Privacy notice

IT Cyber Cloud Solution ("ITCCS", "we") is an IT, cloud, cybersecurity and HR technology services firm serving clients worldwide. We are the data fiduciary for personal data collected through this website. Contact: info@cloudcyber.co.in.

When you submit the consultation form, the enquiry assistant or the newsletter signup, we collect:

• Name
• Work email address
• Company name
• Phone number (optional)
• Service interest and your message (through the enquiry assistant, also your organisation size and timeline)
• The page URL you submitted from and the first page you landed on
• Marketing parameters in that URL where present: UTM parameters (such as utm_source or utm_campaign), Google Ads click identifiers (gclid, gbraid, wbraid) only if you allowed Advertising cookies, and the referring website

If you apply for a role or send a hiring brief, we also collect the CV and covering email you send us, or the details of the role you are hiring for.

We also record a pseudonymised (hashed) IP address used only for spam prevention. We do not store the IP address itself.

• To reply to your enquiry and arrange a consultation
• To prepare a proposal if you ask for one
• To send the newsletter, if you subscribed
• To protect the website against spam and abuse
• To understand which pages and campaigns bring enquiries

We process your data on the basis of your consent, given when you submit a form, and for the specific purpose stated at that point. You can withdraw consent at any time by emailing info@cloudcyber.co.in. Withdrawal does not affect processing already carried out.

Newsletter emails include an unsubscribe instruction; you can also email us to be removed.

• Enquiries (consultation form and enquiry assistant): 24 months from your last contact, unless we start working together
• Client records: for the duration of the engagement and as required by Indian tax and company law
• Newsletter subscriptions: until you unsubscribe
• CVs are kept for up to 12 months unless you ask us to delete them sooner
• Hiring briefs: as for enquiries
• Pseudonymised IP addresses and processing logs: kept for one year, the minimum the DPDP Rules, 2025 require, then deleted

We do not sell personal data. We share it only with service providers (data processors) who help us run the website, under contract:

• Lovable Cloud (built on Supabase), which hosts the website database and stores form submissions
• Lovable's email service, which sends enquiry notifications
• Our email provider, which delivers our replies

Our providers process data outside India, including in the United States and the EU. The DPDP Act allows this except to countries the Government restricts by notification, and we will not transfer data to a restricted country.

The website uses only the storage needed for it to work, such as remembering your light or dark theme. When you send a consultation request, including through the enquiry assistant, we record which campaign or website referred you, if any. See the Cookie Notice.

Under the DPDP Act, 2023 you have the right to:

• Access a summary of the personal data we hold about you, how it is processed, and the service providers we have shared it with
• Correct, complete or update inaccurate data
• Erase your personal data, unless we must keep it for the purpose you gave it for or to comply with the law
• Withdraw consent
• Grievance redressal, by contacting us as below
• Nominate another person to exercise these rights in the event of your death or incapacity

Email info@cloudcyber.co.in to exercise any right. We may need to verify your identity first. We aim to respond within 30 days.

Form submissions are sent over encrypted connections and stored in a database that the public cannot read. Access is limited to the founder and, where needed, the service providers listed above.

Grievance Officer: Akash Sengar, info@cloudcyber.co.in (subject: "Grievance"). We respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India through its online complaint process.

If you are in the EU, EEA or UK, the GDPR (or UK GDPR) also applies. Our legal bases are your consent (analytics and advertising cookies, newsletter), steps you ask us to take before a contract (consultation requests and proposals), and our legitimate interest in replying to business enquiries and protecting the site from spam. You also have the right to restrict or object to processing, to data portability, and to complain to your local data protection authority. We process your data in India. Where our providers transfer it to other countries, they rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

To read this notice in another language listed in the Eighth Schedule to the Constitution of India, email us at info@cloudcyber.co.in.

This website is not intended for children under 18.

We will update this page when our practices change and revise the date at the top. Last updated: 5 October 2026.