Privacy Policy

Last updated: 24 September 2026

Introduction

We at eLan Technology ("we", "us", "our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visithttps://elan-tech.net or use our services.

Who Is Responsible for This Website

eLan Technology operates this website and determines why and how personal data submitted directly through it is used. For an accepted client project, our role may instead be that of a service provider processing limited information on the client’s documented instructions. The signed proposal, project responsibilities and any applicable data-processing terms clarify those roles.

The contact authorised to receive privacy questions, rights requests and grievances is available at privacy@elan-tech.net. Please do not send passwords, payment credentials, identity documents, medical information or unrelated confidential records when making a request.

Information We Collect

We may collect the following categories of personal data:

Contact form data: your name, email address and message, plus any optional phone number, company name, website address or service preference you choose to provide.
City and service-area page actions: location pages may link to our audit, quote, consultation, contact or visitor-initiated WhatsApp options but do not create a separate hidden city lead record. Any location or business-area detail you provide through a linked form or message is handled for that stated enquiry under the corresponding notice.
Quote-request data: your selected project type, name, email address and project description, plus any optional phone number, company, budget range or timeline you provide.
Website-audit request data: the website URL, your name and email address, plus any optional phone number, company, audit preferences or notes you provide. The free audit is limited to publicly accessible website content unless a separate written agreement is made.
Consultation-booking data: the contact, time-zone, scheduling and project details you choose to enter in Calendly after deliberately loading its booking calendar.
Product-demo request data: your selected product, name and email address, plus any optional phone number, company name, notes or questions you provide.
Emergency accessibility-assessment data: your name, email address and public website URL, plus any optional remediation target date and website platform you provide. We ask you not to submit demand letters, complainant details, health or disability information, passwords or other confidential material through this form.
Digital Launchpad WhatsApp enquiry data: your name, business name and email address, plus an optional preferred domain. The website does not store this form. After your express acknowledgement, the details are placed into a WhatsApp message for you to review and send; WhatsApp/Meta then processes the data under its own privacy terms.
Payment data: Razorpay payment controls on our pricing and paid-audit sections remain blocked until you expressly choose to load them. Razorpay may then receive connection, browser and device information and collects the payment and billing details you enter directly into its hosted checkout. We do not receive or store your full card, bank-account or UPI credentials.
Recruitment data: the contact details, CV, work and education history, skills, location and optional portfolio or professional-profile links you email when applying for a role or expressing general career interest. We ask applicants not to send government identity documents, bank details, passwords, full home addresses, medical records, family information or other unnecessary sensitive material at the application stage.
Digital contact-card actions: Nishant Barde’s digital card does not ask for or store visitor personal details. Calling, emailing, downloading the public contact file, scanning its QR code or sharing the public page begins only when you deliberately select that action. WhatsApp and social-media links take you to external providers that may receive connection, browser and device information under their own privacy terms.
DigiBizID venture information: the DigiBizID information page on this website does not contain a venture sign-up or profile form. If you visit the separately hosted venture website and subscribe, it may process the professional name, role, business details, approved photograph or logo, phone number, email address, website and social links that you choose for a profile, together with the account, support and billing information required for the service. The current notice shown by the venture website applies before you submit those details.
Service discovery and project-delivery data: business requirements, authorised contact details, system and integration information, project communications, approvals and the minimum access details reasonably required for an accepted engagement. Where practical, we ask clients to use suitable test data instead of live customer, employee or user records and to provide credentials through an agreed secure channel rather than a general website form.
Website-design content and research data: brand assets, authorised staff or professional profiles, photographs, testimonials, business contact details, content, existing analytics or website information and, only where included in the agreed work, limited research or usability-testing information. Clients should confirm they are authorised to supply identifiable content and should not place live customer or employee records into prototypes or general project messages.
Application and ecommerce implementation data: agreed data models, user roles, field definitions, workflows, integrations, test accounts, configuration and limited technical logs needed to design or support a web application, mobile app or online store. We recommend generated, masked or otherwise suitable test data instead of live customer, employee, patient or payment information wherever practical.
Configurable product implementation data: approved field definitions, user roles, workflows, integrations, migration files, test accounts and limited technical records needed to configure a property, conference, society or hospitality portal. Depending on the selected product, the client-operated production system may process leads, listings, delegates, abstracts, members, event attendance, guests, bookings, staff assignments, invoices or communication records. The client determines the production purpose, notices, authorised users and retention unless a written agreement expressly assigns a different responsibility.
SEO and digital-marketing access: delegated access and reports from services such as Search Console, analytics, tag management, advertising and social platforms, together with campaign content, lead-field definitions and performance information required for the agreed work. Customer-list uploads, remarketing audiences and user-level exports are not assumed to be included and require a documented purpose and appropriate client instruction.
Branding and creative-project data: authorised stakeholder details, interview or survey responses, professional photographs, testimonials, brand assets, draft concepts and licensed materials used for the agreed creative work. Publication, attribution and recording choices should be confirmed with identifiable participants.
Maintenance, security and integration data: named administrative access, system configuration, scoped credentials, API field mappings, security alerts, technical logs, backups and incident evidence required for the accepted service. Secrets should be provided through an agreed secure channel and access should be restricted and removed when no longer required.
Accessibility testing evidence: affected interfaces, code excerpts, reports, test-account activity and, where separately agreed, participant feedback or recordings needed to explain and verify accessibility findings. Reports and captures should exclude or redact unrelated customer, patient, employee, payment, health or disability information.
Testimonial and review data: a shortened or approved professional name, professional role, organisation or location, feedback, rating where applicable, source and available publication date. Feedback may come directly from a client, from a LinkedIn recommendation supplied by the profile owner or from a publicly displayed Google review.
Portfolio publication data: project or business names, professional brand identities, logos, website screenshots, public website links, project descriptions and relevant country or business-location information used to identify and explain delivered work. A project preview can contain publicly presented people or other identifiable material visible on the captured website at the time.
Leadership and team profile data: professional names, photographs, current roles and concise work-related biographies published to identify company leadership, responsibilities and expertise. We do not intentionally publish private home addresses, personal phone numbers, family details or unrelated personnel information in these profiles.
Optional analytics data: pages visited, approximate location, device and browser information, referral source and interactions. These tools load only after you allow analytics.
Technical data: IP address, browser type, and device type, used for security monitoring and analytics purposes.

How We Use Your Information

We use the information we collect to:

Respond to your enquiries, provide project quotes, prepare requested website audits, arrange consultations, organise product demonstrations, assess emergency accessibility-remediation requests and prepare Digital Launchpad scope information.
Assess employment applications, communicate with candidates and, only when the applicant chooses it, consider an application for other suitable roles.
Publish authentic, source-identified client feedback as evidence of individual service experiences, without presenting it as a guarantee of results.
Document relevant project work and demonstrate our design, development and technology capabilities through portfolio entries.
Identify company leadership and professional responsibilities so clients and visitors can understand who is accountable for relevant areas of work.
Explain the DigiBizID venture and, where a person separately subscribes on its website, create, maintain and support the professional profile and account they request.
Scope, quote, deliver, secure, support and close agreed service engagements, including documenting authorised access, responsibilities, changes, approvals and handover.
Plan and deliver agreed website-design work, obtain content and design approvals, conduct scoped research or testing, document form and tracking requirements and prepare an authorised handover.
Design, build, integrate, test, support and hand over agreed applications, stores and mobile experiences using documented data fields, roles, environments, providers and client instructions.
Configure and support agreed product modules using documented roles, minimum fields, providers, migration instructions, retention settings and client-approved operational workflows.
Provide agreed search, campaign, creative, maintenance, security, integration and accessibility services using limited account access, evidence and reporting appropriate to the engagement.
Improve our website performance and service offerings.
Comply with applicable legal obligations.

Why We Process Personal Data

We process personal data for a lawful purpose connected with an enquiry, a requested service, an accepted agreement, a visitor-selected external action, website security or an applicable legal obligation. Where we ask for consent, the request should identify the purpose and the relevant information, and consent can be withdrawn as described below. Withdrawal does not undo processing that was lawful before withdrawal and may not prevent retention required by law or necessary to complete an already requested transaction.

Applicable Data-Protection Framework

Our India-focused implementation is informed by theDigital Personal Data Protection Act, 2023and the notifiedDigital Personal Data Protection Rules, 2025, subject to their applicable commencement and transition provisions. Other laws may apply according to the individual, service, client system and jurisdiction. This policy explains our practices; it is not a legal opinion for a client’s business.

Data Storage & Security

Website enquiries are stored in a private area of our Hostinger hosting account and sent as transactional notifications through Brevo.
Supported website connections use SSL/TLS encryption in transit. No internet transmission, hosting environment or security control can be guaranteed to eliminate every risk.
We do not sell, rent, or trade your personal data to any third parties.
Unconverted contact-page enquiries, quote requests, free-audit requests, demo requests, emergency-assessment requests, Digital Launchpad WhatsApp enquiries and consultation records under our control are retained for up to 12 months. Payment, invoice and transaction records are retained for the period required for accounting, tax, fraud prevention, disputes and other legal obligations. Information connected to an active project, contract, dispute or legal obligation may be retained for the relevant operational or statutory period.
Unsuccessful role-specific applications are normally removed within six months after the recruitment process closes. Applications may be considered for other suitable roles for up to 12 months only when the applicant selects that preference. General-interest applications are retained for up to 12 months. Recruitment information may be retained longer when reasonably required for an active dispute or legal obligation.
Published testimonials are retained while they remain relevant and accurate. A reviewer may request correction, shortened attribution or removal by contacting us. We may ask for proportionate verification so that another person cannot alter a reviewer’s statement.
Public portfolio entries are retained while they remain relevant and reasonably accurate. A client, brand owner or identifiable person may request correction, updated attribution or removal of a name, image, link or other identifying material. Separate project, invoice and contractual records may still be retained privately for operational, accounting or legal requirements.
Public leadership and team profiles are retained while the professional role remains current and the profile remains relevant. The featured person may request a corrected name, role, biography or photograph, or ask for public removal. Separate private employment, contractor, tax, payment, security and legal records may be retained for their applicable operational or statutory periods.
DigiBizID profile and account information under our control is retained while the subscription or service relationship remains active and for the period reasonably needed for account closure, support, backups, disputes and legal obligations. Public profile access should be withdrawn after confirmed closure or an approved removal request, subject to technical propagation and proportionate identity verification. Billing and transaction records may be retained for the applicable accounting, tax and legal periods.
Project working data and system access under our control are reviewed at handover or service closure and returned, transferred, restricted or removed according to the accepted scope, contract and any applicable data-processing terms. Limited contractual, approval, security, invoice, tax, dispute and legal records may be retained for their relevant operational or statutory periods.
Delegated access to client analytics, advertising, social, search, developer, commerce, hosting and integration accounts is reviewed when the relevant engagement ends and should be removed when no longer required. Working exports and reports under our control are retained only for the active service, agreed handover or support period, or a documented legal, security or dispute requirement.
Maintenance logs, integration error records, security alerts, incident evidence and backups under our control follow the retention and access terms agreed for that environment. Records held inside a client-owned platform or third-party provider remain subject to the client’s instructions, provider configuration and applicable obligations.
Product configuration files, migration copies and test records under our control are reviewed at handover or service closure and returned, restricted or removed according to the accepted agreement. Live leads, delegate, member, guest, booking and operational records held in a client-operated deployment remain under the client’s configured retention and access procedures.

Cookies

We use essential cookies required for site functionality and optional analytics cookies to understand how visitors use our website. You may manage your cookie preferences at any time. For full details, please see our Cookie Policy.

Your Rights

Subject to applicable law and proportionate identity verification, you may have the following rights regarding your personal data:

Access: request a summary of personal data being processed, the activities undertaken with it and information available about relevant sharing.
Correction and completion: request correction of inaccurate or misleading personal data and completion or updating of incomplete information.
Erasure: request erasure where retention is no longer required for the stated purpose or by applicable law.
Withdraw consent: withdraw consent with comparable ease where consent is the basis for the processing.
Grievance redressal: raise a privacy grievance with us and, after using the applicable grievance process, approach the competent authority where the law permits.
Nomination: where applicable, nominate another individual to exercise relevant rights in the event of death or incapacity.

To make a request, email us using the details below and describe the website interaction, project or email address concerned. We may request limited information to verify that the requester is the person concerned or is properly authorised. We will acknowledge and handle the request within the period applicable to the circumstances and law.

Children's Personal Data

This business website is not directed to children and its enquiry forms are intended for adults acting for themselves or an organisation. Please do not submit a child’s personal data through a general enquiry form. If a client product is intended to process children’s data, age assurance, verifiable parental consent, notices, tracking restrictions and other safeguards require a separate written assessment before implementation.

Security Incidents

We maintain proportionate technical and organisational safeguards for information under our control. If we become aware of a personal-data incident, we assess its scope, contain it where possible, preserve relevant evidence and make notifications required by applicable law and the agreed client responsibilities. Suspected incidents can be reported toprivacy@elan-tech.net.

Third-Party Services

We use the following third-party services which may process your data in accordance with their own privacy policies:

Google Analytics and Google Tag Manager (optional website measurement)
Microsoft Clarity (optional usage and session analysis)
Calendly (appointment scheduling; its embedded calendar loads only after you deliberately choose to use it)
Hostinger (website hosting and private form backup storage)
Brevo (transactional form notification delivery)
FormSubmit (temporary fallback form-delivery channel when the primary alert channel is unavailable)
WhatsApp/Meta (visitor-initiated messaging; Digital Launchpad form details are handed to WhatsApp only after an explicit acknowledgement)
LinkedIn, Facebook, Instagram, YouTube and X (visitor-initiated links from our digital contact card and other social-media links)
Razorpay (hosted payment processing on pricing and paid-audit sections; its payment script remains blocked until you explicitly choose to load it)
Email service providers (delivery and storage of messages, including employment applications sent to our careers address)

We encourage you to review the privacy policies of these third-party providers.

Processing Locations and External Providers

Some hosting, email, analytics, scheduling, payment, social-media or support providers may process information using infrastructure outside your state or country. We select and configure providers according to the service need and available contractual controls. A client project that requires a particular hosting region, transfer arrangement or data-localisation control must identify it in the accepted scope before data is placed in that environment.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

Grievance Escalation

Please first send a clear description of the concern to our privacy contact so that we can review the relevant record and respond. If the concern is not resolved, you may use any escalation or complaint mechanism available under the law applicable to you. Nothing in this policy limits a right that cannot lawfully be limited.

Contact

For privacy-related enquiries, including requests to access, correct, or delete your data, please contact us at: