Privacy Policy

Last updated: 26 September 2026

This policy explains how COMM-IT India Private Limited ("COMM-IT", "we", "us") collects and uses personal data when you visit this Microsoft 365 page or submit an enquiry through it. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and other applicable Indian law. For the purposes of that Act, COMM-IT is the Data Fiduciary.

1. Data we collect

We do not ask for, and ask you not to submit, sensitive information such as financial account details, health information or government identity numbers through this page.

2. Why we use your data

• To respond to your enquiry: to contact you with Microsoft 365 pricing and licensing information you requested.
• To measure our advertising: to understand which advertisements lead to enquiries, so we can improve our campaigns.
• To protect our forms: to detect and block spam, bots and abuse.
• To meet legal obligations: for example, record keeping or responding to lawful requests from authorities.

By submitting a form, you consent to us processing your enquiry details for these purposes. You can withdraw your consent at any time (see section 8). Withdrawal does not affect processing already carried out.

We do not sell your personal data, and we do not use it for unrelated marketing without your separate consent.

3. Who we share it with

We share personal data only with service providers that process it on our behalf and under our instructions, and only as needed for the purposes above:

We may also disclose personal data where required by law, court order or a request from a government authority, or to protect the rights, property or safety of COMM-IT, our customers or others.

4. Bot protection (Cloudflare Turnstile)

Our forms are protected by Cloudflare Turnstile, which checks in the background that a form is being submitted by a person and not an automated program. To do this, Turnstile processes limited information about your browser and device. Your use of Turnstile is subject to Cloudflare's Turnstile Privacy Addendum and Privacy Policy.

5. Advertising measurement and enhanced conversions

When you submit an enquiry after clicking one of our Google advertisements, we tell Google Ads that a conversion occurred. To improve the accuracy of this measurement, the email address and mobile number you provided may be sent to Google in hashed (one-way encrypted) form through Google's enhanced conversions feature. Google uses this data only to match the conversion to an advertisement interaction, in line with Google's Privacy Policy and how Google uses information from sites that use its services.

6. Cookies and similar technologies

This page uses:

• Essential technologies: short-lived browser session storage that keeps your campaign information while you are on the page and prevents a single enquiry from being counted twice. This is cleared when you close the browser tab.
• Security: Cloudflare Turnstile, as described in section 4.
• Advertising and measurement cookies: set by Google Tag Manager and Google Ads to measure how our advertisements perform.

You can block or delete cookies through your browser settings, and manage personalised advertising at Google Ad Settings. Blocking cookies does not stop you from submitting an enquiry.

7. Storage, security and retention

Enquiries are stored in encrypted, access-controlled cloud infrastructure provided by Cloudflare. Access is limited to COMM-IT staff who need it to respond to enquiries. We use reasonable security safeguards, including encryption in transit (HTTPS), bot protection and restricted access, to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected individuals and the Data Protection Board of India of a personal data breach as required by law.

Our service providers may process data on servers located outside India. Where this happens, we transfer data only as permitted under Indian law.

We keep enquiry data for as long as needed to respond to you and manage any resulting business relationship, and in any case for no longer than 24 months after our last contact with you, unless a longer period is required by law (for example, tax and accounting records for customers). After that, we delete or anonymise it.

8. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• obtain a summary of the personal data we hold about you and how we process it;
• have inaccurate or incomplete data corrected or updated;
• have your data erased where it is no longer needed for the purpose it was collected for, unless we must keep it by law;
• withdraw your consent at any time;
• nominate another person to exercise your rights in the event of your death or incapacity; and
• have your grievances addressed by us.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

9. Children

This page is intended for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. Significant changes will be highlighted on this page.

11. Contact and grievance officer

We aim to acknowledge requests within 7 days and resolve them within 30 days.