Privacy Policy

1. Who we are (Data Controller)

DTP Labs is the data controller for personal information collected through www.dtplabs.com and through our services. DTP Labs is a partnership firm registered in India with its registered office at A-15/32, Vasant Vihar, New Delhi 110057, India, and a production hub in Gurugram, Haryana.

For any privacy questions or data subject requests, contact us at info@dtplabs.com.

2. Information we collect

We collect information you provide directly, information generated when you use our site, and information we receive from clients engaging our services. Specifically:

• Contact information you submit through our contact form, chatbot, or email (name, company, email address, phone number, country, project details).
• Newsletter signup email addresses.
• Project files and content you send us for DTP, localization, translation, e-learning, accessibility, multimedia, or related work. These files may contain personal data belonging to you or your end clients.
• Communications between you and our team during an engagement.
• Technical data collected automatically when you visit our site — IP address, browser type and version, device type, operating system, referring URL, pages viewed, and approximate location derived from IP.
• Analytics and performance telemetry — collected by Vercel Web Analytics and Vercel Speed Insights in aggregated, cookie-less form.

3. How we use information

We use the information we collect for the following purposes, each based on a lawful basis under applicable data protection law (GDPR where relevant):

• To respond to your inquiries and provide quotes — lawful basis: steps taken at your request prior to entering a contract.
• To perform contracted services (DTP, localization, translation, e-learning, accessibility work) — lawful basis: performance of a contract.
• To send you service updates and project status communications — lawful basis: performance of a contract or legitimate interest.
• To operate, maintain, secure, and improve our website — lawful basis: legitimate interest.
• To send marketing communications (newsletter) where you have subscribed — lawful basis: your consent, withdrawable at any time.
• To comply with legal, regulatory, tax, and accounting obligations — lawful basis: legal obligation.
• To protect our legal rights and the rights of others, prevent fraud, and respond to lawful requests — lawful basis: legitimate interest or legal obligation.

4. Sub-processors and third-party services

We use a small number of trusted sub-processors to operate our website and services. Each is contractually bound to appropriate data protection and security obligations:

• Vercel Inc. — hosting, edge delivery, analytics, and speed insights for www.dtplabs.com.
• Google LLC — Google Fonts are self-hosted via next/font (no runtime calls). Google Translate widget is used optionally for on-page translation when visitors select a non-English language.
• Anthropic PBC — AI chatbot responses are generated via the Anthropic Claude API when visitors use our on-site chatbot. Chat messages are transmitted to Anthropic for inference and are not used to train their models.
• Hostinger International Ltd. — hosts our blog CMS subdomain at wp.dtplabs.com.
• Google Workspace (via a form integration) — contact form submissions are routed to a Google Sheet and notification email for our team.

5. Data retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.

Project files received from clients for DTP, translation, or other service work are held in access-controlled storage for the duration of the engagement and typically purged within 90 days of final delivery unless the client requests extended retention for ongoing programs or legal hold. This retention practice is part of our ISO 27001:2022 information security management system.

Contact form submissions and related business correspondence are retained for up to 5 years to support client service, tax and accounting records, and legal defense.

Website analytics data is retained in aggregated form only, without individual user identifiers, for up to 24 months.

6. Your rights

Depending on your location, you have rights with respect to your personal information. Under the EU General Data Protection Regulation (GDPR), UK GDPR, California Consumer Privacy Act (CCPA), India Digital Personal Data Protection Act (DPDP) 2023, and similar laws, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of personal information, subject to exceptions for legal retention.
• Restrict or object to certain processing.
• Data portability — receive your personal information in a structured, commonly used, machine-readable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority — in the EU, your national data protection regulator; in India, the Data Protection Board of India.

7. International data transfers

DTP Labs is headquartered in India. Our website is hosted on Vercel's global edge network, which may route traffic through servers in the United States, European Union, and other regions. Our sub-processors may process data in the United States, European Union, and other countries.

Where personal data of EU or UK residents is transferred outside the European Economic Area or the United Kingdom, we rely on Standard Contractual Clauses (SCCs) and supplementary measures as required under GDPR and UK GDPR.

8. Security

DTP Labs maintains an information security management system certified to ISO 27001:2022, with annual external audits. Technical and organizational measures include encrypted file transfer (TLS/HTTPS throughout), access-controlled storage with least-privilege permissions, individual NDAs signed by every team member handling client data, VPN-secured remote access, comprehensive audit logs, staff security training, and documented incident response procedures.

Despite our best efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying affected parties promptly in the event of any breach involving personal data as required by law.

9. Cookies and tracking

Our website uses a minimal set of technical cookies required for site operation and anti-abuse. We do not use tracking or advertising cookies. Vercel Web Analytics operates in cookie-less mode. If you use the Google Translate widget, Google may set cookies under its own privacy terms.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some features.

10. Children's privacy

Our services are directed at businesses and not at individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at info@dtplabs.com and we will delete the information.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be notified through prominent notice on the website or by direct communication where appropriate.

12. Contact us

For privacy questions, data subject requests, or any other matter related to this Privacy Policy, contact us at info@dtplabs.com or by post to DTP Labs, A-15/32, Vasant Vihar, New Delhi 110057, India.