and analytics
This website currently does not set cookies and does not use analytics or advertising trackers. See our Cookie Policy for details.
5. What we don't do
- We do not sell your personal data.
- We do not use your data for marketing unless you have opted in.
- We do not make decisions about you based solely on automated processing.
6. Who we share data with
We share personal data only with service providers who help us run our business ("Data Processors"), and only as needed for the purposes above:
| Service | Provider | Purpose |
|---|---|---|
| Website hosting | Hostinger | Hosting this website and, later, the enquiry database |
| Business email | Hostinger Business Email | Receiving and replying to emails sent to info@nxbird.com |
| WhatsApp (Meta) | Messages you choose to send us on WhatsApp are handled under WhatsApp's own terms and privacy policy |
We may also disclose personal data where required by law, for example to a government authority acting under a lawful order.
7. Where your data is stored
Data is stored with our hosting and email providers. Server location: [To be confirmed]. Where data is processed outside India, we do so only as permitted under Section 16 of the DPDP Act.
8. How long we keep data
| Data | Retention period |
|---|---|
| Enquiries that do not become projects (name, contact details, requirements, messages) | Up to 12 months from the last communication, then deleted (proposed) |
| Client project records, contracts, invoices and payment records | For the period required under GST, tax and company law (CA to confirm) |
| Marketing consent and contact details for updates | Until you withdraw consent, then removed from our mailing list |
| Consent records (what you agreed to, when, and the notice version) | For as long as the related personal data is kept, plus any period needed to show compliance (lawyer to confirm) |
| Security and access logs | At least one year, or longer where law requires (lawyer to confirm against DPDP Rules 2025 and CERT-In Directions 2022) |
When a retention period ends, we delete the data or make it anonymous, unless the law requires us to keep it.
9. How we protect data
We follow reasonable security practices, including encrypted connections (HTTPS), security headers, limited access to personal data, and keeping software up to date. No system is completely secure, but we work to reduce risk and review our safeguards regularly.
If a personal data breach occurs, we will inform affected individuals and the Data Protection Board of India as required under the DPDP Act and the DPDP Rules, 2025, and report cyber security incidents to CERT-In as required under the CERT-In Directions of 2022.
10. Your rights
Under the DPDP Act, you can:
- Ask for a summary of the personal data we hold about you and how we use it.
- Ask us to correct, complete, update or erase your personal data.
- Withdraw your consent at any time — as easily as you gave it.
- Raise a grievance with our Grievance Officer.
- Nominate another person to exercise your rights in case of death or incapacity.
To use any of these rights, email info@nxbird.com with the subject "Data request". We may need to verify your identity first. Withdrawing consent does not affect processing already done, but we may no longer be able to respond to your enquiry. See Data Protection & Grievance for the full process.
11. Children
This website and our services are intended for adults (18 years and above) acting for themselves or for a business. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.
12. Grievance Officer
Name: Pankaj Pal and Jitendra Yadav
Email: info@nxbird.com
Address: Nxbird Private Limited, Nala Sopara, Maharashtra 401209
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
13. Links to other services
Links to WhatsApp and other websites are governed by those services' own privacy policies. We are not responsible for how they handle your data.
14. Changes to this policy
We may update this policy. The version number and date at the bottom of this page show the latest version. Significant changes will be highlighted on this page.
15. Laws referred to
This draft has been prepared with reference to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (some provisions of which come into force in phases), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the CERT-In Directions of 28 April 2022. Applicability of each provision is subject to lawyer review.
Last updated: 30 October 2026 · Version 0.1-draft