Privacy Policy
How we handle personal data across the Teralax group websites and services.
This policy is a working draft written to cover the group's normal operations. Have it reviewed against the data protection law applicable to your jurisdiction and your actual processing activities before you treat it as binding.
Last updated: to be set on publication. Data controller: Terralax Web Services (OPC) Pvt. Ltd.
1. Scope
This policy applies to teralax.com and the group websites and services operated by Terralax Web Services (OPC) Pvt. Ltd., including our hosting portal at teralax.cloud. Where a division operates under a separate agreement, that agreement's data terms apply in addition to this policy.
2. Information we collect
- Account information — name, business name, billing address, email address and telephone number provided when you open an account or request a quotation.
- Service information — details of the services you buy, configuration data, domain and DNS records, and support correspondence.
- Billing information — invoices, payment records and tax identifiers. Card details are handled by our payment processors; we do not store full card numbers.
- Technical information — IP addresses, connection logs, access logs and security event records generated when you use our services or websites.
3. How we use it
We process personal data to deliver and support the services you have ordered, to bill for them, to secure our network and investigate abuse, to meet legal and regulatory obligations, and to respond to your enquiries. We do not sell personal data.
4. Legal basis
Processing is carried out on the basis of contract performance, our legitimate interest in operating and securing the network, compliance with legal obligations, and consent where consent is the applicable basis.
5. Sharing
We share data only with parties necessary to deliver the service: payment processors, domain registries and registrars, certificate authorities, data center and network partners, and professional advisers. We also disclose data where required by law or lawful order.
6. Retention
Account and billing records are retained for the period required by applicable tax and company law. Technical and security logs are retained for a limited operational period and then deleted or aggregated. Customer content is retained for the duration of the service and a defined grace period after termination.
7. Security
We apply access controls, encryption in transit, hardened system baselines, monitoring and least-privilege administrative access. No system is perfectly secure; we work to reduce risk and to respond quickly when an issue is identified.
8. Your rights
Subject to applicable law, you may request access to the personal data we hold about you, correction of inaccurate data, deletion where we are not required to retain it, and a copy of data you provided to us. Requests can be made through the client portal and will be verified before being actioned.
9. Cookies
This group website does not set advertising or tracking cookies. Our client portal sets cookies that are strictly necessary for authentication and session management.
10. International transfers
Where data is processed outside the country in which it was collected, we take steps to ensure an appropriate level of protection through contractual safeguards with the relevant provider.
11. Changes
We may update this policy as our services change. Material changes will be notified to account holders through the client portal.
12. Contact
Privacy questions and data requests should be raised through the client portal. A dedicated privacy mailbox will be published once group mail routing is configured.