Privacy Policy

Effective Date: January 10, 2026 | Last Updated: January 10, 2026

GLOBAL REGULATORY COMPLIANCE This Privacy Policy complies with:

EU: General Data Protection Regulation (GDPR)
UK: UK GDPR & Data Protection Act 2018
USA: CCPA/CPRA (California), HIPAA (Healthcare), State Privacy Laws
Canada: PIPEDA & Quebec Law 25
Australia: Privacy Act 1988 & 2024 Amendments
Singapore: Personal Data Protection Act (PDPA)
India: Digital Personal Data Protection Act 2023 & DPDP Rules 2025

1. Introduction

Enstacked Technologies ("Company", "we", "us", "our") is an IT services company registered in Gujarat, India. We provide comprehensive IT services globally, including White Label Agency Services, Ecommerce Development, CMS Development, Headless Ecommerce and CMS Development, Custom Software Development, and Staff Augmentation services.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website (enstacked.com), engage our services, or otherwise interact with us.

BY ACCESSING OUR WEBSITE OR ENGAGING OUR SERVICES, YOU AGREE TO THIS PRIVACY POLICY.

2. Data Controller / Data Fiduciary

Company Name: Enstacked Technologies

Registered Location: Gujarat, India

Email: support@enstacked.com

Website: https://www.enstacked.com

3. Information We Collect

3.1 Information You Provide Directly

Identity Information: Full name, job title, company name
Contact Information: Email address, phone number, postal address
Business Information: Project requirements, technical specifications
Communication Data: Emails, messages, meeting notes
Payment Information: Processed via PCI-DSS compliant gateways only

3.2 Automatically Collected Information

Technical Data: IP address, browser, device
Usage Data: Pages visited, time spent
Location Data: Approximate geographic location
Cookie Data: See Section 10

3.3 Information from Third Parties

White Label Partners: End-client data under NDA
Healthcare Clients: PHI under HIPAA BAA
Business References: Referrals and recommendations

4. Legal Basis for Processing

Consent
Contractual Necessity
Legitimate Interests
Legal Obligations

5. How We Use Your Information

Service delivery and improvement
Billing and invoicing
Communication and support
Marketing with consent
Security and fraud prevention

6. Information Sharing

WE DO NOT SELL YOUR DATA.

Service providers under contract
Legal requirements
Business transfers
With explicit consent

7. HIPAA Compliance

Administrative safeguards
Physical safeguards
Technical safeguards

8. Data Security

Encryption (AES-256, TLS)
Role-based access
Monitoring and logging
Secure backups

9. Data Retention

We retain data only as long as legally required.

10. Cookies

Essential cookies
Analytics cookies
Consent management

11. Your Rights

Access
Correction
Deletion
Portability
Objection

12. International Transfers

Data may be processed globally with safeguards.

13. Children’s Privacy

No data is knowingly collected from minors.

14. Third-Party Links

We are not responsible for external websites.

15. Do Not Track

DNT signals are not currently honored.

16. Policy Updates

Updates will be posted on this page.

17. Contact Us