1. Introduction

Lightening Infotech Solutions Pvt. Ltd. respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you (a) visit our website, (b) engage us for Cloud, Engineering, Cybersecurity, or Managed Services, or (c) otherwise interact with us (collectively, “you”,  the “Client” or “User”).

2. Information We Collect

a) Information you provide directly:

• Contact details (name, company, email, phone) when you reach out, request a quote, or sign an
  SOW.
• Billing and payment details for invoicing.
• Technical information you share to enable our Services (e.g., cloud account IDs, architecture
  diagrams, configuration details) — strictly limited to what is necessary for the engagement.

b) Information collected automatically:

• IP address, browser type, device information, pages visited, and timestamps via
  cookies/analytics tools.

c) Information from Client environments during Service delivery:

• Where we are granted access to cloud accounts or systems (e.g., AWS/Azure/GCP) to perform
  contracted work, we may access logs, configuration, and usage data strictly within the agreed
  scope of the engagement. We do not access Client data outside this scope.

3. How We Use Information

We use collected information to:

• Deliver, maintain, and support the Services under an active engagement.
• Process invoices and payments.
• Communicate about proposals, SOWs, support tickets, and account matters.
• Improve our internal processes, security, and service quality.
• Comply with legal, tax, and regulatory obligations.
• Send service-related or (with consent, where required) marketing communications.

We do not sell personal or client data to third parties.

4. Data Sharing & Third Parties

We may share information with:

• Sub-processors / vendors who support our operations (e.g., accounting software,
  email/communication tools, project management tools) under confidentiality obligations.
• Cloud providers (AWS, Azure, GCP) to the extent Services are delivered on Client-owned
  accounts — this is governed primarily by the Client’s own agreement with that provider.
• Legal/regulatory authorities where required by applicable law.
• Successors in the event of a merger, acquisition, or asset sale, subject to continued
  confidentiality protections.

We do not share Client production data or credentials with any party outside the scope of the specific engagement without the Client’s written consent.

5. Data Security

We apply reasonable administrative, technical, and physical safeguards, including:

• Access controls and least-privilege principles for Client environments.
• Secure storage of credentials (e.g., secrets managers, not plaintext).
• Internal confidentiality obligations for staff handling Client data.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security but will notify affected clients promptly in the event of a confirmed data breach affecting their information, in with applicable law.

6. Data Retention

We retain personal and engagement-related data only as long as necessary to:

• Fulfill the purposes described in this Policy,
• Meet contractual obligations (e.g., SOW records), and
• Comply with legal, tax, and accounting requirements for financial records under Indian law, or as
  locally required).

Upon request and where legally permissible, we will delete or anonymize personal data that is no longer required.

7. Cookies & Website Tracking

If our website uses cookies or analytics tools, we will disclose this via a cookie banner/notice, allowing you to accept or manage preferences.

8. Your Rights

Subject to applicable law (including India’s Digital Personal Data Protection Act, 2023, and GDPR whererelevant to EU/UK data subjects), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal/contractual retention needs.
• Withdraw consent for marketing communications at any time.
• Raise a grievance with our designated contact (see Section 11) or the relevant data protection
  authority.

9. Children’s Privacy

Our Services are intended for businesses and professionals. We do not knowingly collect personal information from individuals under 18.

10. International Data Transfers

If we engage with clients or sub-processors outside India, personal data may be transferred internationally. We will take reasonable steps to ensure such transfers comply with applicable data protection laws.

11. Grievance Officer / Contact Us

For privacy questions, data requests, or complaints:

Grievance Officer: Sajith .K Email: Sajithk@lis.net.in Phone: 7736887574 Address: Lightening Infotech
Solutions Pvt. Ltd. 308,HeadQ Pvt Ltd,96/53, HI LITE, Maradu, Kochi

12. Changes to This Policy

We may update this Privacy Policy periodically. The “Effective Date” above will reflect the latest revision. Material changes affecting active clients will be communicated directly.