Privacy Policy

Who we are

This website (trekshield.com) is operated by TrekShield IT Solutions Pvt. Ltd. ("TrekShield", "we", "us"), of Parcel 2 - Argus, SALARPURIA SATTVA KNOWLEDGE CITY, Inorbit Mall Rd, Silpa Gram Craft Village, Madhapur, Rai Durg, Hyderabad, Telangana 500032. This policy covers visitors to the website and people who contact us through it. It does not cover data we handle for clients during a security-testing engagement; that is governed by the engagement agreement and, where applicable, a Data Processing Addendum (available on request).

What we collect

• Contact form. Name, work email, company, phone number (optional) and the message you write. We collect this only when you submit the form.
• How you found us. If you arrive through a campaign link (UTM tags or an ad click ID) or from another website, your browser keeps those tags, the referring site and the first page you landed on for the length of your visit (in session storage, not a cookie). If you submit the contact form, we add them as one line at the end of your message so we know which channel reached you. Otherwise they are not sent anywhere.
• Booking a call. If you use the booking calendar, the details you enter (name, email, time slot) are processed by Cal.com. The calendar loads only after you click "Show available times".
• Website analytics (only if you accept cookies). Google Analytics 4 records which pages you view, clicks on contact, sample-report and email links, opening the booking calendar, reaching the "thank you" page after a form submission, and your approximate location, device, browser and how you reached the site. We switch off Google's advertising features (Google signals and ad personalisation) in our tag.
• Technical data. Like any web server, our hosting provider processes your IP address, browser type and requested pages in server logs for security and reliability.
• Email. If you email us, we keep the correspondence.

We do not use session recording, heat maps or any advertising or retargeting tool other than those listed above.

Why we use it

• To reply to your enquiry and scope work you ask us about.
• To schedule and hold calls you book.
• To keep the website secure and working.
• To understand which pages and campaigns lead to enquiries, so we can improve the site and spend less on what does not work. Only if you accept analytics cookies.
• To send you information about our services, only if you have agreed to it or the law otherwise allows it. You can opt out at any time.

Where the GDPR or a similar law applies, our legal bases are: our legitimate interest in responding to business enquiries and securing the site; your consent for analytics cookies and marketing; and, once you engage us, performance of a contract. In India we process data on the basis of your consent given when you submit the form, and for the legitimate uses the Digital Personal Data Protection Act, 2023 permits.

Who receives it

We do not sell personal data. We share it only with providers that help us run the site and respond to you:

• Zoho (Zoho CRM, India data centre): receives contact-form submissions, including the "how you found us" line.
• Cal.com: receives booking details if you use the calendar.
• Google (Google Analytics 4): receives analytics data, only if you accept cookies.
• Our hosting and content-delivery provider: processes technical data (such as your IP address and the pages you request) to serve the site.
• Our email provider: processes email we send and receive.

We may also disclose data where the law requires it, or in a merger or sale of the business, with notice where required.

Cookies and similar storage

Fonts are served from this site, not from a third party. This is everything the site stores in your browser.

Strictly necessary

• ts-consent (local storage, until you clear it): remembers whether you accepted or declined.
• ts-attr (session storage, cleared when you close the tab): the campaign tags, referrer and landing page described above.

Only if you accept

Nothing in this group loads until you choose Accept. If you choose Decline, or have not chosen yet, none of it loads.

• Google Analytics 4: first-party cookies _ga and _ga_<ID> (up to two years) tell visits apart.
• ts-lead (session storage, cleared when you close the tab): stops a form submission being counted twice.

Only when you ask for it

• Booking calendar (Cal.com): loads only when you click "Show available times". Cal.com and its providers may then set cookies to run and secure the booking. See Cal.com's privacy policy.
• Contact form (Zoho): submitting the form sends your details to Zoho CRM, which may set a technical cookie while it processes them. See Zoho's privacy policy.

Your choices

Change your mind at any time with "Cookie settings" in the page footer. Choosing Decline after accepting removes the Google Analytics cookies and reloads the page without the tags. You can also block or delete cookies in your browser settings. Blocking the booking calendar's cookies may stop it working; the contact form and email will still work.

International transfers

Form submissions are stored in Zoho's India data centre. Other providers (including Google, if you accept cookies) may process data in other countries, including the United States and the EU. Where the law requires a transfer mechanism (for example Standard Contractual Clauses), we rely on one.

How long we keep it

We keep personal data only for as long as we need it for the purpose it was collected for, and for our ordinary business records. Enquiries that do not become an engagement are deleted or anonymised once they are no longer needed, or sooner if you ask us to delete them. Server logs are kept by our hosting provider for a limited period under its standard settings. Google Analytics event data is kept for the period set in our Google Analytics account, which cannot exceed 14 months. Client engagement data follows the retention terms in the engagement agreement.

Your rights

Depending on where you live, you may have the right to access, correct, update, delete or export your personal data, to object to or restrict some processing, to withdraw consent, and to complain to your data-protection authority. To exercise a right, email privacy@trekshield.com. We aim to respond within 30 days.

California and other US states: we do not sell personal data.

Children

This website is meant for business visitors and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, email privacy@trekshield.com and we will delete it.

Security

We protect data with measures appropriate to its sensitivity, including encryption in transit (HTTPS) and access controls. No online service is perfectly secure. If a security incident affects personal data we hold, we will notify the people affected and the authorities as the law requires. If you find a security problem on this site, please follow our responsible disclosure policy.

Changes and contact

We will post changes here and update the date above. Questions: privacy@trekshield.com.