1. Introduction

eCorp Information Technologies Private Limited (“eCorpIT,” “we,” “us,” or “our”) is committed to protecting the privacy of every individual who visits ecorpit.com (the “Site”) or engages with our services. This Privacy Statement explains what personal data we collect, how we use it, with whom we share it, and the rights you have regarding your data.

eCorpIT is an IT consulting and technology services company registered in India, headquartered at 1120, 11th Floor, SVH 83 Metro Street, Sector 83, Gurugram, Haryana 122015, India.

2. Data Controller

eCorp Information Technologies Private Limited is the data controller responsible for processing your personal data collected through this Site. For any privacy-related queries, contact us at [email protected].

3. Personal Data We Collect

3.1 Information You Provide Directly

  • Contact & Consultation Forms: Full name, email address, phone number, company name, preferred contact date and time, timezone, service of interest, and free-text project description.
  • Client Account Registration: Name, email, company details, login credentials (password stored in encrypted form), and billing information where applicable.
  • Email Correspondence: Any information you share when contacting us at [email protected], [email protected], [email protected], or [email protected].
  • WhatsApp / Click-to-Chat: Phone number and messages exchanged via the WhatsApp widget powered by Click to Chat.

3.2 Information Collected Automatically

  • Google Analytics 4 (GA4): We use GA4 (Measurement ID: G-4W4H86W8T1) via Google Site Kit to collect anonymised usage data such as pages visited, session duration, bounce rate, device type, browser, operating system, approximate geographic location (city/country), and referral source.
  • Google Tag Manager (GTM): Container GTM-NQGPL63D manages analytics and marketing tags deployed on the Site.
  • Ahrefs Analytics: We use Ahrefs site analytics to monitor SEO performance, including page views and traffic sources.
  • Cookies & Similar Technologies: We use cookies for functionality, analytics, and preference storage. Full details are available in our Cookie Policy.
  • Server Logs: Our hosting provider (Hostinger) automatically collects IP addresses, browser type, referring URLs, and access timestamps.

4. How We Use Your Data

We process your personal data for the following purposes:

  • Service Delivery: To respond to your enquiries, schedule consultations, deliver IT consulting and technology services, and manage client accounts.
  • Communication: To send project updates, service notifications, and respond to support requests via email, phone, or WhatsApp.
  • Site Improvement: To analyse usage patterns through Google Analytics and Ahrefs, improve site content, user experience, and service offerings.
  • Security: To protect the Site from fraud, unauthorised access, and cyber threats — aligned with our Cybersecurity services expertise.
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes under Indian law, GDPR, CCPA, and other relevant frameworks.
  • Marketing (with consent): Where you have opted in, to send information about our services, industry insights, and events.

5. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), United Kingdom (UK), and other GDPR-applicable jurisdictions, we process data under:

  • Consent: Where you have given clear consent (e.g., submitting a contact form, accepting cookies).
  • Contractual Necessity: To perform a contract with you or take pre-contractual steps at your request.
  • Legitimate Interest: For analytics, site security, and improving our services, where this does not override your fundamental rights.
  • Legal Obligation: Where processing is necessary to comply with a legal requirement.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

  • Google LLC: Via Google Analytics 4, Google Tag Manager, and Google Site Kit for analytics and site performance monitoring.
  • Ahrefs Pte. Ltd.: For SEO analytics and site performance data.
  • Hostinger International Ltd.: Our web hosting provider which processes server-level data.
  • WhatsApp (Meta Platforms, Inc.): When you use the Click-to-Chat widget to contact us.
  • Yoast BV: Our SEO plugin provider which processes sitemap and site-structure data.
  • Service Partners: Trusted technology partners and subcontractors who assist in delivering services, bound by strict confidentiality agreements.
  • Legal Authorities: When required by law, regulation, court order, or governmental request.

7. International Data Transfers

As eCorpIT serves clients globally, your data may be transferred to and processed in countries outside your country of residence — including India, the United States (via Google and Meta services), and other jurisdictions where our service partners operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required under GDPR.

8. Data Retention

We retain personal data only as long as necessary for the purposes described in this Statement:

  • Contact form submissions: Up to 3 years after last interaction, unless an ongoing client relationship exists.
  • Client account data: For the duration of the client relationship plus 7 years as required by Indian corporate and tax law.
  • Analytics data: Google Analytics data is retained for 14 months (GA4 default). Server logs are retained for up to 12 months.
  • Marketing communications: Until you withdraw consent or unsubscribe.

9. Your Rights

9.1 Under GDPR (EEA/UK Residents)

You have the right to: access your data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict processing; data portability; object to processing; and withdraw consent at any time. To exercise these rights, email [email protected]. We will respond within 30 days.

9.2 Under CCPA (California Residents)

California residents have the right to: know what personal information is collected, used, shared, or sold; request deletion of personal information; opt out of the sale of personal information (note: eCorpIT does not sell personal data); and non-discrimination for exercising your rights.

9.3 Under Indian Law

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA), Indian residents have the right to access, correct, and withdraw consent for processing of personal data. Grievances may be directed to our Grievance Officer at [email protected].

10. Children’s Privacy

The Site is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete that information.

11. Security Measures

We implement industry-standard security measures to protect your data, including SSL/TLS encryption, access controls, regular security audits, and secure hosting infrastructure. As a company that provides Cybersecurity services, we apply the same rigorous standards to our own data handling practices.

12. Changes to This Privacy Statement

We may update this Privacy Statement periodically. Material changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page regularly.

13. Contact Us & Grievance Officer

For any privacy-related questions, data requests, or complaints:

  • Email: [email protected]
  • Phone: +91 981-094-0524
  • Address: Grievance Officer, eCorp Information Technologies Pvt. Ltd., 1120, 11th Floor, SVH 83 Metro Street, Sector 83, Gurugram, Haryana 122015, India

Last updated: 15 March 2026