Privacy policy.

MLHK Infotech (https://mlhk.in) is a technology company based in Barnawad, Moman Barodia, Shajapur, Madhya Pradesh 465236, India. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") for personal data we collect through this website and our contact channels.

Information you give us: name, email address, phone number, company name and the content of your project enquiry, when you use the contact form or write to us.

Project and account information: details needed to scope, deliver and support a project, and client portal details where you have an account.

Technical information: basic device and usage information needed to keep the website secure and working. We use privacy-friendly analytics that do not set tracking cookies (see section 7).

We process personal data only for the purposes you agreed to: responding to your enquiry, preparing a proposal, delivering and supporting a contracted project, issuing invoices, and meeting legal obligations.

Where we rely on your consent, we ask for it in a clear notice that states the specific purpose. Where the DPDP Act allows processing for a legitimate use or a legal obligation without consent, we rely on that instead and tell you so.

We do not sell personal data.

Under the DPDP Rules, 2025, notices must be clear, specific to each purpose, and available in English or any language listed in the Eighth Schedule of the Constitution on request.

You can withdraw consent at any time by writing to the contact address in section 10. Withdrawing consent does not affect processing already completed before the withdrawal.

We store data on Cloudflare infrastructure (databases and object storage) and send transactional email through Resend. Both are processors acting on our instructions.

We apply access controls so only authorised staff can view personal data, and we sanitise submitted input before storing it.

We will notify the Data Protection Board of India and affected individuals of a personal data breach as required by the DPDP Rules, 2025, including the intimation timelines in those rules.

Where we transfer personal data outside India, we do so only as permitted by the DPDP Act and the rules made under it.

We keep personal data only as long as the purpose requires, or as a law requires. Enquiry records are reviewed periodically and erased when no longer needed.

Where a law requires us to keep records, such as financial or contract records, we keep them for the period that law specifies.

Our public website uses Cloudflare Web Analytics, which does not set tracking cookies. If you use the client portal, a session cookie keeps you signed in. You can block cookies in your browser; public pages will still work.

Under the DPDP Act, 2023 you may ask us for: access to your personal data; correction or updating of inaccurate data; erasure of data that is no longer needed; and withdrawal of consent.

You may also nominate another person to exercise these rights on your behalf.

We respond to requests about your rights within 90 days, as required by the DPDP Rules, 2025, and usually much sooner.

Our services are for businesses and adults. Where we ever process personal data of a child, we will obtain verifiable consent from a parent or guardian as required by the DPDP Act and the rules.

If you believe a child's data was given to us, contact us and we will delete it.

Grievance Officer, MLHK Infotech, Barnawad, Moman Barodia, Shajapur, Madhya Pradesh 465236, India.

Email: admin@mlhk.in. Phone: +91-9165100124.

We acknowledge privacy grievances and respond within 90 days, as required by the DPDP Rules, 2025.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

We update this policy when our practices or the law change. The date at the top shows the latest revision. Material changes will be announced on this website.