Privacy Policy
Effective date: 17 February 2026 | Version: 1.0
1. ABOUT THIS POLICY
This Privacy Policy explains how Fitsol Supply Chain Solutions Private Limited, referred to as Fitsol, we, us or our, collects, uses, shares and protects Personal Data when you visit or use our Platform or when you interact with us.
This Policy is intended to meet requirements under applicable Indian law including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025 and the Information Technology Act, 2000 with associated rules. Where we provide services to enterprise customers and process Customer Personal Data on their behalf, the terms of our Data Protection Addendum may apply in addition to this Policy.
2. OUR PLATFORM AND SCOPE
This Policy applies to our websites and online services including fitsol.green and kyoto.fitsol.green together with related pages, forms, tools and services that link to this Policy, referred to as the Platform.
This Policy applies to individuals who visit the Platform, request a demo, contact us, receive marketing communications from us or otherwise interact with us. It also applies to personal data of customer personnel and end users that we process in connection with our services, to the extent described in this Policy and any applicable customer contract or addendum.
3. KEY TERMS
- Personal Data means any data about an individual who is identifiable by or in relation to such data.
- Processing means any operation performed on Personal Data such as collection, recording, storage, use, sharing or deletion.
- Customer Personal Data means Personal Data that a customer provides to us or makes available to us for processing in connection with our services.
4. PERSONAL DATA WE COLLECT
4.1 Data You Provide to Us
a. Website and demo or contact requests
We collect the following when you fill our forms or contact us:
- Name
- Email address
- Phone or mobile number
- Company name
- Message or notes you submit
b. Customer account and service delivery
When a business customer uses our services, we may process Customer Personal Data such as customer contact persons details, billing and invoicing information and usage or activity logs. We may also process data uploaded or entered by the customer in the service, including business identifiers such as GST and CIN. If Personal Data is included in customer uploads or communications, we will process it as Customer Personal Data.
c. Vendor and partner data
We may collect vendor or partner contact details and KYC or compliance documents where relevant.
4.2 Data Collected Automatically
When you access the Platform, we may collect limited technical data such as device and browser information, cookie identifiers and similar data. We use cookies and analytics tools such as Google Analytics. Depending on configuration, these tools may process internet protocol address and related technical signals. We aim to minimise collection and use only what is necessary for the purposes described in this Policy.
5. HOW WE USE PERSONAL DATA
- To respond to enquiries and schedule or provide demos
- To provide our services and operate the Platform
- To manage customer relationships and administer accounts
- To send communications about our services including marketing communications where permitted
- To monitor, maintain and improve the Platform including analytics and performance measurement
- To ensure security, prevent fraud and address technical issues
- To comply with legal obligations and respond to lawful requests including audits and regulatory requirements
6. LEGAL BASIS FOR PROCESSING
We process Personal Data based on consent where we seek it, for performance of a contract or steps taken at your request prior to entering into a contract, for compliance with applicable law and for other lawful uses recognised under applicable law.
7. MARKETING COMMUNICATIONS
We may send marketing communications through channels such as email, WhatsApp and calls. Where required, we will seek your consent. You can withdraw consent or opt out by emailing us at akshay.tandon@fitsol.green.
Our current web form consent wording: “I agree to the privacy policy and receive communications from Fitsol Supply Chain Solutions Private Limited and consent to the storage and processing of my data.”
8. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies for essential operation of the Platform and for analytics. We do not use marketing or advertising cookies. We provide a cookie banner or preference manager on the Platform. Preferences are stored using session storage as currently implemented.
9. SHARING OF PERSONAL DATA
We may share Personal Data with the following categories of recipients, as needed for the purposes in this Policy:
- Cloud hosting and infrastructure providers such as AWS and Google Cloud Platform
- Customer relationship management tools such as Zoho
- Analytics providers such as Google Analytics
- Communication tools such as WATI and Slack
- Professional advisors such as lawyers and auditors
- Government agencies, regulators or law enforcement where required by law or for audits and compliance
We do not sell personal data. We do not share personal data for third party advertising.
10. CROSS-BORDER PROCESSING AND TRANSFERS
Fitsol primarily operates from India. Some of our service providers may be located outside India or may process data from locations outside India. Where Personal Data is processed outside India, we take appropriate contractual and technical safeguards consistent with applicable law.
11. DATA RETENTION
We retain Personal Data only for as long as necessary for the purposes described in this Policy, unless a longer period is required by law. Indicative retention periods include:
- Customer account contact data: until account closure plus 2 years
- Transaction and billing history: 7 years
- Security logs: retained for the period required under applicable cybersecurity directions and for investigation and incident response purposes
12. SECURITY
We maintain reasonable security safeguards designed to protect Personal Data, including role-based access controls, multi-factor authentication, encryption in transit, encryption at rest, network security controls, regular backups, security monitoring, vulnerability assessments, staff training, vendor due diligence and an incident response plan. Fitsol also uses compliance and security tooling such as Scrut.
13. YOUR RIGHTS AND HOW TO EXERCISE THEM
Subject to applicable law, you may request access to your Personal Data, correction, completion, updating and erasure, withdrawal of consent and grievance redressal. You may also nominate another individual to exercise rights on your behalf where applicable.
Right to Object to Processing
- Direct marketing: You may object at any time and we will stop using your Personal Data for direct marketing.
- Other lawful bases: You may object by contacting us. We will review your request and, where feasible and not prevented by law or overriding contractual requirements, we will stop or limit the processing.
Right to Restrict Processing
You may request that we restrict processing of your Personal Data in appropriate circumstances, for example while we verify the accuracy of data you have challenged or while a grievance is being addressed.
How to Exercise Your Rights
Email akshay.tandon@fitsol.green with the subject line Privacy Request. Please include your name, email address or mobile number you used to interact with us, your organisation name if applicable and any available account identifier.
We will acknowledge rights requests within 7 days and aim to complete them within 30 days. Complex requests may take up to 90 days; we will inform you if additional time is needed. Grievances will be resolved within 90 days of receipt.
14. GRIEVANCE REDRESSAL
Grievance Officer: Akshay Tandon
Suite 718 and 719, 7th Floor, Star Tower, Sector 30, Gurugram 122002, Haryana, India
Email: info@fitsol.green
For data protection queries and rights requests: akshay.tandon@fitsol.green
15. CHILDREN
Our Platform is intended for business users and is not directed to individuals under 18 years of age. We do not knowingly collect Personal Data of children.
16. PERSONAL DATA BREACHES
If we become aware of a personal data breach, we will take steps to contain and remediate it and we will make notifications as required under applicable law.
17. UPDATES TO THIS POLICY
We may update this Policy from time to time. We will post the updated version on the Platform and may notify you by email or other means where required.
Version 1.0 — 17 February 2026: Initial publication.
18. CONTACT
Privacy queries: akshay.tandon@fitsol.green
General contact: info@fitsol.green