Privacy Policy

Effective date: 8 August 2026 · Last updated: 8 August 2026

LTTRBX Technolabs Pvt. Ltd. (“LTTRBX”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect through our website lttrbxtech.com (the “Website”), why we collect it, how we use and protect it, and the rights available to you under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and other applicable laws. Please read it carefully.

1. Who we are (Data Fiduciary)

For the purposes of the DPDP Act, LTTRBX Technolabs Pvt. Ltd. is the “Data Fiduciary” that determines the purpose and means of processing your personal data. Our details:

LTTRBX Technolabs Pvt. Ltd.

CIN: U72200GJ2018PTC103107

E-1214, Ganesh Glory 11, Jagatpur Road, S.G. Highway,

Ahmedabad, Gujarat 382470, India

Email: info@lttrbxtech.com Phone: +91 95744 95066

2. Definitions

Personal data means any data about an individual who is identifiable by or in relation to such data.

Data Principal means the individual to whom the personal data relates (i.e. you). Where the individual is a child, it includes the parent or lawful guardian; where a person with disability, it includes the lawful guardian.

Processing means any operation performed on personal data, such as collection, storage, use, sharing, or erasure.

Child means an individual below the age of eighteen (18) years.

3. The personal data we collect

We collect only the personal data that is necessary for the purposes described in this Policy. Depending on how you interact with us, this may include:

Where collected	Personal data
Contact / enquiry form	Name, work email, phone number, company name, service required, budget range, and the message or project brief you choose to provide.
Internship application form	Name, email, phone number, university/college, degree, academic year, area of interest, and your application message; and (if enabled) your uploaded CV/resume.
Career application form	Name, email, phone number, the role applied for, and any information contained in the CV/resume you upload.
Automatically, when you browse	IP address, browser and device type, operating system, referring page, pages visited, and time spent — collected via cookies and analytics tools (see Section 7).

Drafting note (remove before publish): List here every form/field that will actually exist on the launched site. If the contact form no longer collects a postal address (recommended in the modification document), do not list address. Keep this table an exact match to the live forms — a mismatch between the policy and the forms is precisely the defect being fixed.

4. How we collect your personal data

Directly from you — when you fill in a form, email us, call us, or otherwise contact us.

Automatically — through cookies and similar technologies when you use the Website (see Section 7).

From third parties — occasionally from business-networking or referral sources where you have shared your details with them for this purpose.

5. Why we process your data, and our lawful basis

We process your personal data only for lawful, specified purposes. Under the DPDP Act we rely on your consent, or on “certain legitimate uses” permitted by the Act, as set out below:

Purpose	Data used	Basis (DPDP Act)
Respond to your enquiry, prepare quotes/proposals, and provide the services you request	Contact-form data	Consent; and the legitimate use of responding to a request you voluntarily made
Process and evaluate internship / job applications	Application-form data, CV	Consent; steps toward a potential engagement
Operate, secure and improve the Website and understand how it is used	Usage data, cookies, analytics	Consent (for non-essential cookies); legitimate use for security and core operation
Send you updates, offers or marketing (only where you opt in)	Name, email, phone	Consent — withdrawable at any time
Comply with law and respond to lawful requests	Any relevant data	Legal obligation / legitimate use under the Act

Where our processing relies on your consent, that consent is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and limited to the personal data necessary for the stated purpose. You may withdraw your consent at any time (see Section 12); withdrawing consent is as easy as giving it, and does not affect processing carried out before withdrawal.

6. If you do not provide certain data

Some data is necessary to provide what you ask for — for example, we cannot respond to an enquiry without a way to contact you. Where data is optional, we will make that clear on the form.

7. Cookies and analytics

The Website uses cookies and similar technologies. Essential cookies are required for the Website to function. Non-essential cookies — including analytics and marketing cookies — are only set after you accept them through our cookie-consent banner. Specifically, we use:

Google Analytics 4 (provided by Google) to understand how visitors use the Website, on an aggregated basis, so we can improve it.

Meta (Facebook) Pixel (provided by Meta Platforms) to measure the effectiveness of our advertising and, where you have consented, to show you relevant ads on Meta platforms.

You can accept, reject or change your cookie choices at any time through the consent banner or your browser settings. These third-party tools process certain data (such as your IP address and online activity) under their own privacy policies, which we encourage you to read.

Third-party privacy policies: Google and Meta.

Drafting note (remove before publish): Ensure the cookie-consent manager actually blocks GA4 and the Meta Pixel until the user accepts — the policy text above only holds true if the technical control in Section 3.11 of the modification document is implemented. Add a link here to Google's and Meta's privacy policies.

8. How we share your personal data

We do not sell your personal data. We share it only as necessary and with appropriate safeguards:

Service providers (Data Processors) who host our Website, run analytics, deliver email, or provide similar services strictly on our instructions and under confidentiality obligations.

Professional advisers such as our lawyers and accountants, where reasonably required.

Authorities, where disclosure is required by law or to protect our legal rights.

In a business transfer — if LTTRBX is involved in a merger, acquisition or restructuring, subject to this Policy continuing to apply.

9. Storage location and international transfers

Your personal data is stored on servers located in India. LTTRBX also operates offices in the United States and Australia, and some of our service providers may process data outside India. Where personal data is transferred to or accessed from another country, we do so in accordance with the DPDP Act and applicable law, and we take reasonable steps to ensure it remains protected. We do not transfer personal data to any country or territory that the Central Government has restricted for such transfers.

10. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, and to meet any legal, accounting or reporting requirements. When personal data is no longer required and we are not legally required to retain it, we will erase it or anonymise it. Indicative periods:

Enquiry data: retained for the duration of our discussions and for a reasonable period afterward to address follow-ups, then erased.

Unsuccessful job/internship applications: retained for a limited period in case a suitable role arises, then erased, unless you ask us to keep it or delete it sooner.

Drafting note (remove before publish): Insert concrete retention periods your advocate is comfortable with (e.g. enquiries: 24 months; applications: 12 months). Regulators prefer specific periods over 'a reasonable period'.

11. How we protect your data

We implement reasonable security safeguards to protect your personal data against unauthorised access, use, alteration, disclosure or loss — including access controls, encryption in transit (HTTPS), and restricting access to authorised personnel. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act. No method of transmission over the internet is completely secure, so while we strive to protect your data we cannot guarantee absolute security.

12. Your rights as a Data Principal

Subject to the DPDP Act, you have the right to:

Access — obtain a summary of the personal data we process about you and the processing activities.

Correction and updating — have inaccurate or incomplete data corrected, completed or updated.

Erasure — request deletion of your personal data where it is no longer required for the purpose collected, unless retention is required by law.

Withdraw consent — withdraw consent at any time, as easily as it was given.

Grievance redressal — a readily available means to raise a grievance with us (see Section 14).

Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact our Grievance Officer using the details in Section 14. We may need to verify your identity before acting on a request. You are responsible for providing accurate information and for the authenticity of a request.

13. Children's data

The Website and our services are intended for businesses and adults, and are not directed at children. We do not knowingly process the personal data of any individual below eighteen (18) years of age without the verifiable consent of a parent or lawful guardian. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and we do not process children's personal data in a way likely to cause them harm. If you believe a child has provided us personal data, please contact us and we will delete it.

14. Grievance redressal — our Grievance Officers

If you have any question, concern or grievance about how we handle your personal data, you may contact either of our Grievance Officers, who are responsible for addressing your grievance within the timelines prescribed under the DPDP Act:

Grievance Officers, LTTRBX Technolabs Pvt. Ltd.

1) Mr. Meet Padaliya

2) Mr. Pratik Rathod

Email: info@lttrbxtech.com

Phone: +91 95744 95066

Address: E-1214, Ganesh Glory 11, Jagatpur Road, S.G. Highway,

Ahmedabad, Gujarat 382470, India

If you are not satisfied with our response, you have the right to register a complaint with the Data Protection Board of India in accordance with the DPDP Act.

Drafting note (remove before publish): For a cleaner setup, create grievance@lttrbxtech.com and route it to both officers. Confirm the officers are willing to be publicly named and reachable, as the Act requires the contact to be genuinely responsive.

15. Third-party links

The Website may contain links to third-party websites (including our clients' and partners' sites). We are not responsible for the privacy practices or content of those websites. This Policy applies only to the LTTRBX Website.

16. Changes to this Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. Where changes are significant, we will take reasonable steps to notify you. Your continued use of the Website after an update constitutes acknowledgement of the revised Policy.