Skip to content
Talk to us Desktop

Privacy Policy

This policy explains what Pwtech collects when you use pwtech.pw, why we hold it, and how you get it back or get it deleted. It covers this website only. Data we process inside a client engagement is governed by that engagement’s contract and data-processing agreement — see our Security & Compliance page.

Who is responsible. Pwtech, head office Rajkot, Gujarat, India, with a second engineering office in Ahmedabad and PWTECH people (an office, employee or representative) in Kuwait City, Dubai, Singapore, Sydney, Frankfurt, Paramaribo and Dallas. Questions about this policy, or any request about your data: [email protected] or +91 8128064098.

What we collect, and why

  • Enquiry and quote forms. The details the form asks for — your name, contact details and your message — delivered to our team by email and WhatsApp so we can answer you and scope the work you asked about. With each enquiry we also note the country it came from (as reported by Cloudflare, below), whether you used a phone or a computer, the page you were on, the page that referred you, and the time. Every enquiry, quote request and newsletter form sent through the site is also kept as a private record in the site’s database; that record is not published and cannot be reached through the site’s public API. Basis: your request, and our legitimate interest in responding to it.
  • Newsletter sign-up. The email address and/or WhatsApp number you enter, the time, and the page you signed up from, added to a list kept in the site’s database; our team is emailed each new sign-up. We have not sent a newsletter yet. To come off the list at any time, email [email protected]. Basis: your consent.
  • On-site chat assistant. Each question you type is stored in the site’s database with the time you asked it and the page the assistant matched it to, so we can see what visitors need and improve the answers. Before your first question the assistant asks for an email address or mobile number. If you give one, it is stored with your questions and emailed to our team so we can follow up, and your browser keeps a copy so you are not asked again. You can skip that step. Answers are written by an AI model (MiniMax, through its API) from extracts of our own site pages. MiniMax is headquartered in Shanghai, China; where its API processes a request is governed by its own terms, which is one reason we send it nothing that identifies you. Your question and those page extracts are sent to MiniMax to produce the reply; your email address, mobile number and anything you put in the enquiry form are not sent. The model is instructed to answer only from our pages. A copy of each written answer is kept on our server for up to a day so that identical questions do not need a second request. Please do not put passwords, card numbers or confidential client material into the chat.
  • WhatsApp button. Selecting it opens WhatsApp with your own account. From that point the conversation is carried by WhatsApp under their terms, not ours.
  • Server logs. IP address, browser user-agent, requested URL and timestamp, written by the web server. Used for security, abuse investigation and fault diagnosis. Basis: legitimate interest in keeping the site available and secure.
  • Spam protection. Our forms are protected without any outside service: a hidden field that people never see, a limit on how many submissions one address can send in an hour, and a check that the request was sent from this site. No CAPTCHA and no Google script loads on any page.

What we do not do

  • We do not run advertising pixels, behavioural tracking or third-party analytics — none of our published pages loads any.
  • We do not store your IP address with your enquiry, your newsletter sign-up or your chat questions.
  • We do not sell, rent or trade personal data, and we do not share it for anyone else’s marketing.
  • We do not build profiles of visitors, and no decision affecting you is made by automated processing alone.

Who else touches the data

Only the providers that make the site work: Cloudflare, which sits in front of the site and handles every request — including your IP address — to deliver pages and protect the site; our hosting provider; the email service that delivers enquiries, sign-ups and chat leads to our team; and MiniMax, whose API writes the chat assistant’s replies from our own page text and receives only the question and the matching extracts. Each processes data on our instructions for that purpose alone. Separately, if you pick a language in the header selector, your browser contacts GTranslate and Google so that the page’s text can be translated, and those companies see your IP address and that text under their own terms. Neither is contacted unless you pick a language. Enquiries, newsletter sign-ups and chat leads are also sent as a WhatsApp message to two business numbers of our team, through a messaging gateway we run on our own server; WhatsApp (Meta Platforms) carries that message. The only outside AI provider that receives chat questions is MiniMax, as described above. If that provider changes, this page will name the new one before it is switched on. Because PWTECH people work in eight countries, colleagues in those locations may access enquiry data to answer you; they are bound by the same confidentiality terms.

Where it is held

Enquiries, newsletter sign-ups and chat records are stored on our own server in India. If you write to us from the EEA or the UK, that is a transfer to a country without an adequacy decision. We make it because you asked us to answer you, we keep it to what the reply needs, and we say so here rather than imply otherwise. Client project data is a different matter and is covered by the engagement contract: it stays in the client’s own environment, as the Trust Centre describes.

How long we keep it

  • Enquiries and quote requests: up to 24 months after our last contact with you, then deleted.
  • Newsletter list: until you ask us to remove you.
  • Chat questions, and any email address or mobile number given to the assistant: up to 12 months.
  • Server logs: up to 90 days, except where a line is retained for an open security investigation.

If you become a client, engagement records are kept for as long as the contract and applicable tax and accounting law require.

Your rights

Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it for a particular purpose, or ask for it in a portable format. If you are in the EEA or UK you have these rights under the GDPR, and you may also complain to your local supervisory authority. If you are in India, the Digital Personal Data Protection Act 2023 gives you rights of access, correction, erasure and grievance redressal as its rules come into force during 2026 and 2027; the same address applies. Email [email protected] — we acknowledge within two business days and complete the request within 30 days, or tell you why we need longer.

Security

Stored enquiries and chat records are not published and cannot be reached through the site’s public API; inside WordPress, only administrators have access. The site is served over TLS. Our wider practices are set out on the Security & Compliance page.

Children

This is a business-to-business site. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us data, tell us and we will delete it.

Changes

If this policy changes materially we update the date below and, where the change affects data we already hold, we say so on this page.

Last updated: 9 November 2026.