neulaxy← Back to site
Legal

Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how Neulaxy Technologies Private Limited (“Neulaxy”, “we”, “us” or “our”) collects, uses, shares and protects your personal data when you visit neulaxy.com (the “Site”) or engage with our services. We are committed to handling your data lawfully, transparently and securely, in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where applicable, the EU/UK General Data Protection Regulation (“GDPR”).

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

  • Legal entity: Neulaxy Technologies Private Limited
  • CIN: U62090PN2025PTC241235
  • Registered office: F-501 Kalpataru Splendour, Nr. Datta Mandir, Wakad, Pune City, Pune – 411057, Maharashtra, India
  • Contact: contact@neulaxy.com

2. Personal data we collect

We collect only the data we need to respond to you and operate the Site:

  • Contact form data: your name, email address, phone number (if provided), company name and the contents of your message.
  • Booking data: when you schedule a call, details you submit through our scheduling provider, Calendly (name, email, chosen time and any notes).
  • Chatbot inputs: any messages, questions or information you type into the on-site “Neulaxy AI Assistant” chatbot.
  • Technical data: your IP address, browser type, device information, approximate location, pages viewed, referring URLs and other usage data collected via cookies and similar technologies.

3. How we collect it & why

We collect data directly from you (when you complete the contact form, book a call or use the chatbot) and automatically (through cookies and analytics when you browse the Site). We use your personal data to:

  • respond to your enquiries and communicate with you;
  • provide, deliver and administer our services and engagements;
  • operate, secure, maintain and improve the Site and our services; and
  • send marketing or updates only where you have given consent, which you may withdraw at any time.

4. Legal bases for processing

Under the DPDP Act, we process your personal data on the basis of your consent and for legitimate uses permitted by the Act (such as responding to a request you have voluntarily made). Where the GDPR applies, our legal bases are: your consent (e.g. marketing and non-essential cookies); performance of a contract (delivering services you request); our legitimate interests (operating, securing and improving the Site); and legal obligation where required.

5. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (“processors”) who help us run the Site and our business, under appropriate contractual safeguards:

  • Website hosting provider: to host and serve the Site;
  • Calendly: to schedule and manage consultation bookings;
  • Web analytics provider (e.g. Google): to understand and improve Site usage;
  • Email service provider: to receive and respond to your messages;
  • Third-party AI / LLM API provider, which powers the Neulaxy AI Assistant chatbot (see Section 6).

We may also disclose data where required by law, regulation or valid legal process, or to protect our rights, users and the public.

6. Neulaxy AI Assistant (chatbot)

The Site offers an on-site “Neulaxy AI Assistant” chatbot. Anything you type into the chatbot may be transmitted to and processed by an external third-party AI/LLM provider in order to generate responses. Please do not enter sensitive personal, financial or confidential information into the chatbot. Your inputs may be used by that provider to operate and, depending on their terms, improve their services; we encourage you to treat chatbot conversations as you would any message sent to a third-party service.

7. International data transfers

Some of our service providers (including hosting, analytics, scheduling and the AI/LLM provider) may store or process data on servers located outside India, the EU or the UK. Where personal data is transferred internationally, we take reasonable steps to ensure it is protected by appropriate safeguards (such as contractual protections) and handled consistently with this Policy and applicable law.

8. Data retention

We keep personal data only for as long as necessary for the purposes set out above. As a guide: enquiry and contact-form data is retained for up to 24 months after our last interaction; booking data for up to 24 months; client engagement records for the duration of the engagement and as required by applicable accounting, tax and legal obligations (typically up to 8 years); and analytics/technical data for up to 14–26 months. When data is no longer needed, we securely delete or anonymise it.

9. Security measures

We implement reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), access controls, the principle of least privilege, and use of reputable processors. No method of transmission or storage is completely secure, but we work to protect your data and to notify affected users and authorities of any reportable personal-data breach as required by law.

10. Children's data

The Site and our services are intended for businesses and adults. We do not knowingly collect personal data of children (defined under the DPDP Act as individuals under 18 years of age) without verifiable parental or guardian consent, and we do not direct the Site at children. If you believe a child has provided us personal data, please contact us and we will delete it.

11. Your rights under the DPDP Act, 2023

If you are in India, you have the right to:

  • Access a summary of the personal data we process about you and the processing activities;
  • Correction & updating of inaccurate or incomplete data;
  • Erasure of personal data that is no longer needed for the purpose it was collected;
  • Grievance redressal through our Grievance Officer (Section 13); and
  • Nomination of another individual to exercise your rights in the event of death or incapacity.

You may also withdraw consent at any time. To exercise any right, email contact@neulaxy.com.

12. Your rights under the GDPR (EU/UK visitors)

If you are in the EU or UK, you have the right to: access your data; rectification of inaccurate data; erasure (“right to be forgotten”); restriction of processing; data portability; objection to processing (including direct marketing); and to withdraw consent at any time.

You also have the right to lodge a complaint with your local data-protection supervisory authority. We would, however, appreciate the chance to address your concerns first, so please contact us at contact@neulaxy.com.

13. Grievance Officer / Data Protection Contact

In accordance with the DPDP Act, you may contact our Grievance Officer / Data Protection contact for any questions, requests or complaints about your personal data:

We aim to acknowledge and respond to grievances within the timelines required by applicable law.

14. Changes to this Policy & contact

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. We will revise the “Last updated” date above and, where changes are material, take reasonable steps to notify you. Your continued use of the Site after an update constitutes acceptance of the revised Policy.

Questions? Contact us at contact@neulaxy.com. This Policy is governed by the laws of India, with jurisdiction in Pune, Maharashtra, India.

This is a general template and not legal advice; have it reviewed by a qualified lawyer before publishing.