Privacy Policy
Effective Date: January 2, 2026
PAL Portals ("Company," "we," "us," "our," or "Service Provider") is committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal data. This Privacy Policy outlines our practices in compliance with applicable laws, including the Digital Personal Data Protection Act, 2023 (DPDPA) of India, the General Data Protection Regulation (GDPR) of the EU and UK, and the California Consumer Privacy Act (CCPA) of the United States.
1. Information We Collect
1.1 Information You Provide Directly
- Contact Information: Name, email address, phone number, company name, job title
- Account Information: Username, password, profile information
- Communication Data: Messages, inquiries, feedback, and support requests
- Business Information: Company details, business requirements, service preferences
- Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
1.2 Information Collected Automatically
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent, clicks, links followed
- Cookies and Similar Technologies: Session cookies, tracking pixels, analytics tools
- Location Data: General geographic location (country/city level) based on IP address
1.3 Information from Third Parties
- Business partners and service providers
- Publicly available sources
- Marketing platforms and analytics providers
2. Legal Basis for Processing
Under DPDPA (India):
- Your explicit consent for processing personal data
- Performance of contracts with you
- Compliance with legal obligations
- Protection of vital interests
- Legitimate interests of the Company and others
Under GDPR (EU/UK):
- Explicit consent
- Contract performance
- Legal obligation compliance
- Vital interests protection
- Public task performance
- Legitimate interests
Under CCPA (USA):
- Providing services as per the California Consumer Privacy Act
- Fulfilling contractual obligations
- Preventing fraud and ensuring security
3. How We Use Your Information
- Providing, maintaining, and improving our services
- Processing transactions and sending related information
- Sending marketing communications (with consent)
- Responding to inquiries and customer support
- Conducting analytics and tracking website performance
- Personalizing user experience
- Complying with legal and regulatory requirements
- Detecting and preventing fraud and security issues
- Enforcing our terms and conditions
- Business analytics and strategic planning
4. Data Sharing and Disclosure
We may share your personal data in the following circumstances:
- Service Providers: Third parties who assist us in operating our website, conducting business, or servicing you
- Business Partners: With your consent, we may share data with partners for marketing purposes
- Legal Requirements: When required by law, court order, or governmental authorities
- Business Transfers: In case of merger, acquisition, or sale of assets
- Protection of Rights: To protect our legal rights, privacy, safety, or property
Important: We do not sell your personal data for commercial purposes. Any data sharing is done with strict confidentiality agreements and data protection measures in place.
5. International Data Transfers
As a service provider with clients in India, the US, and the UK, we may transfer your personal data internationally. We ensure such transfers comply with:
- DPDPA Requirements: We obtain explicit consent before transferring personal data to countries without adequate data protection
- GDPR Mechanisms: Standard contractual clauses, adequacy decisions, or binding corporate rules
- CCPA Compliance: Service provider agreements ensuring equivalent privacy protections
6. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Retention periods vary by data type:
| Data Type | Retention Period |
|---|---|
| Account Information | As long as your account is active + 1 year |
| Transaction Records | 7 years (tax/regulatory compliance) |
| Marketing Data | Until consent is withdrawn |
| Website Analytics | 13 months (Google Analytics default) |
7. Your Rights
Under DPDPA (India):
- Right to access your personal data
- Right to correction and updating of data
- Right to erasure of data
- Right to grievance redressal
Under GDPR (EU/UK):
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Rights related to automated decision-making
- Right to lodge a complaint with a supervisory authority
Under CCPA (USA):
- Right to know what personal information is collected
- Right to delete personal information collected
- Right to opt-out of sale/sharing of personal information
- Right to non-discrimination for exercising CCPA rights
8. How to Exercise Your Rights
To exercise any of the above rights, please submit a request to:
Email: privacy@palportals.com
Mail: PAL Portals, [Company Address], India
Response Time: We will respond to verified requests within 30 days (45 days for complex requests under GDPR).
9. Data Security
We implement comprehensive security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- SSL/TLS encryption for data in transit
- Encryption of sensitive data at rest
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Employee training on data protection
- Incident response procedures
Note: While we implement strong security measures, no method of transmission over the internet or storage is 100% secure. We cannot guarantee absolute security.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
Types of Cookies:
- Essential Cookies: Required for website functionality
- Performance Cookies: Analytics and usage tracking
- Preference Cookies: Remember your settings and choices
- Marketing Cookies: Tracking for advertising purposes
You can control cookies through your browser settings. However, disabling cookies may affect website functionality.
11. Third-Party Links
Our website may contain links to third-party websites. This Privacy Policy does not apply to external sites, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information.
12. Children's Privacy
Our services are not directed to children under 18 years old (or the applicable age of digital maturity in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it immediately. Parents or guardians who believe their child has provided data can contact us at privacy@palportals.com.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated policy will be posted on this page with a new "Effective Date." Your continued use of our services after changes indicates your acceptance of the updated policy. For significant changes, we will provide appropriate notice.
14. Data Protection Officer and Contact Information
If you have questions about this Privacy Policy or our data practices, please contact:
PAL Portals
Email: privacy@palportals.com
Website: https://palportals.com
GDPR Complaints: You may lodge a complaint with your local data protection authority.
Compliance Statement
This Privacy Policy is designed to comply with the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). We are committed to protecting your fundamental right to privacy while conducting business with clients worldwide.