Back to home

Privacy Policy

Effective date: 8 September 2026 · Applies to coreitinnovations.com

Core IT Innovations ("we", "us", "our") is a Udyam-registered MSME providing data analytics, dashboard and IT automation services, operated by Sanjay Kumar Mohanty, based in Bhubaneswar, Odisha, India. This policy explains what personal data we collect through this website, why, how long we keep it, who we share it with, and the rights you have under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

01What we collect

Where	What's collected	When
Contact form	Name, email, mobile number, company (optional), service of interest, your message, your IP address, and the time you gave consent	Only when you submit the form
Site visits	Your IP address, approximate location (city/region/country) and internet provider, device/browser/operating-system type, the page you viewed, and the referring page	Only if you click "Accept" on the cookie/tracking notice
Project payment page	Name, email, mobile number, company (optional), Project ID, and the amount you choose to pay. Your card/UPI/bank details are entered directly into Razorpay's secure checkout and never touch our servers.	Only when you submit a payment

We do not use tracking pixels, ad networks, or sell any data to third parties. We don't knowingly collect data from anyone under 18, and this site is not directed at children.

02Why we collect it

• Contact form data — to respond to your enquiry, discuss your project, and follow up as needed.
• Visit data — for our own internal awareness of who's browsing the site (sent to a private Telegram chat we control), so we can follow up on genuine leads faster. It is not used for advertising, profiling for marketing to third parties, or automated decision-making about you.
• Payment data — to create and reconcile your Razorpay order, match your payment to the right project, and send you/us a confirmation. We keep a record of the transaction (amount, project, order/payment ID, contact details) for accounting and support purposes.

03Our legal basis: your consent

Under Section 6 of the DPDP Act, we process your personal data only on the basis of your free, specific, informed consent:

• Contact form data is processed only after you tick the consent checkbox before submitting.
• Visit-tracking data is sent only after you click "Accept" on the cookie/tracking notice. If you click "Decline" (or don't respond), nothing is tracked.
• Payment data is processed on the basis that submitting the payment form and proceeding to Razorpay checkout constitutes your consent, necessary to fulfil the project payment you're initiating.

You can withdraw consent for visit tracking at any time via the "Cookie preferences" link in the site footer — this stops future tracking, though it can't recall a Telegram notification already sent before you withdrew.

04Cookies & local storage used

Name	Purpose	Duration
civ_notified	Prevents sending more than one visit notification per visitor within a short window	30 minutes
civ_tracking_consent (browser local storage)	Remembers your Accept/Decline choice for visit tracking	Until you clear your browser storage or change your choice
Cloudflare Turnstile cookie	Verifies you're not a bot when submitting the contact form	Set by Cloudflare; see their privacy policy

05Who we share it with

We don't sell your data. We use these processors to run the site and respond to you:

• Telegram (Telegram FZ-LLC) — delivers contact-form, visit and payment notifications to us as instant messages. Telegram's servers are located outside India.
• ip-api.com — a free IP-geolocation lookup used only for visit tracking (with your consent), to resolve an IP address to an approximate city/region. Located outside India.
• Cloudflare Turnstile — verifies contact-form submissions aren't automated/bot traffic.
• Razorpay Software Pvt. Ltd. — a licensed payment aggregator regulated by the Reserve Bank of India. It processes your card/UPI/netbanking details directly and shares only the payment status, order ID and amount back with us. See Razorpay's Privacy Policy.
• Our web hosting provider and email service — store the database and deliver notification emails.

06How long we keep it

• Contact form submissions are retained for up to 24 months from your last contact with us, then deleted, unless we're required to keep them longer (e.g. an ongoing engagement, or a legal obligation).
• Visit-tracking data is not stored in our database at all — it is relayed directly to our private Telegram chat for our own reference and is subject to Telegram's own retention settings for that chat.
• Payment records (contact details, project ID, amount, order/payment ID) are retained for as long as required for accounting, GST and tax-record purposes under Indian law, typically several years, then deleted.

07Your rights

Under the DPDP Act, you have the right to:

• Ask us what personal data we hold about you, and how it's used.
• Ask us to correct or update inaccurate or incomplete data.
• Ask us to erase your data, where we're not required to keep it for a legal or contractual reason.
• Withdraw consent at any time (see Section 3).
• Register a grievance with us, and escalate to the Data Protection Board of India if unresolved.

To exercise any of these, contact our Grievance Officer below. We aim to respond within 30 days.

08Grievance Officer / Nodal Officer

Sanjay Kumar Mohanty, Core IT Innovations
Email: sanjay.mohanty@coreitinnovations.com
Phone: +91 97766 45018
Location: Bhubaneswar, Odisha, India

09Security

We use industry-standard safeguards including HTTPS encryption in transit, access-restricted databases, and server-side verification on our contact form to guard against automated abuse. No method of transmission or storage is 100% secure, but we work to protect your data using commercially reasonable measures.

10Changes to this policy

We may update this policy from time to time as our practices or the law change. The "Effective date" above will always reflect the latest version — please check back periodically.