Privacy Policy

Effective Date: 01 January 2025
Last Updated: 07 September 2026

At Nodmax Private Limited (“Nodmax”, “we”, “us”, or “our”), we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, use our services, communicate with us, or access our client portal.

This Privacy Policy applies to services provided under our Nodmax brand and Nodmax Media sub-brand.

1. About Nodmax and Our Brands

Nodmax Private Limited is the registered legal entity that operates our business.
Nodmax is our primary brand, with our primary website available at: https://nodmax.in
Nodmax Media is a sub-brand of Nodmax Private Limited, with its website available at: https://nodmaxmedia.com
Our centralized client portal is: https://portal.nodmax.in

The client portal is operated by Nodmax Private Limited and may be used by clients of both Nodmax and Nodmax Media for client communication, service management, invoicing, and payments.

Accordingly, references to “Nodmax” or “Nodmax Media” on our websites, communications, proposals, invoices, or service materials may refer to brands operated by the same legal entity, Nodmax Private Limited.

2. Information We Collect

We collect personal data that is reasonably necessary to provide and manage our services.

Information You Provide:

Depending on how you interact with us, we may collect:

- Name and contact person’s name
- Business or company name
- Email address
- Phone/mobile number
- Business or billing address
- GST number/GSTIN, where provided
- Service and account information
- Invoice and transaction information
- Information provided through enquiries, support requests, or other communications

Client Portal Information:

When a client is added to or uses our client portal, we may collect:

Information	Status	Purpose
Business Name	Required	Client identification and account management
Contact Name	Required	Communication and account administration
Phone Number	Required	Service and account-related communication
Contact Email	Required	Account, service, invoice and payment communication
Address	Optional	Billing, business records and service-related purposes
GST Number/GSTIN	Optional	Tax, billing and business verification purposes

We may request additional information when necessary to provide a particular service, process a transaction, comply with legal obligations, or protect our systems and users.

3. Information Collected Automatically

When you visit our website or use our client portal, certain technical information may be collected automatically, including:

IP address
Browser type and version
Operating system
Device information
Screen resolution
Referring website
Pages visited
Date and time of access
Session and log information
Website interaction information
Security-related information

This information may be used to operate, secure, troubleshoot, analyse, and improve our websites and services.

4. How We Use Your Personal Data

We use personal data for purposes including:

Service Delivery & Management
Client Account & Relationship Management
Service Requests & Customer Support
Communication & Notifications
Invoicing & Payment Processing
Security & Fraud Prevention
Service & Website Improvement

We may process information where necessary to comply with applicable laws, regulations, legal processes, governmental requirements, or to establish, exercise, or defend legal rights.

5. Legal Basis for Processing

We process personal data only for lawful and specified purposes. Depending on the circumstances, processing may be based on:

your consent;
your request to receive our services;
the administration of your client or business relationship with us;
processing necessary for invoicing and payments;
compliance with applicable legal obligations;
security and fraud-prevention requirements; or
another lawful basis available under applicable law.

Where consent is required, we will seek it in an appropriate manner and provide information about the relevant purpose. Where processing is based on consent, you may withdraw your consent, subject to applicable law and any consequences of withdrawal.

6. Payments

Our client portal may facilitate payments for invoices and services using third-party payment providers, including:

Razorpay
PayPal

When you make a payment, the relevant payment provider may collect and process payment-related information in accordance with its own terms and privacy practices.

We may receive information such as:

payer/customer name;
transaction amount;
invoice reference;
transaction/reference ID;
payment status;
payment date;
payment method; and
other information necessary to reconcile the transaction.

Payment credentials such as card numbers, CVV, banking credentials, or UPI authentication information may be handled directly by the applicable payment provider. We do not intentionally store complete payment-card credentials on our own systems unless lawfully required and appropriately secured.

7. Cookies and Similar Technologies

Our website and client portal may use cookies and similar technologies to:

maintain sessions;
remember preferences;
provide essential functionality;
improve security;
understand website usage;
analyse performance;
troubleshoot technical issues; and
improve user experience.

Where applicable, cookies or similar technologies may also be used for analytics or marketing purposes. You can manage or disable cookies through your browser settings. Disabling certain cookies may affect some website or portal functionality.

8. Sharing of Personal Data

We do not sell or rent your personal data. We may share personal data where reasonably necessary for providing our services, operating our business, processing payments, maintaining security, or complying with law. These recipients may include:

Service Providers:

Technology and infrastructure providers supporting:

- hosting;
- cloud infrastructure;
- databases;
- backups;
- security;
- communications;
- customer support; and
- other business operations.

Payment Providers:

Payment processors such as Razorpay and PayPal may process information necessary to facilitate and complete transactions.

Government and Legal Authorities:

We may disclose information where required or permitted by applicable law, regulation, court order, or lawful governmental request. We expect third-party service providers processing personal data on our behalf to maintain appropriate confidentiality and security safeguards.

9. International Processing

Some third-party technology, payment, hosting, communication, analytics, or other service providers may process information outside India. Where personal data is processed outside India, we will take steps required by applicable Indian law and appropriate contractual, technical, or organizational safeguards.

10. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction. Depending on the systems involved, these measures may include:

encryption during transmission;
access controls;
authentication;
role-based permissions;
secure hosting;
monitoring and logging;
backups;
security assessments;
vulnerability management; and
confidentiality controls.

However, no online system can guarantee absolute security. If you believe your account or personal data has been compromised, please contact us promptly.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted. Retention may be necessary for:

providing services;
maintaining client accounts;
processing invoices and payments;
accounting and taxation;
legal and regulatory compliance;
resolving disputes;
preventing fraud;
maintaining security; and
establishing or defending legal claims.

When personal data is no longer required and there is no lawful reason to retain it, we will take reasonable steps to delete, anonymize, or securely dispose of it.

12. Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal data, including:

Access: Request information about personal data we process about you.
Correction: Request correction or updating of inaccurate or incomplete information.
Erasure: Request deletion of personal data where applicable.
Withdrawal of Consent: Withdraw consent where processing is based on consent.
Grievance Redressal: Raise a concern or grievance regarding our processing of personal data.
Nomination: Exercise applicable nomination rights provided under Indian data-protection law.

These rights are subject to applicable legal conditions, limitations, and exceptions. The Digital Personal Data Protection Act, 2023 provides a framework for these rights and obligations, with implementation subject to the applicable commencement provisions.

13. How to Exercise Your Rights

To submit a privacy request, correction request, deletion request, consent withdrawal, or privacy grievance, contact us:

Email: contact@nodmaxmedia.com

Please use the subject: Privacy / Personal Data Request

For security purposes, we may request reasonable information to verify your identity before processing certain requests. We will handle valid requests in accordance.

14. Marketing Communications

Where permitted, we may send information about our services, products, updates, or offers. You may opt out of marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us.

Opting out of marketing communications will not prevent essential communications relating to:

your account;
invoices;
payments;
security;
service delivery;
contractual matters; or
other necessary business communications.

15. Personal Data Breaches

We maintain reasonable security and incident-response measures designed to identify, manage, contain, and mitigate personal data breaches. Where a personal data breach occurs, we will take appropriate steps and provide notifications to affected individuals and/or relevant authorities when required.

16. Children’s Personal Data

Our services and client portal are primarily intended for businesses, professionals, organizations, and individuals engaging with us for business or service-related purposes. Our services are not intended to be directed toward children. We do not knowingly seek to collect children’s personal data.

17. Third-Party Websites

Our websites and communications may contain links to third-party websites or services. We are not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing the privacy policies of third-party services before providing them with personal data.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

changes to our services;
changes to our websites or client portal;
changes to our business or brand structure;
changes in technology;
changes to our data-processing practices; or
changes in applicable laws and regulations.

When material changes are made, we will update the Last Updated date and, where appropriate, provide additional notice.

19. Contact Us

If you have questions, concerns, privacy requests, or complaints regarding this Privacy Policy or our processing of personal data, please contact us.

Nodmax Private Limited

Primary Brand: Nodmax Private Limited

Sub-brand: Nodmax Media

Client Portal: https://portal.nodmax.in