Privacy Policy
Website: sahfar.in Operated by: SAHFAR IT TECH SOLUTIONS PVT LTD.
Last Updated: September 12, 2026
1. Introduction
SAHFAR IT TECH SOLUTIONS PVT LTD. (“Company,” “SAHFAR,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of everyone who visits sahfar.in or engages our services, including Website Design & Development, Application Development, Digital Marketing, SEO, Social Media Marketing, Logo & Graphic Design, Email Marketing, Data Analytics, Cyber Security, Advertisement & Commercial Video Production, Content Writing, Banner & Pamphlet Designing, and Brand Development (collectively, the “Services”).
This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and what rights you have regarding your information. It applies to visitors, prospective clients, registered clients, and users located in India and internationally.
By using our Website or engaging our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Website and refrain from sharing personal data with us.
2. Company Information
- Company: SAHFAR IT TECH SOLUTIONS PVT LTD.
- Address: Gr Floor, Manorama Apartment, BBT Road Bye Lane 1, West Jagtala, Maheshtala, Kolkata – 700141, West Bengal, India
- Phone: (+91) 8910146158 / 8420389850
- Email: info@sahfar.in
- GSTIN: 19ABFCS8066B1Z6
We act as the “data controller” (or equivalent term under applicable law) for personal data collected through sahfar.in and in connection with our Services.
3. Scope of This Policy
This Policy applies to:
- Visitors browsing sahfar.in;
- Prospective clients submitting inquiries, quotation requests, or contact forms;
- Registered clients engaging any of our 13 Service categories;
- Individuals whose data is processed on behalf of clients during service delivery (e.g., website visitors of a client site we manage, email subscribers of a client’s mailing list, or social media followers of a client’s page).
Where we process personal data on behalf of a client (for example, running a client’s email marketing campaign, managing a client’s social media page, or analyzing a client’s website traffic), we act as a “data processor” or “service provider,” and the client remains responsible for ensuring lawful collection and use of that data, in accordance with our Terms & Conditions.
4. Information We Collect
4.1 Information You Provide Directly
- Name, email address, phone number, company name, and billing/shipping address;
- Project briefs, business information, brand assets, login credentials, and content shared for service delivery;
- Payment details (processed securely via third-party payment gateways; we do not store full card numbers);
- Communications sent to us via email, phone, contact forms, or messaging platforms.
4.2 Information Collected Automatically
- IP address, browser type, device information, and operating system;
- Pages visited, time spent, referral source, and click behavior on sahfar.in;
- Cookies and similar tracking technologies (see Section 8).
4.3 Information Collected Through Service Delivery
Depending on the Service engaged, we may collect or process:
- Website/App Development & Cyber Security: server logs, hosting credentials, source code, security vulnerability data, and technical configuration details.
- Digital Marketing, SEO & Social Media Marketing: website analytics, keyword performance, ad account data, audience demographics, and engagement metrics from platforms such as Google, Meta, and LinkedIn.
- Email Marketing: subscriber lists, email open/click rates, and campaign performance data (provided by the Client or collected with proper consent).
- Data Analytics: business data, sales figures, customer behavior data, and dashboards created from Client-provided or platform-connected sources.
- Content Writing, Graphic Design, Video Production, Banner/Pamphlet Design & Brand Development: creative briefs, brand guidelines, reference material, and feedback shared during the creative process.
5. How We Use Your Information
We use collected data for the following purposes:
- To respond to inquiries and provide quotations for our Services;
- To deliver, manage, and improve the specific Service(s) engaged;
- To process payments, issue invoices, and maintain financial records (including GST compliance);
- To communicate project updates, revisions, approvals, and support;
- To run and optimize Digital Marketing, SEO, Social Media, and Email Marketing campaigns on behalf of clients;
- To conduct security assessments and protect digital assets under Cyber Security engagements;
- To generate analytics, reports, and insights under Data Analytics Services;
- To showcase completed work in our portfolio and marketing materials (subject to client confidentiality requests);
- To comply with applicable legal, tax, and regulatory obligations;
- To send administrative notices, policy updates, or (with consent) promotional communications about our own Services.
We do not use your personal data for any purpose incompatible with the purposes stated above without obtaining your additional consent, where required by law.
6. Legal Basis for Processing
Where applicable (including under the GDPR for users in the European Economic Area, or the Digital Personal Data Protection Act, 2023 (“DPDPA”) for users in India), we process personal data on one or more of the following legal bases:
- Consent — where you have given clear consent (e.g., subscribing to updates, marketing communications);
- Contractual necessity — to perform a service agreement or take pre-contractual steps at your request;
- Legitimate interests — for business operations, security, and service improvement, provided such interests do not override your fundamental rights;
- Legal obligation — to comply with tax, accounting, or regulatory requirements.
7. Sharing & Disclosure of Information
We do not sell personal data. We may share information with:
- Service Providers & Sub-Processors: hosting providers, payment gateways, email service providers, advertising platforms (Google Ads, Meta Ads, etc.), analytics tools (e.g., Google Analytics), and freelance collaborators engaged to help deliver Services — bound by confidentiality and data protection obligations.
- Clients: where data is collected on behalf of a client (e.g., campaign leads, subscriber engagement data), it is shared with that client as part of Service delivery.
- Legal & Regulatory Authorities: where required to comply with applicable law, court orders, or governmental requests.
- Business Transfers: in the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
We require all third parties with whom we share data to maintain appropriate security and confidentiality standards.
8. Cookies & Tracking Technologies
sahfar.in uses cookies and similar technologies to enhance user experience, analyze traffic, and support marketing efforts. Categories of cookies used include:
- Essential Cookies — required for basic Website functionality;
- Analytics Cookies — to understand visitor behavior (e.g., Google Analytics);
- Marketing/Advertising Cookies — to measure and optimize advertising campaigns (e.g., Meta Pixel, Google Ads tags);
- Functional Cookies — to remember preferences and improve usability.
You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality. Where required by law, we will request your consent before placing non-essential cookies via a cookie consent banner.
9. International Data Transfers
As we serve clients across India and internationally, personal data may be transferred to, stored, or processed in countries outside your country of residence, including India, where our servers and operations are based, and other countries where our sub-processors (e.g., cloud hosting, advertising platforms) operate.
Where personal data is transferred internationally — including from the European Economic Area, United Kingdom, or other jurisdictions with data transfer restrictions — we take reasonable steps to ensure adequate protection, such as relying on standard contractual clauses, provider certifications, or equivalent safeguards recognized under applicable law.
10. Data Retention
We retain personal data only for as long as necessary to:
- Fulfil the purposes outlined in this Policy;
- Maintain business, tax, and accounting records as required under Indian law (typically a minimum of 6–8 years for financial records);
- Resolve disputes and enforce our agreements;
- Comply with applicable legal or regulatory retention requirements.
Data collected for marketing purposes (e.g., email subscriber lists) will be retained until you withdraw consent or unsubscribe, after which it will be deleted or anonymized within a reasonable period.
11. Data Security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:
- Secure servers and encrypted data transmission (SSL/TLS);
- Access controls limiting data access to authorized personnel only;
- Regular security assessments, particularly for Cyber Security engagements;
- Secure handling of Client login credentials and sensitive project data.
While we strive to protect your data using industry-standard practices, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
12. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right to Access — request a copy of the personal data we hold about you;
- Right to Rectification — request correction of inaccurate or incomplete data;
- Right to Erasure — request deletion of your personal data, subject to legal retention requirements;
- Right to Restrict or Object to Processing — request limitation of processing or object to certain uses (e.g., direct marketing);
- Right to Data Portability — request your data in a structured, machine-readable format (where applicable under GDPR);
- Right to Withdraw Consent — withdraw previously given consent at any time, without affecting prior lawful processing;
- Right to Lodge a Complaint — with a relevant data protection authority in your jurisdiction, where applicable.
To exercise any of these rights, please contact us at info@sahfar.in. We will respond within a reasonable timeframe as required by applicable law.
13. Children’s Privacy
Our Website and Services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from children under 18. If we become aware that we have inadvertently collected data from a minor, we will take reasonable steps to delete such data promptly.
14. Third-Party Links & Platforms
Our Website and Services may include links to, or integrations with, third-party websites and platforms (e.g., social media networks, advertising platforms, payment gateways). This Privacy Policy does not extend to those third parties, and we encourage you to review their respective privacy policies, as we are not responsible for their data practices.
15. Marketing Communications
We may send you promotional emails, newsletters, or updates about our Services if you have opted in or provided consent (e.g., through a contact form or subscription). You may opt out at any time by:
- Clicking the “unsubscribe” link in any marketing email; or
- Contacting us directly at info@sahfar.in.
Transactional communications related to an active project or Service (e.g., invoices, project updates) are not considered marketing and cannot be opted out of while the engagement is active.
16. Data of Clients’ End-Users
For Services such as Digital Marketing, SEO, Social Media Marketing, Email Marketing, and Data Analytics performed on behalf of clients, we may process personal data belonging to our client’s customers, subscribers, or website visitors (“End-User Data”). In such cases:
- The Client is responsible for ensuring lawful collection of End-User Data and for maintaining its own privacy policy covering such collection;
- SAHFAR processes End-User Data solely as instructed by the Client and strictly for the purpose of delivering the engaged Service;
- SAHFAR does not use End-User Data for its own independent marketing purposes without explicit authorization.
17. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our Services, technology, or legal requirements. The “Last Updated” date at the top of this page indicates the most recent revision. We encourage you to review this Policy periodically. Continued use of our Website or Services after changes are posted constitutes acceptance of the updated Policy.
18. Governing Law
This Privacy Policy is governed by the laws of India. For clients and users outside India, we additionally aim to align our data practices with widely recognized international standards, including the GDPR (for EU/UK users) and other applicable data protection frameworks, to the extent relevant to our processing activities.
19. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
SAHFAR IT TECH SOLUTIONS PVT LTD. Gr Floor, Manorama Apartment, BBT Road Bye Lane 1, West Jagtala, Maheshtala, Kolkata – 700141, West Bengal, India
📞 (+91) 8910146158 / 8420389850
✉️ info@sahfar.in
🌐 sahfar.in
GSTIN: 19ABFCS8066B1Z6
This Privacy Policy has been drafted to reflect SAHFAR IT TECH SOLUTIONS PVT LTD.’s multi-service business model serving clients in India and internationally. We recommend a final review by a qualified legal professional to confirm full compliance with data protection laws applicable to your specific client base and operating regions.