Privacy & Data Protection Policy
Institutional standards for data protection, encryption, processing transparency, and regulatory compliance across our enterprise platforms, applications, and digital services.
Information We Collect & Process
Lordist Infotech Private Limited collects and processes information strictly necessary to provide high-reliability enterprise software platforms, cloud infrastructure services, and technical support.
Corporate Account Data
Organization name, authorized representative details, professional email addresses, billing coordinates, and enterprise tenant credentials.
Technical Telemetry
System access timestamps, IP addresses, browser engine metadata, API payload transaction identifiers, and diagnostic error logs.
Data Ownership: We strictly treat your organizational business data as confidential. Lordist never sells, monetizes, or leases customer data to third-party advertising networks.
Enterprise Data Security Architecture
Our engineering organization implements multi-layer defense-in-depth security controls aligned with institutional cybersecurity benchmarks:
Technical Safeguards
- TLS 1.3 in-transit encryption across all public & internal endpoints
- AES-256 encryption at rest for databases, backups, and storage buckets
- Role-Based Access Control (RBAC) and least-privilege administrative IAM
- Immutable audit logging for sensitive administrative actions
Compliance & Governance
- GDPR & India DPDP Act compliance frameworks
- Continuous automated vulnerability scanning & dependency patch management
- Mandatory annual employee security awareness training
- Formally tested disaster recovery & business continuity runbooks
Statutory Data Subject Rights
Depending on your jurisdiction, your organization and its personnel hold statutory rights regarding personal data:
Right to Access
Request formal disclosure of all records maintained regarding your identity.
Right to Rectification
Correct outdated, incomplete, or inaccurate records without undue delay.
Right to Erasure
Request permanent deletion of data subject to statutory retention obligations.
Right to Portability
Obtain data export in structured, machine-readable JSON or CSV format.
Right to Restrict
Temporarily limit processing while a formal dispute is actively evaluated.
Right to Object
Opt out of direct communications or automated algorithmic processing.
Data Protection Officer & Inquiries
To exercise any statutory privacy right, report a security event, or request a Data Processing Addendum (DPA), contact our governance officer: