Privacy Policy

1. Who we are

DOCXA ("we", "us", "our") is a digital solutions studio based in Ahmedabad, Gujarat, India. We operate the website at https://www.docxa.in and provide web development, branding, marketing, and educational services. You can reach us at support@docxa.in.

2. What we collect

We collect only what we need to operate our business and serve you:

• Contact details you submit via forms — name, email, phone, and your message.
• Course enrollment & payment data — name, email, phone, UTR (UPI transaction reference), and the amount paid. We never collect card numbers or your UPI PIN.
• Newsletter email — only your email address (and optionally your name).
• Technical logs — IP address, user agent, and basic analytics (page views, referrer). No third-party tracking cookies.
• Admin activity — audit logs of admin actions for security and accountability.

3. How we use your data

• To respond to your enquiries and provide quotes.
• To enroll you in courses and verify your UPI payment.
• To send you the newsletter (only if you opt-in; you can unsubscribe at any time).
• To improve our website, content, and services.
• To detect, prevent, and respond to fraud, abuse, or security issues.

4. Legal basis (GDPR/DPDPA)

We process your personal data on the basis of (a) your consent when you submit a form, (b) performance of a contract when you enroll in a course, (c) our legitimate interests in operating a secure business, and (d) compliance with applicable Indian and international laws.

5. Data retention

We retain contact enquiries for up to 24 months. Course enrollment and payment records are retained for 7 years for tax and accounting compliance. Newsletter subscribers' data is retained until they unsubscribe. You may request deletion of your data at any time (subject to legal retention requirements).

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (right to be forgotten), subject to legal exceptions.
• Object to or restrict processing.
• Withdraw consent at any time (e.g., unsubscribe from newsletter).
• Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, email us at support@docxa.in.

7. Sharing

We do not sell your personal data. We share it only with: (a) our hosting provider (Hostinger) for serving the website, (b) our payment verification team (internal), (c) email service providers for transactional emails, and (d) authorities when legally required.

8. Security

We follow industry best practices: hashed passwords (bcrypt), httpOnly secure cookies for admin sessions, input validation, rate limiting, WAF and DDoS protection via our hosting provider, and TLS encryption for all traffic. Despite our efforts, no system is 100% secure. If a breach occurs, we will notify affected users and authorities as required by law.

9. Cookies

We use only essential cookies (session, theme preference). We do not use third-party advertising or tracking cookies. Analytics, if enabled in the future, will be self-hosted and privacy-respecting.

10. Children's privacy

Our services are not directed at children under 13. We do not knowingly collect their data. If you believe we have, please contact us.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced on our website. Continued use after changes implies acceptance.

12. Contact

For any privacy-related questions, write to us at support@docxa.in or post to our address: 2nd Floor, RE11 Ahmedabad, Near Vikramnagar, Iscon, Ambli Road, Ahmedabad, Gujarat 380058, India.