Trust Center · Legal
Certyze Website Privacy Notice
Effective 19 October 2026. Questions: legal@thinkdatalabs.com
1. About This Privacy Notice
This Privacy Notice is effective as of 19 October 2026 and applies to all personal data processed through certyze.com.
This notice uses terminology aligned with the Indian Digital Personal Data Protection Act, 2023 (“DPDP Act”). Where the DPDP Act refers to a “Data Fiduciary” and “Data Principal,” these terms correspond to “data controller” and “data subject” under the EU General Data Protection Regulation (“GDPR”) and the UK General Data Protection Regulation (“UK GDPR”), respectively.
Visitors subject to the GDPR or UK GDPR will find their specific rights and applicable legal bases addressed in the relevant sections of this notice alongside DPDP Act provisions.
2. Data Fiduciary and Controller
The Data Fiduciary (as defined under the Digital Personal Data Protection Act, 2023) and data controller (as defined under the EU GDPR and UK GDPR) for personal data processed through certyze.com is:
Thinkdata Labs LLP LLPIN: AAI-9081 GSTIN: 06AAMFT4128J2ZW Registered Office: 176 First Floor, Sector-10, Panchkula, Haryana 134112, India
For any questions, concerns or requests relating to this Privacy Notice or the processing of your personal data, please contact us at: legal@thinkdatalabs.com.
3. Personal Data We Collect
We collect personal data in two ways when you interact with certyze.com: data you provide voluntarily and data collected automatically.
3.1 Data You Provide. When you submit a contact or demo request form, we may collect:
Name
Work email address
Phone number
Organisation
Country
Role or job title
Message content
3.2 Data Collected Automatically. When you visit certyze.com, our servers and service providers may collect:
IP address
Browser and device information
Technical server logs
We do not collect personal data beyond the categories described above through certyze.com.
4. Purposes and Legal Bases for Processing
We process Personal Data for the purposes set out below, each paired with the applicable legal basis under the DPDP Act and, for visitors subject to the GDPR or UK GDPR, the corresponding lawful basis.
| Purpose | DPDP Act Basis | GDPR / UK GDPR Basis |
|---|---|---|
Responding to enquiries and scheduling demos | Consent | Consent or legitimate interests (pre-contractual engagement) |
Communicating via email, telephone or WhatsApp solely concerning the visitor’s request | Consent | Legitimate interests (fulfilling the requested communication) |
Website security, fraud prevention and technical diagnostics | Permitted use (reasonable purposes) | Legitimate interests (network and information security) |
Compliance with applicable legal obligations | Permitted use (compliance with law) | Legal obligation |
5. No Unsolicited Marketing
Certyze contacts Data Principals solely in connection with the specific enquiry or demo request they have submitted. Communications are made through email, telephone or WhatsApp and are limited to the subject matter of the request.
Thinkdata Labs LLP does not send unsolicited marketing communications, promotional materials or newsletters to Data Principals unless it has obtained separate, affirmative consent for that purpose. Any such consent is independent of the consent provided when submitting a contact or demo request form.
6. Cookies and Similar Technologies
Certyze.com uses only strictly necessary cookies, which are required for basic site functionality and operate without consent. No analytics, advertising or other non-essential cookies are currently used. If any are introduced, they will be used only after the visitor gives affirmative consent through a consent mechanism presented on the website, and this Notice and the Cookie Notice will be updated first.
Visitors can manage cookies at any time through their browser settings. For a complete description of the cookies in use, their purposes, and applicable retention periods, please refer to our separate Cookie Notice available on certyze.com.
7. Disclosures and Third-Party Service Providers
Thinkdata Labs LLP may share Personal Data with the following categories of recipients, solely to the extent necessary for the purposes described in this Privacy Notice.
| Category of Recipient | Description | Safeguards |
|---|---|---|
Hosting Provider | Amazon Web Services (Mumbai, India): DNS and website hosting on Amazon Lightsail. | Data processing agreement with confidentiality, security and data-deletion obligations. |
Communication Tools | Service providers engaged for email delivery, telephony and messaging. | Contractual terms requiring processing only on documented instructions, appropriate technical and organisational security measures, and prompt notification of data breaches. |
Thinkdata Labs LLP does not sell or rent Personal Data to any third party. Disclosures may also be made where required by applicable law, regulation or valid legal process.
8. International Data Transfers
Personal data collected through certyze.com may be transferred to, and processed in, countries outside India. Thinkdata Labs LLP does not represent that all website data remains within India.
The website is hosted by Amazon Web Services in the Mumbai (ap-south-1) region. Some service providers, such as those used for email delivery, may process data in other countries.
Where personal data is transferred outside India or, for visitors subject to the GDPR or UK GDPR, outside the European Economic Area or the United Kingdom, Thinkdata Labs LLP applies appropriate safeguards, including standard contractual clauses and, where available, reliance on adequacy decisions of the relevant authority.
9. Data Retention
Thinkdata Labs LLP retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Notice or as required by applicable law. The following retention periods apply:
| Category of Data | Retention Period |
|---|---|
Demo and sales-enquiry records | 12 months after the last substantive interaction |
Consent and opt-out evidence | Three years after withdrawal of consent or last communication, whichever is later |
Website security logs | 180 days, unless a longer period is required by law |
Legal-claims and tax records | The period mandated by applicable law |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised, unless continued retention is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
10. Security Measures
Thinkdata Labs LLP applies reasonable technical and organisational measures to protect Personal Data processed through certyze.com against unauthorised access, loss, alteration or disclosure. These measures include, where appropriate:
Encryption of data in transit using industry-standard protocols;
Access controls limiting Personal Data to authorised personnel on a need-to-know basis;
Periodic review of security practices and service-provider arrangements.
No method of electronic transmission or storage is completely secure. Thinkdata Labs LLP cannot guarantee absolute security but will promptly address any suspected breach in accordance with applicable law.
11. Rights of Data Principals and Data Subjects
Depending on the applicable data protection law, you may exercise the rights set out below by writing to legal@thinkdatalabs.com.
| DPDP Act (Data Principals) | GDPR / UK GDPR (Data Subjects) |
|---|---|
Right to access personal data | Right of access |
Right to correction and erasure | Right to rectification and erasure |
Right to grievance redressal | Right to restriction of processing |
Right to nominate another person | Right to data portability |
Right to object | |
Right to withdraw consent | |
Right to lodge a complaint with a supervisory authority |
We will verify your identity before acting on any request and respond within the timeframe required by applicable law.
12. Grievance Redressal
If you have a complaint or grievance regarding the processing of your Personal Data, please contact us at:
Email: legal@thinkdatalabs.com
We will acknowledge your grievance within seven (7) business days and endeavour to resolve it within thirty (30) days of receipt.
If you are not satisfied with our response, you may escalate your complaint to the appropriate authority: the Data Protection Board of India under the DPDP Act, or the relevant supervisory authority under the GDPR or UK GDPR, as applicable.
13. Children’s Data
13.1 Certyze.com is not directed at children. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), a child is an individual below the age of eighteen (18) years. Under the GDPR and UK GDPR, the applicable age threshold for digital consent is sixteen (16) years, unless a Member State has lowered it (to no less than thirteen years).
13.2 Thinkdata Labs LLP does not knowingly collect or process Personal Data from children without verifiable consent from a parent or lawful guardian. If we become aware that we have collected Personal Data from a child without appropriate parental or guardian consent, we will take prompt steps to delete such data.
14. Third-Party Links
Certyze.com may contain hyperlinks to websites, platforms or resources operated by third parties that are not under the control of Thinkdata Labs LLP. The inclusion of any such link does not imply endorsement of, or affiliation with, the linked site or its operator.
This Privacy Notice applies solely to Personal Data processed through certyze.com. Thinkdata Labs LLP is not responsible for the privacy practices, content or security of any third-party website. Data Principals and Data Subjects are encouraged to review the applicable privacy notice of each external site before providing any personal information.
15. Changes to This Privacy Notice and Contact Information
Thinkdata Labs LLP may update this Privacy Notice from time to time to reflect changes in applicable law, our processing activities, or operational practices. Where we make material changes, we will post the revised notice on certyze.com with a new effective date. We encourage visitors to review this page periodically.
For any questions, concerns, or requests relating to this Privacy Notice, please contact us at:
Thinkdata Labs LLP, 176 First Floor, Sector-10, Panchkula, Haryana 134112, India. Email: legal@thinkdatalabs.com.
