Privacy Policy hero background

Privacy Policy

Your privacy and data protection are our top priorities. We're committed to transparency and protecting your personal information.

Quick Navigation

About Us

Information about our organization

Our website address is https://www.iweb.ltd. We are iWebTechno, a technology company specializing in university management systems and digital solutions for educational institutions.

Information Collection

How we collect and process your information

When you submit a contact form or demo request form on our website, we collect the following information:

  • Name: Your full name for identification and communication
  • Email Address: Your email address for responding to your inquiries
  • Company: Your organization name (optional)
  • Phone Number: Your contact number (optional)
  • Message: Your inquiry or demo request details
  • Source: The form or page you submitted from (e.g., "website", "demo-form")

This information is processed through our API routes (/api/contact) and stored in our Azure SQL database for the purpose of responding to your inquiries and providing requested services.

Data Storage

How we store and secure your information

All form submissions are stored in our Azure SQL database using Microsoft SQL Server. Our application is deployed using Docker containers and processes data through Next.js API routes.

We implement the following security measures:

  • HTTPS/SSL encryption for data transmission
  • Azure SQL database encryption at rest
  • Docker containerization for application isolation
  • Prisma ORM for secure database access
  • Input validation using Zod schema validation
  • Regular security updates and patches

We do not store any payment information or sensitive personal data beyond what is necessary to respond to your inquiries.

Data Retention

How long we keep your information

We retain your form submission data for a period of 3 years from the date of submission, unless you request deletion earlier. This retention period allows us to:

  • Maintain records of our communications with you
  • Provide follow-up support and services
  • Comply with legal and regulatory requirements
  • Improve our services based on customer interactions

After this period, your data will be automatically deleted from our systems. You can request deletion of your data at any time by contacting us.

Data Sharing

When and how your data may be shared

We do not sell, trade, or rent your personal information to third parties. Your data may be shared only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our website and providing services (e.g., Azure cloud services, hosting providers)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In the event of a merger, acquisition, or sale of assets (with appropriate privacy protections)
  • Your Consent: When you explicitly consent to sharing your information

All third-party service providers are contractually obligated to protect your data and use it only for the specified purposes.

Your Rights

Your rights regarding your personal data

You have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data from our systems
  • Portability: Request your data in a structured, machine-readable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing of your data for specific purposes

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within 30 days.

Security

How we protect your information

We implement the following security measures to protect your personal information:

  • Encryption: All data is encrypted in transit using HTTPS/SSL
  • Container Security: Docker containerization provides isolation and security
  • Access Controls: Basic authentication for admin functions
  • Database Security: Microsoft SQL Server with Prisma ORM for secure data access
  • Input Validation: Zod schema validation for form data
  • Regular Updates: Regular security updates and patches