Privacy Policy

This policy explains what personal data ART Technology & Software collects, why we collect it, who we share it with, how long we keep it and the rights you have. It covers visitors to our website, people we contact about our services, our clients and suppliers, and people who apply to work with us.

Last updated: 23 September 2026

Who we are

ART Technology & Software is the trading name of ART Technology and Software India Private Limited, a company registered in India with Corporate Identification Number (CIN) U72200KL2003PTC016461.

Our office is at Thapasya Building, Ground Floor, Infopark Phase I, Kakkanad, Kochi, Kerala 682030, India.

We are an offshore development centre providing software and product engineering, data engineering, AI and cybersecurity services, managed services and global capability centres to businesses around the world.

ART Technology and Software India Private Limited is the data controller for the personal data described in this policy. This means we decide why and how your personal data is used.

We have appointed a Data Protection Officer. You can contact them at info@artechsoft.com.

Whose data this policy covers

What we collect depends on how you deal with us. Please read the section that applies to you:

  • Website visitors: people who browse this website or send us an enquiry through it.
  • Business contacts: people at companies who may be interested in our services, including people we contact by email.
  • Clients and suppliers: people who work for organisations that buy services from us or supply services to us.
  • Job applicants: people who apply for a role with us.

The sections from “Who we share data with” onwards apply to everyone.

Website visitors

What we collect

  • Details you send us: when you use a form on this website, it opens an email to us. We receive what you write, such as your name, company, work email address and your message.
  • Technical data: our web host may record technical details of each visit, such as your IP address, browser type and the pages you request, to deliver the website and keep it secure.
  • Analytics data: only if you accept analytics cookies, Google Analytics collects information about how you use the website, such as the pages you visit, how long you stay and the type of device you use.
  • Your cookie choice: we store whether you accepted or refused cookies. See our Cookie Policy.

Why we use it and our legal basis

PurposeLegal basis
Replying to your enquiryLegitimate interests (responding to people who contact us)
Running and securing the websiteLegitimate interests (keeping the website available and safe)
Understanding how the website is used, through Google AnalyticsConsent, which you give or refuse in the cookie banner

Business contacts and email campaigns

We contact people at businesses who we believe may be interested in our services. We run these email campaigns ourselves. We do not use a marketing agency to send them.

What we collect

  • Name and job title
  • Work email address and business phone number
  • Company name, industry, company size and location
  • Professional profile information, such as a LinkedIn profile you have made public
  • Your interactions with our emails, such as replies, and whether you have asked us not to contact you

We do not collect any special categories of personal data, such as health or religious beliefs, about business contacts.

Where it comes from

  • Apollo: a business contact data provider, Apollo.io, from which we obtain professional contact details.
  • Events: business events where you have met us or shared your details.
  • Our own contacts: people who have dealt with us before or given us their details directly.

Why we use it and our legal basis

PurposeLegal basis
Identifying businesses and people who may benefit from our servicesLegitimate interests (finding new clients for our business services)
Sending business emails about our servicesLegitimate interests (promoting our business services to other businesses)
Managing replies, meetings and our relationship with you in our CRMLegitimate interests (managing our business relationships)
Keeping a record of people who have asked not to be contactedLegal obligation and legitimate interests (respecting your choice not to hear from us)

Where we rely on legitimate interests, we have assessed that our interest in contacting businesses about relevant services is balanced against your rights, because we only use professional contact details, we only contact people about services relevant to their role, and you can opt out at any time.

Opting out

Every campaign email we send includes a way to opt out. You can also email info@artechsoft.com at any time. When you opt out, we add you to our do-not-contact list and we will not send you further marketing emails. We keep the minimum details needed, such as your email address, on that list so that we can make sure we do not contact you again.

Clients and suppliers

What we collect

  • Name, job title and work contact details
  • Company details
  • Contract, billing and payment details
  • Records of our communications and the work we deliver

Why we use it and our legal basis

PurposeLegal basis
Entering into and carrying out a contract, including billing and paymentsPerformance of a contract
Managing our relationship, including service updates and handling complaintsLegitimate interests (managing our business relationships)
Keeping accounting and tax recordsLegal obligation
Telling clients about other services similar to those they already useLegitimate interests (keeping clients informed). You can opt out at any time.

Job applicants

When you apply for a role, our application form opens an email to us. We receive your name, email address, phone number if you give it, and the CV or resume you attach, along with anything else you choose to include.

We use this information to assess your application, contact you about it and, if you join us, to set up your employment.

PurposeLegal basis
Assessing your application and contacting you about itSteps taken at your request before entering into a contract, and legitimate interests (recruiting the right people)
Checks required before employment, where the law allowsLegal obligation, or your consent where required

Please do not include sensitive information, such as health details, in your application unless we ask for it.

Who we share data with

We do not sell your personal data. We share it only in these situations:

  • Service providers who process data for us under contract, including:
    • Apollo.io, for business contact data and sending campaign emails
    • Zoho Corporation, which provides Zoho Bigin, our CRM system
    • Google, for website analytics, only if you accept analytics cookies
    • Our website hosting and email providers
  • Professional advisers, such as lawyers, accountants and auditors.
  • Authorities, such as regulators, courts and law enforcement, where the law requires it.
  • A buyer of our business, if we sell or merge all or part of our business. The buyer would have to protect your data in line with this policy.

International transfers

We are based in India, so if you are outside India your personal data will be processed in India. Some of our service providers, including Apollo and Google, process data in the United States and other countries.

These countries may not have data protection laws equivalent to those where you live. Where UK or EU data protection law applies, we protect transfers using appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, which are included in our service providers’ data processing agreements. You can ask us for more information about these safeguards.

How long we keep data

We keep personal data only as long as we need it for the purposes in this policy, or as long as the law requires.

  • Business contacts and campaign data: up to 5 years from our last contact with you.
  • Do-not-contact list: for as long as we run email campaigns, so that we keep respecting your choice.
  • Clients and suppliers: for the length of the contract and afterwards for as long as tax, accounting and company laws require.
  • Website enquiries: for as long as needed to deal with your enquiry and any business relationship that follows.
  • Job applications: for as long as needed to complete recruitment for the role. If we would like to keep your application for future roles, we will ask you first.
  • Analytics data: in line with the retention setting in our Google Analytics account.

Security

We use technical and organisational measures to protect personal data from loss, misuse and unauthorised access. These include access controls, so that only people who need the data can see it, and staff training on data protection.

No method of sending or storing data over the internet is completely secure, so we cannot guarantee absolute security. If a data breach happens that is likely to put your rights at risk, we will tell you and the relevant authorities where the law requires us to.

Your rights

Depending on where you live, you may have the right to:

  • Be informed about how we use your personal data, which is what this policy does
  • Access the personal data we hold about you and get a copy of it
  • Correct personal data that is wrong or incomplete
  • Delete your personal data in certain circumstances
  • Restrict how we use your personal data in certain circumstances
  • Object to us using your personal data where we rely on legitimate interests
  • Object to direct marketing at any time. If you object, we will stop.
  • Data portability, to receive your data in a machine-readable format where we rely on consent or a contract
  • Withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.
  • Not be subject to decisions made only by automated means that have legal or similarly significant effects. We do not make decisions like this.

To use any of these rights, email info@artechsoft.com. We may ask you to confirm your identity. We will reply within one month, or sooner where local law requires. If a request is complex, we will tell you if we need more time and why.

Rights by region

United Kingdom and European Union

If you are in the UK or the EU, the UK GDPR or the EU GDPR applies to our use of your personal data, together with the rules on electronic marketing. You have all the rights listed above. You can also complain to your data protection authority, as explained under “Complaints”.

India

If you are in India, the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000 apply. You also have the right to:

  • Get a summary of the personal data we process about you and how we process it
  • Know who we have shared your personal data with
  • Have your grievances about our handling of your data addressed
  • Nominate another person to exercise your rights if you die or become unable to do so yourself

You can raise a grievance with our Data Protection Officer at info@artechsoft.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

United States

If you live in a US state with a consumer privacy law, such as California, you may have the right to know what personal information we collect, use and share, to have it deleted or corrected, and not to be treated differently for using these rights. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. Every marketing email we send includes a way to opt out.

Complaints

If you are unhappy with how we have handled your personal data, please contact our Data Protection Officer first at info@artechsoft.com. We will look into your complaint and reply as soon as we can.

You also have the right to complain to a data protection authority:

Children

Our website and services are for businesses and are not aimed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

Links to other websites

Our website contains links to other websites that we do not run. We are not responsible for their content or how they handle your personal data. Please read the privacy policy of each website you visit.

Changes to this policy

We may update this policy from time to time, for example when the law or the way we use personal data changes. We will post any changes on this page and update the “Last updated” date at the top. If a change is significant, we will also tell you by email where we have your address.

Contact us

For any question about this policy or your personal data, contact our Data Protection Officer:

Post
Data Protection Officer, ART Technology and Software India Private Limited, Thapasya Building, Ground Floor, Infopark Phase I, Kakkanad, Kochi, Kerala 682030, India

Questions about your data?

Write to our Data Protection Officer and we will explain how your information is handled, or help you use any of your rights.

Email us