1. Data Fiduciary Identification

Adit Microsys Pvt. Ltd. ("Adit Microsys", "we", "us", or "our") acts as the Data Fiduciary under Section 2(i) of the Digital Personal Data Protection Act, 2023. We determine the purpose and means of processing personal data collected through our website (www.aditmicrosys.com) and digital interactions.

Registered Office: 502, Shapath II, Opp. Rajpath Club, S.G. Road, Ahmedabad 380015, Gujarat, India.
Corporate Identification Number (CIN): U72200GJ1993PTC019859
Designated Grievance & Privacy Email: adit@aditmicrosys.com

2. Personal Data Inventory, Specified Purposes & Lawful Grounds

In adherence to the Data Minimization Principle (Section 6(1)), we only collect personal data that is strictly necessary for specified, lawful purposes:

3. Protection of Children’s Data (Section 9)

Our website and business offerings are targeted strictly at business organizations, enterprises, and adult professionals. We do not knowingly collect, process, track, or profile personal data of individuals under the age of eighteen (18) years, nor do we undertake targeted advertising directed at children, in compliance with Section 9(1)-(3) of the DPDP Act 2023. If we become aware that a child's data has been inadvertently submitted without verifiable parental/guardian consent, we take immediate measures to erase such records from our databases.

4. Reasonable Security Safeguards (Section 8(4)-(5))

Adit Microsys implements rigorous technical and organizational measures to safeguard personal data against unauthorized access, loss, or leakage:

• Transport Security: All digital communications across our website enforce TLS 1.3/1.2 cryptographic protocols and HTTP Strict Transport Security (HSTS).
• Access Control: Administrative access to personal data repositories is governed by strict Role-Based Access Controls (RBAC), multi-factor authentication, and IP fencing.
• Audit Logging: All access, updates, exports, and erasures of personal data are recorded in tamper-evident audit logs with hashed client signatures (DPDP-016).
• Storage Protection: Personal data stores are isolated in protected environments with encrypted daily backups.

5. Third-Party Data Processors (Section 8(2))

We engage vetted Data Processors under valid data processing agreements to operate our infrastructure:

• Cloud & Hosting Infrastructure: Tier-III compliant data center providers in India.
• Email Communications: Microsoft 365 / Office 365 for business email exchanges under enterprise privacy contracts.
• Web Analytics: Google Analytics (activated strictly after affirmative consent; IP anonymization enabled).

We do not sell, rent, or trade personal data to third parties for marketing purposes.

6. Data Principal Statutory Rights (Sections 11, 12, 13, 14)

Under the DPDP Act 2023, you have the following enforceable statutory rights:

1. Right to Access (Section 11(1)): You may request a summary of personal data being processed about you, processing activities undertaken, and identities of Data Processors.
2. Right to Correction & Updating (Section 12(1)-(2)): You may request correction of inaccurate data, completion of incomplete records, or updating of out-of-date information.
3. Right to Erasure / Deletion (Section 12(3)): You may request erasure of personal data that is no longer necessary for the purpose for which it was processed, subject to legal retention duties.
4. Right to Withdraw Consent (Section 6(4)): You may withdraw your consent at any time as easily as giving consent. Cookies can be revoked in one click via "Privacy Settings", and contact consents via our rights portal.
5. Right of Grievance Redressal (Section 13): You have the right to accessible grievance redressal provided by our designated Grievance Officer.
6. Right to Nominate (Section 14): You may designate a nominee who shall, in the event of your death or incapacity, exercise your data principal rights.

To exercise any of these rights, please visit our online Data Principal Rights & Grievance Portal. Requests are responded to within the statutory period of thirty (30) days.

7. Statutory Escalation Guidance (Section 13(3))

8. Duties of Data Principals (Section 15)

While exercising rights under the DPDP Act, Data Principals have legal duties to:

• Comply with provisions of all applicable laws when exercising rights.
• Ensure not to impersonate another person when providing personal data.
• Ensure not to suppress any material information when providing personal data.
• Ensure not to register false or frivolous grievances or complaints.
• Furnish only verifiably authentic information when making correction or erasure requests.

9. Security Incident / Breach Notification (Section 8(6))

In the unlikely event of a personal data breach affecting your information, Adit Microsys maintains an incident response protocol to notify both the Data Protection Board of India and affected Data Principals in the prescribed form and manner without undue delay.

10. Grievance Officer & Contact Information

11. Updates to this Privacy Notice

We may periodically revise this Privacy Notice to reflect evolving statutory rules under Section 40 of the DPDP Act 2023 or enhancements to our digital services. Notice of material updates will be visibly posted on this portal alongside the updated version number.