Privacy Policy
What we do with personal information collected through aptiway.com — and, just as importantly, what we do not do with it.
Who this policy covers
This policy explains what Aptiway Technologies Private Limited (“Aptiway”, “we”, “us”) does with personal information collected through this website — principally, the details you send us using the contact form or by emailing us.
It does not cover personal data we process on behalf of a client under a contract. Where Aptiway builds or operates an identity, onboarding or payments system for a bank, telecom operator or government authority, that organisation is the data controller and its own privacy notice governs. Aptiway acts as a processor under that contract and handles data only on that client's documented instructions. If you are a citizen or customer of one of our clients and want to know how your data is used, contact that organisation directly — we are not permitted to answer for them.
Who we are
- Entity
- Aptiway Technologies Private Limited (India) and Aptiway Information Technology Consultancy (UAE), which operate under common management and are together referred to here as “Aptiway”.
- India office
- 2nd Floor, Vishnu Smaran Building, Plot No. 1300-1301, Ayyappa Society Main Road, Chanda Naik Nagar, HITEC City, Khanammet, Hyderabad, Telangana 500081, India
- UAE office
- Office 43, 8th Floor, Tower 1, Mazyad Mall, Musaffah, Abu Dhabi, United Arab Emirates
- Contact
- info@aptiway.com
For anything relating to this policy or to your personal information, write to info@aptiway.com with “Data protection” in the subject line.
What we collect
Information you give us
If you use the contact form, we collect the name, organisation, email address, phone number, enquiry topic and message you enter. Only name, email address and message are required; the rest are optional. If you email or call us directly, we hold whatever you choose to tell us.
Information collected automatically
Our web server keeps standard access logs — IP address, date and time, the page requested, referring page and browser user-agent string. These are generated by the hosting infrastructure and used for security and troubleshooting.
What we do not collect
- This website sets no cookies. Nothing is stored on your device and nothing tracks you between visits or between sites. Our cookie policy covers this in full.
- There is no analytics, advertising or profiling. We do not build a profile of you and we do not measure your behaviour on the site.
- There are no third-party requests. Fonts, styles, scripts and images are all served from aptiway.com. No content delivery network, font service, tag manager, chat widget or embedded video is involved, so no other company receives your IP address when you load a page.
We do not knowingly collect information from children, and we do not collect special category or biometric data through this website.
Why we use it, and on what basis
- To answer you
- We use your contact details and message to respond to your enquiry and, where relevant, to continue a commercial conversation. Our lawful basis is our legitimate interest in responding to people who approach us, and taking steps at your request before entering a contract.
- To keep records
- We keep a record of enquiries and the correspondence that followed, so we can pick up a conversation later and evidence how an engagement began. Lawful basis: legitimate interests.
- To keep the site secure
- Server logs are used to detect and investigate abuse, attacks and faults. Lawful basis: legitimate interests in keeping our systems secure.
- To meet legal obligations
- Where a law or regulator requires us to retain or disclose information, we comply. Lawful basis: legal obligation.
We will not send you marketing you did not ask for, and we do not sell, rent or trade your information to anyone.
Who else sees it
We keep this deliberately short, because the list is short.
- Our hosting and email providers, who process data on our behalf under contract in order to run the website and deliver our email.
- Professional advisers — such as auditors or lawyers — where they need it and are bound by confidentiality.
- Authorities, where we are legally required to disclose.
We do not pass enquiry details to any other organisation, including our technology partners, without asking you first.
International transfers
Aptiway operates from India and the United Arab Emirates, and works with clients in the Middle East, Africa, South Asia and Europe. Information you send through this website may therefore be accessed by our staff in India or the UAE.
Where personal data moves between countries, we rely on appropriate safeguards — contractual protections with our providers, and the transfer mechanisms available under the applicable law. If you would like detail on the safeguards that apply to a particular transfer, ask us.
How long we keep it
We keep enquiry correspondence for as long as there is a live commercial conversation, and for a reasonable period afterwards so we can pick it up again if you come back to us. Where an enquiry does not lead anywhere, we delete it once it is clearly no longer relevant.
Server access logs are retained for a short operational period and then rotated out.
Where we are required to keep records for tax, accounting or regulatory reasons, we retain them for the period that law requires.
How we protect it
Security is our core business, and we apply the same thinking to our own information.
- The site is served over HTTPS, so what you submit is encrypted in transit.
- Access to enquiry correspondence is limited to the people who need it.
- The contact form validates and sanitises input, and guards against automated abuse.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your personal information, we will act on it and notify you and the relevant regulator where the law requires.
Your rights
Depending on where you are and which law applies, you may have the right to:
- ask what personal information we hold about you, and get a copy;
- have inaccurate information corrected;
- ask us to delete information we no longer need;
- object to, or ask us to restrict, a particular use;
- ask us to transfer information to you or another organisation in a usable format;
- withdraw consent, where we relied on consent; and
- complain to your data protection authority.
To exercise any of these, email info@aptiway.com. We will respond within the timeframe the applicable law sets, and we may need to verify who you are first. There is no charge.
Again: if your data sits inside a system we built or run for a client, please approach that organisation. We will always help them respond to you, but we cannot act on their data without their instruction.
Which law applies
Aptiway is incorporated in India, and our processing is principally governed by Indian law, including the Digital Personal Data Protection Act 2023.
Where we process the personal data of people in the United Arab Emirates, UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data may apply. Where we process the personal data of people in the United Kingdom or the European Economic Area, the UK GDPR or EU GDPR may apply. We aim to meet the highest applicable standard rather than the minimum.
Changes to this policy
If we change how we handle personal information — for example, if we add analytics to this website — we will update this page and change the date at the top. Material changes will be highlighted.