Privacy Policy

Effective date: July 8, 2026  ·  Planck Red Private Limited  ·  CIN: U62013DL2024PTC436103

Planck Red Private Limited ("Planck Red", "we", "us", or "our") is a company incorporated under the Companies Act, 2013, with its registered office in New Delhi – 110001, India. We operate the website planckred.com and related tools and services (collectively, the "Services").

This Privacy Policy explains how we collect, use, disclose, and protect personal information about you when you use our Services, in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDPA).

By accessing or using our Services, you consent to the practices described in this Policy.

1.1 Information You Provide

• Contact & inquiry forms: name, email address, phone number, organisation name, designation, and any message you submit.
• DC Designer tool: name, email address, phone number, organisation, designation, location, and technical parameters you enter to generate a data centre design.
• Newsletter / marketing sign-up: email address and name.
• Business correspondence: information you include in emails or meeting requests sent to us.

1.2 Information Collected Automatically

• Usage data: pages visited, time spent, referral URL, browser type, operating system, and device identifiers.
• Log data: IP address, request time, HTTP status codes, and error logs collected by our web server.
• Cookies & similar technologies: session cookies (essential), analytics cookies (see Section 6).

1.3 Sensitive Personal Data or Information (SPDI)

We do not intentionally collect Sensitive Personal Data or Information as defined under the SPDI Rules unless strictly required. If such data is needed, we will seek explicit written consent.

We process your personal data for the following purposes and legal bases:

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information with:

• Service providers: third-party vendors who process data on our behalf (e.g., email delivery, analytics, hosting) under data processing agreements that require them to protect your data.
• Business partners: only with your prior consent, for example when you request information about a partner product.
• Legal authorities: when required by law, court order, or government authority, or to enforce our legal rights.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality obligations.

Any cross-border transfer of personal data will comply with applicable Indian law, including the DPDPA requirements for international transfers to notified countries.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Inquiry / contact data: up to 3 years from last interaction, unless you request deletion earlier.
• DC Designer sessions: OTP session data is cleared within 2 hours; design logs are retained for 12 months.
• Marketing data: until you withdraw consent or unsubscribe.
• Legal compliance records: as required by applicable law (typically 7 years for financial records).

After the retention period, data is securely deleted or anonymised.

Under the DPDPA, 2023 and other applicable laws, you have the following rights:

• Right to access: request a summary of the personal data we hold about you.
• Right to correction: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data, subject to legal retention requirements.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to grievance redressal: raise a complaint with our Grievance Officer (see Section 9).
• Right to nominate: nominate another individual to exercise rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, write to us at privacy@planckred.com. We will respond within 30 days.

We use the following types of cookies:

• Essential cookies: required for the website to function (session management, cookie consent preference). You cannot opt out of these.
• Analytics cookies: help us understand how visitors interact with our site (e.g., page views, traffic sources). You can opt out via the cookie banner on first visit or by adjusting your browser settings.

We do not use third-party advertising or tracking cookies.

We implement reasonable security practices as required under the SPDI Rules, 2011, including:

• HTTPS encryption for all data in transit
• Server-side OTP generation with hashed verification tokens
• Rate limiting and session expiry on authentication flows
• Access controls restricting personal data to authorised personnel only
• Regular review of security policies and practices

No method of transmission over the internet is 100% secure. In the event of a data breach affecting your rights and interests, we will notify you as required by applicable law.

Our Services may contain links to third-party websites (e.g., partner pages, LinkedIn, YouTube). This Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

In accordance with the IT Act, 2000 and the DPDPA, 2023, we have appointed a Grievance Officer. You may contact our Grievance Officer for any privacy-related complaints or concerns:

We aim to acknowledge your complaint within 48 hours and resolve it within 30 days.

Our Services are not directed at children under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date. Your continued use of our Services after any changes constitutes your acceptance of the revised Policy.

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts in New Delhi, India.