Privacy Policy

Effective date: 1 October 2026

This Privacy Policy explains how IMTS Enterprise Solutions Pvt. Ltd. (“IMTS”, “we”, “us”), which operates the website octosystems.com, collects, uses, shares and protects your personal data. It is published under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”) and the Information Technology Act, 2000 and the rules made under it, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

For the purposes of the DPDP Act, IMTS is the Data Fiduciary for personal data collected through this website, and you are the Data Principal.

1. Personal data we collect

We collect only the personal data we need for the purposes listed in section 2:

• Data you give us when you fill in a form on this website (for example “Contact” or “Get a Cost Comparison”): your name, email address, phone number and the details you choose to share in your message, such as your company and the ERP system you currently use.
• Data you give us when you email or call us: your contact details and the content of your communication.
• Technical data collected automatically: IP address, browser and device type, pages visited, date and time of access, and similar information recorded in server logs and by essential cookies.

We do not ask for, and you should not send us through this website, passwords, financial account or card details, government identification numbers, health information or other sensitive personal data.

2. Why we use your personal data

• To respond to your enquiry and to prepare the cost comparison, migration path, demo or consultation you ask for.
• To communicate with you about your enquiry and, where you have asked us to, about our ERP products and services.
• To operate, secure and improve this website, including preventing spam, fraud and misuse.
• To comply with our obligations under applicable law and lawful requests from government authorities.

We do not sell your personal data, and we do not use it for any purpose that is not compatible with the purposes above.

3. Basis on which we process your data

We process your personal data on the basis of the consent you give when you submit a form or contact us, and for the legitimate uses permitted under section 7 of the DPDP Act, such as processing data you have voluntarily provided for a specified purpose and complying with law. Where we rely on consent, you may withdraw it at any time (see section 7). Withdrawal does not affect processing carried out before it.

4. Who we share your data with

We share personal data only as needed for the purposes above, with:

• Service providers acting as our Data Processors, such as our website hosting provider and email service provider, under contracts that require them to protect your data and use it only on our instructions.
• Technology partners (for example SAP, Microsoft, Siemens, Zoho or Odoo) only where needed to answer your specific enquiry, and with your knowledge.
• Government or law enforcement authorities where we are required to do so by law.

5. Transfer of data outside India

Some of our service providers may store or process data on servers located outside India. Any such transfer is made in accordance with section 16 of the DPDP Act and will not be made to any country or territory restricted by the Central Government.

6. How long we keep your data

We keep enquiry data only for as long as needed to respond to you and to maintain our business relationship, and erase it when that purpose is served or when you withdraw consent, unless the law requires us to keep it longer. Server and access logs are retained for at least one year, as required by the DPDP Rules, and then deleted.

7. Your rights

As a Data Principal you have the right to:

• Access a summary of the personal data we process about you and the processing activities, and the identities of those we have shared it with.
• Correct, complete or update your personal data.
• Erase your personal data, unless we must keep it to comply with law.
• Withdraw your consent at any time, as easily as you gave it.
• Grievance redressal: have your complaint about our handling of your personal data addressed.
• Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email our Grievance Officer at the address in section 11 with the subject “Data Protection Request”. We may need to verify your identity before acting on a request.

8. How we protect your data

We apply reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration and loss. These include encrypted connections (HTTPS), access controls limited to staff who need the data, regular software updates and monitoring of our systems.

9. Personal data breaches

If a personal data breach occurs, we will inform the Data Protection Board of India and affected Data Principals as required by the DPDP Act and DPDP Rules, explaining what happened, its likely impact, and the steps we are taking and that you can take.

10. Children’s data

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has given us personal data, please contact us and we will erase it.

11. Grievance Officer and contact

If you have any question, request or complaint about this policy or our handling of your personal data, please contact:

Grievance Officer
IMTS Enterprise Solutions Pvt. Ltd.
B Wing 610 & 604, Sagar Tech Plaza, Andheri-Kurla Road, Mumbai 400072, Maharashtra, India
Email: solutions@imtssolutions.com
Phone: +91 79492 90923

We will acknowledge your grievance promptly and resolve it within 90 days of receipt, as required by the DPDP Rules. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

12. Cookies

This website uses essential cookies needed for it to work securely, for example to remember your session and protect forms against spam. We do not use advertising cookies. If we introduce analytics or marketing cookies, we will ask for your consent first and update this policy.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with its effective date. Where changes materially affect how we use your personal data, we will seek your consent where required.

14. Governing law

This policy is governed by the laws of India. Courts in Mumbai, Maharashtra shall have jurisdiction, subject to the powers of the Data Protection Board of India.