Global Privacy Notice & Data Policy
Detailing how Godigitify LLP processes, safeguards, and isolates enterprise data across custom software deployments, cloud workloads, and AI systems in compliance with EU GDPR, UK GDPR, CCPA/CPRA, and India DPDP Act 2023.
COMMITMENT TO ENTERPRISE PRIVACY & DATA CONFIDENTIALITY:
Godigitify LLP ("Godigitify", "we", "our", or "us") understands that trust is the cornerstone of enterprise digital transformation. When corporate leaders, CTOs, and global institutions partner with us to engineer mission-critical systems and deploy autonomous AI models, they entrust us with valuable business intelligence. This Notice sets forth our comprehensive standards regarding personal data processing, data residency, sub-processor vetting, and individual data subject rights.
1. Scope & Controller vs. Processor Status
Under European Union and United Kingdom data protection legislation (GDPR / UK GDPR), Godigitify operates in two distinct capacities:
- As a Data Controller: With respect to business contact details, consultation inquiries, website visitor analytics, and vendor relationships collected directly via Godigitify.com.
- As a Data Processor / Service Provider: With respect to end-user personal data, proprietary databases, and customer records processed on behalf of our enterprise clients pursuant to a bilateral Data Processing Addendum (DPA). In such circumstances, our client remains the Data Controller, and we process data strictly in accordance with their documented instructions.
2. Categories of Personal Data We Collect
We restrict data collection to strictly necessary categories:
Directly Provided Data
Corporate name, professional email address, telephone number, job title, company name, billing information, and consultation project specifications.
Automated & Telemetry Data
Masked IP address, browser type, operating system, session referrer, performance metrics, and latency telemetry collected to maintain platform security.
No Sensitive Personal Data: Godigitify does not knowingly collect or solicit sensitive personal data (e.g., genetic data, biometric identification, racial/ethnic origin, political affiliations) via marketing properties.
3. Lawful Bases for Processing (GDPR Article 6)
We process personal data solely where a recognized legal basis exists under Article 6 of the GDPR:
- Performance of a Contract (Art. 6(1)(b)): Executing statements of work, provisioning cloud environments, and delivering contracted software engineering services.
- Legitimate Interests (Art. 6(1)(f)): Safeguarding our digital networks against cyber threats, preventing fraud, optimizing infrastructure latency, and communicating with corporate peers.
- Legal Obligation (Art. 6(1)(c)): Fulfilling tax reporting, corporate accounting, export control compliance, and statutory retention mandates.
- Explicit Consent (Art. 6(1)(a)): Delivering technical research papers, newsletters, or optional analytics cookies where consent has been actively granted.
4. Strict Enterprise AI & Code Privacy Guarantee
Zero Public Training & Model Isolation
Under no circumstance does Godigitify input client confidential source code, proprietary algorithms, internal enterprise datasets, or prompt interactions into publicly shared foundational models. All AI inference, Retrieval-Augmented Generation (RAG), and agentic workflows operate via zero-data-retention enterprise API endpoints or private single-tenant virtual private cloud (VPC) deployments.
5. Approved Sub-Processors & Infrastructure
Godigitify engages certified, enterprise-grade cloud sub-processors bound by stringent Data Processing Agreements:
| Sub-Processor | Processing Activity | Data Residency Options | Certifications |
|---|---|---|---|
| Amazon Web Services (AWS) | Primary cloud compute, VPCs, encrypted S3 buckets | EU (Frankfurt, Ireland), US (Virginia, Oregon) | SOC 2, ISO 27001 |
| Google Cloud Platform (GCP) | AI inference pipelines, Kubernetes (GKE) | EU (Belgium, Netherlands), US (Iowa) | SOC 2, ISO 27018 |
| Cloudflare, Inc. | Edge caching, WAF, DDoS mitigation, DNS | Global Edge Network | PCI-DSS, ISO 27001 |
6. International Cross-Border Data Transfers
Where personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland is transferred internationally, Godigitify ensures adequate safeguards are instituted pursuant to Chapter V of the GDPR:
- Execution of European Commission Standard Contractual Clauses (SCCs) Commission Implementing Decision (EU) 2021/914.
- Execution of the UK International Data Transfer Addendum (IDTA) to the EU SCCs.
- Implementation of supplementary Transfer Impact Assessments (TIAs) confirming local surveillance laws do not impair contractual protections.
7. Data Retention & Cryptographic Deletion
We retain personal data only for as long as strictly necessary to fulfill the purposes for which it was gathered. Client development artifacts and testing databases are subjected to automated cryptographic deletion ninety (90) days following contract closure, unless statutory tax retention mandates require prolonged archiving.
8. Your Global Privacy Rights (GDPR, CCPA, DPDP)
Depending on your jurisdiction, you possess the following enforceable statutory rights:
9. Interactive Privacy Rights (DSAR) Portal
Exercise your statutory data protection rights directly. Our compliance team acknowledges all submissions within 24 hours and provides conclusive responses within thirty (30) calendar days.
10. Technical & Organizational Security Measures (TOMs)
Pursuant to Article 32 GDPR, Godigitify maintains state-of-the-art administrative, physical, and technical safeguards:
- Encryption: AES-256 for all stored data at rest; TLS 1.3 with Perfect Forward Secrecy for all transit pipes.
- Access Control: Zero Trust architecture, mandatory hardware security key / TOTP MFA for all staff, role-based least-privilege policies.
- Auditability: Continuous SIEM logging, SOC 2 Type II compliance audits, and annual independent penetration testing.
11. Data Protection Officer (DPO) & Supervisory Authority Contact
For escalated privacy concerns or statutory inquiries, please contact our Data Protection Officer:
Godigitify LLP Data Protection Office
Attn: Chief Privacy Officer & DPO
Email: dpo@godigitify.com
General Compliance: privacy@godigitify.com
If you reside within the European Union or United Kingdom and believe your data has been handled in violation of applicable law, you retain the right to lodge a formal complaint with your national supervisory authority (e.g., the UK Information Commissioner's Office - ICO at ico.org.uk).