Privacy Policy

This policy explains what personal data LEDZO INDIA PRIVATE LIMITED collects through this website, why we collect it, how long we keep it, who else handles it for us, and what you can do about it. It is short because we collect very little.

1. Who we are

This website, https://ledzo.in, is run by LEDZO INDIA PRIVATE LIMITED, a private limited company incorporated in India under the Companies Act, 2013 (CIN U62011TS2026PTC219876), with its registered office at 35-3-1167, Bank Colony-2, Hanumakonda – 506015 ("LEDZO", "we", "us").

For the personal data described in this policy, we are the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023. That means we decide why and how it is used, and we are responsible to you for it.

This policy covers this website only: the emails and calls you send us because of this website, and the technical records our web server keeps for ledzo.in.

It does not cover the use of any product described on this website, such as ComGate or Ledzo Books. The use of a product is governed by that product's own terms and privacy information. Ledzo Books, at https://books.ledzo.in, is a separate service; this policy does not apply to anything you do there. Where a product processes personal data for a business customer, that customer is usually the Data Fiduciary for that data, and the product's terms say who does what.

2. The short version

• The website does not use cookies, analytics tools, advertising pixels or any other tracking. See section 5.
• The website has no forms. The only personal data you give us is what you put in an email or a phone call to us.
• Our email links open your own email program. Nothing is sent until you send the email yourself.
• The "Open Ledzo Books" button takes you to a separate website, books.ledzo.in, to which this policy does not apply.
• We use what you send only to reply to you. We do not add you to a mailing list, sell your data or share it for marketing.
• We keep enquiry emails for 12 months after our last message to each other, then delete them, unless the enquiry becomes a contract with us. See section 6.
• Our web server keeps standard access records, including your IP address, for 12 months, on a server in India. See section 4.
• You can ask to see, correct or delete your details, or complain, by writing to the contact in section 9.

3. When you write to us

3.1 Emails

You can reach us at hello@ledzo.in, and about personal data or a grievance at grievance@ledzo.in. The email links on this website (including the "Enquire about …" buttons) open a new message in your own email program with a subject line such as "Enquiry: ComGate". The website itself does not see or send anything. Your message reaches us only if you send it.

When you email us, we receive what any email carries: your email address and the name your email program shows, the subject, what you write, any attachments, the date and time, and technical details your email provider adds to the message (such as the servers it passed through).

3.2 Why we use it

We use these details to read, answer and follow up your enquiry, including any conversation that grows out of it, such as preparing a proposal you asked for. If the enquiry leads to a contract, the contract and its own privacy terms take over from that point.

We do not use your details for marketing, profiling or automated decisions about you. We do not sell them.

3.3 Our legal basis

You choose to write to us and tell us what you want, so we rely on section 7(a) of the DPDP Act: personal data you give us voluntarily, for a purpose you have made clear. You can ask us at any time to stop using your details and delete them (section 7 of this policy).

3.4 Please do not send us sensitive information

You do not need to send us passwords, bank or card details, health information, government ID numbers (such as Aadhaar or PAN), or information about children to make an enquiry. Please leave them out. If you send them anyway, we will delete them from our records once we notice, unless we need them to answer you.

Job applications. We have no open roles, and our Careers page asks you not to send a CV. If you send one anyway, we will not keep it: we will delete it and any attachment within 30 days and tell you we have done so.

3.5 Phone calls

If you call us, we handle what you tell us in the same way, for the same purpose, and for the same period (section 6). We do not record phone calls.

3.6 No contact form

This website does not have a contact form. If we add one, we will update this policy before the form goes live.

4. What our web server records automatically

Our website runs on a cloud server in the Mumbai region (India) of Amazon Web Services, which is provided and managed for us by the service provider named in section 8. The web server software keeps an access record of each request to ledzo.in and www.ledzo.in, containing:

• your IP address;
• the date and time, and how long the server took to answer;
• the type of request and the page or file requested (without any text after a "?" in the address);
• whether it was delivered (the status code) and its size;
• your browser's "user agent" string, which names the browser and operating system;
• the address of the website that linked you to us (the "referrer"), recorded as the site address only, not the full page address, if your browser sends it.

Nothing else is recorded: no cookies, no form data, no other details your browser sends.

We use these records only to:

• keep the website secure and available, and investigate attacks, abuse or faults;
• count visits in total (for example, how many times a page was viewed in a month). We look at totals only. We do not use these records to build a profile of you or to identify you, and we do not combine them with your emails;
• meet our legal duties. Indian law requires companies to keep logs of their IT systems for a set period and to make them available to the Indian Computer Emergency Response Team (CERT-In) on request.

Basis. We keep these records to meet the CERT-In Directions of 28 April 2022 and our duty under section 8(5) of the DPDP Act to protect personal data with reasonable security safeguards.

The records are kept in daily files for 12 months on the server in India, then deleted automatically. See section 6.

5. Cookies and tracking (none used)

This website does not use cookies. It does not use analytics tools, advertising or social-media pixels, "fingerprinting", session recording, or any third-party scripts. It does not store anything on your device, for example in your browser's local storage.

Our fonts and images are served from our own website, so loading a page does not send your IP address to anyone else (for example, to a font service). Our email links do not send anything to us or to anyone else by themselves.

Links to Ledzo Books. The "Open Ledzo Books" button is an ordinary link. If you press it, your browser leaves this website and opens https://books.ledzo.in, and, as with any website you visit, sends that site your IP address and standard browser details. Our pages tell your browser to pass on only our site address (https://ledzo.in) as the referrer, not the page you were on. What happens on books.ledzo.in is governed by its own privacy policy.

Because we do not track you, we do not show a cookie banner.

If this ever changes, we will update this policy before the change goes live, and if the change needs your consent, we will ask for it first.

6. How long we keep things

Why 12 months. It gives time to follow up an enquiry, which can take several months for a business customer, and to deal with any question or complaint about how we handled it. It also matches the one-year minimum that the DPDP Rules, 2025 set for keeping processing logs and related data for security purposes, and it is more than the 180 days the CERT-In Directions require for system logs.

Exceptions. We may keep something longer only if the law requires it, or if it is needed for an actual or reasonably expected legal claim. If so, we keep only what is needed and delete it when the reason ends.

Your request comes first. If you ask us to delete your details earlier, we will (section 7), unless one of the exceptions above applies. If it does, we will tell you which one.

Copies of deleted emails can remain in our email system's automatic backups for up to 7 days before they are overwritten.

7. Your rights: access, correction and erasure

You have the right to:

1. Know what we hold. Ask for a summary of the personal data we hold about you, what we do with it, and who else we have shared it with (DPDP Act, section 11).
2. Correct or update it. Ask us to correct anything inaccurate, complete anything incomplete, or update it (section 12).
3. Have it deleted. Ask us to delete your personal data when it is no longer needed for the purpose you gave it for, or when you ask us to stop using it (section 12), unless the law requires us to keep it.
4. Ask us to stop. Tell us you no longer want us to use your details. We will stop and delete them, as in point 3.
5. Complain. Raise a grievance with us (section 9 below), and, if you are not satisfied with our answer, complain to the Data Protection Board of India (section 13).
6. Nominate someone. Name another person to exercise these rights for you if you die or become unable to do so (section 14).

How to ask. Email the contact in section 9. Please write from the email address you used to contact us, so we can match your request to our records without asking for more information. If you write from a different address, we may ask you a simple question to check it is you. We will not ask for identity documents for an enquiry email.

How long we take. We will acknowledge your request within 7 days and complete it within 30 days. If we cannot do what you ask, we will explain why.

There is no charge.

Your duties. The DPDP Act (section 15) also asks you to give accurate information, not to pretend to be someone else, and not to make frivolous complaints.

8. Who else handles your data

We do not sell, rent or trade personal data. We share it only with service providers who run parts of the website and our email for us ("Data Processors"). They may use it only on our instructions and must protect it.

Our email (hello@ledzo.in and grievance@ledzo.in) runs on the ComGate mail service, hosted on those servers. No other email company holds your emails.

No AI tools. We do not use artificial-intelligence tools to read, sort, analyse or answer enquiry emails. People acting for the Company read and reply to them. If this ever changes, we will update this policy, and name any new provider, before the change takes effect.

We will also disclose personal data if the law requires it, for example to a court, a regulator, CERT-In or a law-enforcement agency acting under legal authority, and then only what is required.

Outside India. Our website records and our emails are stored in India. If we ever use a provider that processes data outside India, the DPDP Act (section 16) allows this except to countries the Government restricts by notification, and we will not use a provider in a restricted country. An email you send us may pass through servers outside India on its way to us, depending on your own email provider.

9. Grievance and data-processing contact (DPDP Act, 2023, Sec 8(9))

If you have a question about how we handle your personal data, want to use any of your rights, or have a complaint, contact:

Harish.D, Director — Grievance Officer and contact for questions about personal data
LEDZO INDIA PRIVATE LIMITED
Email: grievance@ledzo.in

This is the same person named on our home page and Corporate information page as the contact for queries and grievances. They are:

• the person who answers questions about how we process personal data (DPDP Act, section 8(9), and DPDP Rules, rule 9);
• our Grievance Officer under rule 5(9) of the SPDI Rules; and
• the contact for queries and grievances under rule 26 of the Companies (Incorporation) Rules, 2014.

We will acknowledge a grievance within 7 days and resolve it within 30 days. The DPDP Rules allow up to 90 days; we aim to be faster.

If you are not satisfied with our answer, you can complain to the Data Protection Board of India, as provided under the DPDP Act and Rules.

10. How we protect your data

We take security measures proportionate to the small amount of data we hold. They include:

• the whole website is served only over HTTPS;
• the website is static, with no forms and no database of visitors or enquiries, and its files are served read-only;
• the database in which our email is stored is encrypted, protected against accidental deletion, and backed up automatically;
• the server's storage, including the website's access records, is open only to the few people and systems that need it;
• access to our company mailboxes is limited to the people who handle enquiries;
• we keep security settings (such as strict browser security headers) switched on and review them.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board as the DPDP Act and Rules require, and report to CERT-In where the CERT-In Directions require it.

11. Children

This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18, and we do not track or profile anyone. If you are under 18, please do not email us about an enquiry; ask a parent or guardian to contact us instead. If we learn that we have received a child's personal data, we will delete it.

12. Links to other websites

This website links to Ledzo Books at https://books.ledzo.in, which has its own privacy policy, and may link to other websites.
We are not responsible for how other websites handle your data. Please read their privacy policies.

13. Changes to this policy

We will update this policy if what we collect, why we collect it, or who handles it changes. The date and version at the top will show when it last changed. If a change affects how we use data we already hold about you, and we have your email address, we will tell you before the change applies to your data. We keep earlier versions and will send you a copy on request.

14. The law we follow

This policy is written to meet the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as each applies to us. Where the Act and its Rules are coming into force in stages, we follow them now.

This policy is governed by the laws of India.