Privacy policy
What we collect through this website, why, how long we keep it, and what you can ask us to do with it.
Last updated:
Who we are
Xalicon Technologies ("Xalicon", "we", "us") operates this website. For personal data submitted through it, we act as the data controller.
You can reach us about anything in this policy at contact@xalicon.co, or by post at Noida, Uttar Pradesh, India.
What we collect
We collect only what you give us. This website does not build a behavioural profile of visitors, and it sets no advertising cookies.
- Contact form: your name, work email, company, phone number (if provided), the topic you select and the message you write.
- Start a Project form: your name, work email, phone, company, plus the project type, services, stage, timeline, budget range, team requirement and description you provide. If you select a file, only its name is sent — the file itself is not uploaded from this form.
- Request Talent form: your name, work email, company, the roles and headcount you need, engagement preference, time zone requirement, start timing and any notes.
- Newsletter: your email address.
- Server logs: your IP address and request metadata, recorded by our hosting provider for security and abuse prevention.
Why we use it and on what basis
- To reply to your enquiry and, where relevant, prepare a proposal — our legitimate interest in responding to business contact, and steps taken at your request before entering a contract.
- To send our newsletter — your consent, withdrawable at any time through the unsubscribe link in every message.
- To protect the site from abuse, including rate limiting form submissions — our legitimate interest in keeping the service available.
- To meet legal or accounting obligations where they apply.
International transfers
Our team and some processors operate outside the country you are in. Where personal data is transferred out of the UK or European Economic Area, we rely on adequacy decisions or Standard Contractual Clauses with the recipient.
We can provide details of the safeguards applied to a specific transfer on request.
How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months, then deleted.
- Enquiries that lead to an engagement: for the life of the engagement plus the period required for contractual and accounting purposes.
- Newsletter subscriptions: until you unsubscribe.
- Server logs: typically 30 days, in line with our hosting provider’s retention.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where we rely on it.
To exercise any of these, email contact@xalicon.co. We respond within one month. You also have the right to complain to your local data protection authority.
Security
Data is transmitted over TLS, access to enquiry data is limited to the people who need it, and accounts require multi-factor authentication. Our engineering security practices are described on the Security and Quality page.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authority where the law requires it.
Children
This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
We update this policy when our practices change. The date at the top reflects the most recent revision, and material changes will be highlighted on this page.
Questions
Need something clarified?
If anything on this page is unclear or you want to exercise a right described here, get in touch and a person will respond.
Prefer email? contact@xalicon.co