Privacy Policy

CoregenX IT Solutions & Consultancy builds websites, online stores, mobile apps and custom software, and provides digital marketing and business consultancy. We decide why and how the personal information described in this policy is used. This makes us its "data fiduciary" under the DPDP Act and its "controller" under the GDPR.

You can reach us at sales@coregenx.in. The details of our Grievance Officer are in section 13.

A. Information you give us

• Enquiry and quote forms: your name, company or business name, email address, phone or WhatsApp number with country code, country, the service you are interested in, and anything you write in your message.
• Job and internship applications: your name, email address, phone number, the role or area you are applying for, your college and preferred internship duration (for internships), your CV and anything you write in your message.
• Emails, calls and WhatsApp messages: your contact details and whatever you choose to share with us.
• If you become a client: the details we need to deliver and bill the work, such as billing name and address, GST number (if any), and the content, files and account access you share for your project.

Fields marked * on our forms are needed for us to reply. Please do not send passwords, bank or card details, health information or other sensitive information through our website forms. If you give us details about another person, please make sure they are happy for you to do so.

B. Information collected automatically

• Server logs: like most websites, the servers of our hosting provider record standard technical details of each visit, such as IP address, browser and device type, the page requested, and the date and time.
• Analytics: Google Analytics 4, loaded through the Google tag on each page, tells us how visitors use the website — for example which pages are viewed, how long visits last, the type of device and the approximate location (country or city). It also measures when a link to WhatsApp, our phone number or our email address is clicked, and when an enquiry is submitted. The enquiry event carries only a random lead reference and the service category — never your name, email or phone number.
• Spam protection: our forms use Google reCAPTCHA, which collects hardware and software information (such as device and browser data) and sends it to Google to check that a real person is using the form.
• Ad campaign parameters and click identifiers: if you arrive from an advertisement or a tagged link, the URL may carry campaign parameters (such as utm_source, utm_medium, utm_campaign, utm_term, utm_content) and ad click identifiers (Google gclid/gbraid/wbraid, Meta fbclid). We store these in your browser's local storage (see below) and include them in any enquiry you submit.
• Browser local storage: we keep the ad campaign parameters and the first page of your visit in your browser's local storage for up to 90 days, so that an enquiry you submit later can still be attributed to the ad or campaign that brought you to the site. A short session flag is stored during your visit so that a thank-you page counts a submitted enquiry only once. This storage is not a cookie; you can clear it in your browser settings.
• With your enquiry: when you submit an enquiry form, we also record the page the form was on, the first page of your visit, any campaign parameters and click identifiers stored in your browser, a random lead reference number, your IP address and your browser identification (user agent). These details are added by our server and help us track our ads and prevent duplicate submissions.

We do not use this information to make automated decisions that have legal or similarly significant effects on you.

• To reply to you: to answer your enquiry, discuss your project and send a quote or proposal. We may contact you about it by email, phone or WhatsApp.
• To manage enquiries: enquiries submitted through our forms are saved in our own lead-management system (CRM), which runs on our web hosting server and is accessible only by CoregenX staff with a password. Job and internship applications go by email only and are not stored in the CRM.
• To do the work you hire us for: to deliver, support and bill our services.
• To consider your application: when you apply for a job or internship.
• To run and protect the website: to keep the website and forms working, and to prevent spam, fraud and misuse.
• To improve and to measure advertising: to understand how the website is used, to improve it, and to measure which ads and campaigns lead to enquiries. We use or may use Google Ads conversion tracking and the Meta Pixel / Conversions API for this purpose, including showing our ads to people who have previously visited the site (remarketing). When you send an enquiry, your email address and phone number may be shared with Google and Meta in hashed (scrambled, one-way) form only, to help measure whether our ads led to the enquiry.
• To meet legal duties: to keep accounting and tax records and to respond to lawful requests from authorities.

We will not add you to a newsletter or marketing list unless you ask us to. You can tell us to stop contacting you at any time.

Legal reasons for using your information

• India: we use the information you send us for the purpose you sent it for, with your consent or as a legitimate use allowed by the DPDP Act. You can withdraw your consent at any time (see section 10).
• EU and UK (GDPR): to take steps at your request before a contract and to perform our contract with you; our legitimate interests in replying to enquiries, hiring, running a secure website and understanding how it is used; to comply with legal obligations; and your consent where the law requires it.

Cookies are small files that a website stores in your browser. Our website also uses browser local storage (see section 2B). Here is what we set and why:

• Analytics cookies: Google Analytics 4 sets _ga and _ga_* cookies to count visits and see how the website is used. They are set by the Google tag on each page.
• Security cookies: Google reCAPTCHA may set a cookie to help tell people and bots apart on our forms.
• Advertising cookies: we use or may use Google Ads and the Meta Pixel / Conversions API to measure which ads lead to enquiries and to show our ads to people who have visited the site (remarketing). Google Ads sets _gcl_* cookies. Meta sets _fbp and _fbc cookies. These are loaded through Google Tag Manager.
• Content from other services: some pages load content from other providers, such as Google Maps (contact page), a reviews widget from Elfsight (about page), Google Fonts and icon files from cdnjs (Cloudflare). These providers receive your IP address when they send the content and may set their own cookies.

There is no consent banner on this site. If you want to limit advertising tracking, you can use the opt-out tools below. We do not currently honour the Do Not Track browser setting.

• Google Ads settings — manage personalised Google ads
• Google Analytics opt-out browser add-on — stop Google Analytics on all websites
• Meta ad preferences — manage Facebook and Instagram ad personalisation
• Your Online Choices — opt out of interest-based ads from participating companies in the EU
• NAI opt-out — Network Advertising Initiative opt-out tool
• Browser settings — you can block or delete cookies and clear local storage in your browser settings. If you block cookies, some parts of the website (such as forms protected by reCAPTCHA) may not work properly.

We do not sell your personal information. We share it only when needed, with:

• Service providers who help us run our business: Hostinger (website hosting and our enquiry CRM, which runs on the Hostinger server), Zoho (business email: messages sent through our website forms arrive in our Zoho Mail inbox), Google (Analytics 4, Tag Manager, Ads, reCAPTCHA, Fonts and Maps), Meta (Meta Pixel and Conversions API for advertising measurement), Elfsight (website widget) and Cloudflare (icon files). They may use the information only to provide their service to us, under their own terms and privacy policies.
• WhatsApp: if you message us on WhatsApp, WhatsApp (Meta) handles the messages under its own terms and privacy policy.
• Payment providers: if you pay us through a payment gateway (for example Razorpay or PhonePe), your payment details go to that provider. We receive confirmation of the payment, not your full card or bank details.
• Platforms you ask us to use for your project: for example your hosting, domain, app store, payment gateway or advertising accounts, only as needed to do the work.
• Professional advisers: such as our accountants and lawyers, when needed.
• Authorities: when the law requires it, or to protect our rights, our clients or others from fraud or harm.
• A new owner: if our business is reorganised or sold, the information may pass to the new owner, who must protect it in the same way.

When a client hires us to build or manage a website, app, CRM or campaign, we may handle personal information that belongs to the client, such as the details of their customers or leads. We use that information only to do the work the client asked for, following the client's instructions and our agreement with them, and we keep it confidential. The client decides how their customers' information is used and is responsible for their own privacy notice.

We work from India, so your information is handled in India. Some of our service providers, such as Google and Cloudflare, also process information in other countries, including the United States. When we use them, we rely on the data protection terms they offer their customers, which include standard contractual clauses for information from the EU and the UK.

We will follow any restrictions the Government of India places on sending personal data to particular countries.

We take reasonable steps to protect your information. The whole website uses HTTPS encryption. Enquiry forms send a notification email to our sales team and save the enquiry in our own lead-management system (CRM), which runs on the Hostinger server and is protected by password. CVs from job and internship applications go to our business email only and are not stored in the CRM. Only the people who need the information for their work can access it.

No website, email or storage system is completely secure, so we cannot promise absolute security. If a personal data breach affects you, we will tell you and the authorities as the law requires.

We keep personal information only for as long as we need it for the purpose we collected it for, or as long as the law requires:

• Enquiries: we keep enquiry data in our CRM for as long as we need it to answer, follow up and maintain our business records. We delete it on request. We keep it no longer than necessary.
• Browser local storage (ad attribution): ad campaign parameters and your first-visit page are kept in your browser's local storage for up to 90 days, then overwritten or cleared. You can clear this at any time in your browser settings.
• Job and internship applications: during hiring, and then for a reasonable time in case a suitable opening comes up, unless you ask us to delete your application sooner.
• Client, billing and tax records: for as long as we work together and provide support, and then for the periods required by Indian tax and accounting laws.
• Analytics data: for the retention period set in our Google Analytics account.
• Server logs: for the limited time our hosting provider keeps them.

Wherever you live, you can ask us to:

• tell you what personal information we hold about you and how we use it;
• correct, complete or update it;
• delete it, unless we have to keep it by law;
• stop contacting you; and
• withdraw a consent you have given. This does not affect anything we did before you withdrew it.

India

Under the DPDP Act you also have the right to have your grievances addressed and to nominate someone to exercise your rights if you die or are unable to. Please contact our Grievance Officer first. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

European Union and United Kingdom

You also have the right to restrict or object to our use of your information (including for direct marketing), to receive your information in a portable format, and to complain to your local data protection authority (in the UK, the Information Commissioner's Office).

Other countries

You may have similar rights under your local law. Contact us and we will help.

To use any of these rights, email sales@coregenx.in with the subject "Privacy request". We may need to confirm your identity before we act. We will reply within one month, or sooner if your local law requires it.

Our website and services are meant for people aged 18 or over. We do not knowingly collect personal information from anyone under 18. If you are under 18, please do not send us your details yourself; ask a parent or guardian to contact us. If we learn that we hold a child's information without a parent's or guardian's consent, we will delete it.

Our website links to other websites, such as social media pages and WhatsApp. Their own privacy policies apply when you use them, and we are not responsible for how they handle your information.

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.