01
Who we are
D7HS Tech (“we,” “us,” or “our”) operates the Atrix Studio brand and the website atrixstudio.in. We are a company based in India, and we are the “Data Fiduciary” for the personal data described in this policy. This means we decide why and how that data is processed.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have. It is published in accordance with:
- the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025;
- the Information Technology Act, 2000; and
- the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”).
If you are in the European Economic Area or the United Kingdom, see also the section on international visitors below.
02
Personal data we collect
Information you give us
- Enquiries: your name, email address, phone number, company name, role, budget range, and any project details or messages you send us through forms, email, chat or calls.
- Client engagements: contact and billing details, GST number, billing address, contracts, project files and communications.
- Careers: CVs, portfolios and other details you share when applying to work with us.
Information collected automatically
- Technical data: IP address, browser type, device type, operating system, referring URL, pages viewed, and the date and time of each visit. This is collected through server logs, and through cookies or similar technologies where these are enabled.
Information from others
- Business contact details shared by a person who refers you to us, or published on professional networks, used only to respond to or follow up on a business relationship.
We do not intentionally collect sensitive personal data such as passwords, health information, biometric data or sexual orientation through this website. Card and bank payments are processed by regulated banks and payment providers. We do not store full card numbers or card security codes.
03
How we use your data & why
We process personal data only for a lawful purpose, and only on one of the grounds allowed by law:
- Consent. Examples: when you submit an enquiry, subscribe to updates, or accept non-essential cookies. You can withdraw your consent at any time.
- Legitimate uses. Examples: where you have voluntarily provided data for a specific purpose, such as asking us for a quote, or where processing is needed to comply with a law or a court order (Section 7 of the DPDP Act).
- Contract. Performing, managing and billing an engagement you have entered into with us.
Specifically, we use personal data to:
- respond to enquiries, prepare proposals and schedule calls;
- deliver, manage and support client projects;
- issue invoices, collect payments and keep accounting and tax records;
- assess job applications;
- maintain, secure and improve the website, including preventing fraud, spam and abuse;
- send occasional updates about our work, only where you have opted in. You can unsubscribe at any time; and
- comply with our legal, regulatory and tax obligations.
We do not sell your personal data. We do not use it for automated decision-making that has legal or similarly significant effects on you.
06
International transfers
Some of our service providers store or process data on servers outside India. We transfer personal data abroad only as permitted by Section 16 of the DPDP Act, and never to a country the Government of India has restricted. When data leaves India, or leaves the EEA or UK, we use safeguards such as contractual data-protection commitments to make sure it receives a comparable level of protection.
07
How long we keep data
We keep personal data only for as long as the purpose for which we collected it requires, or as long as the law requires. As a guide:
- Enquiries that do not lead to an engagement: up to 12 months after our last contact.
- Client and billing records: for the duration of the engagement. After it ends, for as long as tax, accounting and company law require, generally up to 8 years.
- Job applications: up to 12 months, unless you ask us to delete them sooner.
- Server and security logs: at least one year, as required by the DPDP Rules, 2025. After that, they are deleted or anonymised.
When data is no longer needed, we securely delete or anonymise it. Where the law requires, we will notify you at least 48 hours before your data is erased.
08
How we protect your data
We maintain reasonable security practices and procedures, as required by Section 43A of the IT Act, the SPDI Rules and the DPDP Act. These include encryption in transit (HTTPS/TLS), role-based access controls, multi-factor authentication on internal systems, vendor due diligence, and regular backups.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected individuals as the DPDP Act and Rules require. We will explain what happened, the likely consequences, and the steps we are taking to address it.
09
Your rights
Under the DPDP Act, you have the right to:
- Access a summary of the personal data we process about you, the processing activities involved, and the parties we have shared it with;
- Correct, complete or update inaccurate or incomplete data;
- Erase data that is no longer needed for its purpose, unless the law requires us to keep it;
- Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect processing that took place before it;
- Grievance redressal through our Grievance Officer; and
- Nominate another person to exercise your rights if you die or become incapacitated.
To exercise any of these rights, email grievance@atrixstudio.in. We may need to verify your identity before acting on a request. We respond within the time the law requires, and in any case within 90 days.
10
Visitors from the EEA & UK
If the EU or UK General Data Protection Regulation applies to you, we rely on the following lawful bases:
- contract, to deliver an engagement;
- legitimate interests, to respond to enquiries and secure the website;
- consent, for analytics cookies and marketing; and
- legal obligation.
In addition to the rights above, you may request data portability. You may also object to or restrict certain processing. You have the right to lodge a complaint with your local data-protection authority.
11
Children’s privacy
Our website and Services are intended for businesses and for adults aged 18 and over. We do not knowingly collect personal data from children, meaning anyone under 18 as defined in the DPDP Act, without verifiable consent from a parent or lawful guardian. If you believe a child has sent us personal data, contact us and we will delete it.
12
Data we process for clients
When we build or maintain a product for a client, we may process personal data of that client’s end users. For that data, the client is the Data Fiduciary (or controller) and we act as its Data Processor. We follow the client’s documented instructions and the data-processing terms in our Engagement Agreement. Questions about that data should be sent to the relevant client.
13
Third-party websites
Our website may link to other sites, such as social networks or client projects. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
14
Changes to this policy
We may update this Privacy Policy to reflect changes in the law or in our practices. The latest version will always be available on this page, with its “Last updated” date. If we make material changes, we will give additional notice where appropriate. This policy should be read together with our Terms and Conditions.
15
Grievance Officer & contact
For any question, request or complaint about your personal data, contact our Grievance Officer. This role is required by Rule 5(9) of the SPDI Rules and by the DPDP Act. We will acknowledge your complaint promptly and resolve it within the time the law allows.
- Company
- D7HS Tech
- Registered office
- Villa 550, APR Pranav Antilia, Bachupally, Medchal, Hyderabad, Telangana 500090, India
- legal@atrixstudio.in
- Phone
- +91 95861 77528
- Grievance Officer
- Grievance Officer, D7HS Tech
- Grievance email
- grievance@atrixstudio.in
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.
© 2026 D7HS Tech. All rights reserved.
Read our Terms and Conditions →