Global Privacy & Cookie Policy

1. Scope, Organization Identity, and Legal Roles

Welcome to Tech Support Leads (operating at techsupportleads.com). This Global Privacy & Cookie Policy governs all personal data collected, stored, processed, transferred, and licensed by Tech Support Leads across our corporate website, service inquiries, client engagements, marketing automation platforms, and curated commercial lead datasets.

Depending on your geographic location and how you interact with us, Tech Support Leads operates in the following recognized statutory capacities:

• Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) with respect to website visitors, customer inquiries, and registered clients.
• Data Controller under Regulation (EU) 2016/679 (EU General Data Protection Regulation — GDPR) and the United Kingdom General Data Protection Regulation (UK GDPR / Data Protection Act 2018).
• Business / Commercial Data Vendor under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA — Cal. Civ. Code § 1798.100 et seq.) and corresponding United States state privacy statutes.
• Organization bound by the 10 Fair Information Principles under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec Law 25.
• APP Entity under Australia's Privacy Act 1988 (Cth) adhering to the 13 Australian Privacy Principles (APPs).

Our global headquarters are located at H 14, BL 7, Kankinara, Jagatdal, Bhatpara, West Bengal 743126, India. Inquiries regarding our data practices may be directed to our designated Privacy Office at info@techsupportleads.com.

2. Categories of Personal Data We Collect

We collect personal information directly when you communicate with us, automatically when you browse our website, and from verified business intelligence sources in our capacity as a B2B and B2C data vendor:

Sensitive Personal Data: Tech Support Leads does not knowingly collect, compile, or process sensitive personal data (such as religious beliefs, biometric data, genetic records, health conditions, or trade union membership).

3. Sources of Personal Data

We obtain personal information through three distinct, legally governed channels:

• Directly from You: When you complete our contact forms, schedule consultations, message our support via WhatsApp/Telegram, or submit a formal Data Subject Access Request.
• Automated Digital Technologies: Through HTTP cookies, local storage tokens, server access logs, and Cloudflare edge verification when navigating our website.
• Public & Commercial Intelligence Providers: Legally accessible corporate registers, commercial company directories, professional associations, and licensing agreements with verified global data partners subject to anti-spam compliance verification.

4. Purposes and Legal Bases for Processing

Under international data protection frameworks, including the GDPR (Article 6) and India's DPDP Act, every processing activity must rest upon an established legal foundation:

5. Cookies, Tracking Technologies & Consent Management

Cookies are small text data files placed on your computer, smartphone, or tablet when you browse websites. They are widely utilized by web services to remember your visits, protect authentication sessions, enhance navigation speed, and provide anonymous reporting insights.

Alongside standard HTTP cookies, our website employs HTML5 Local Storage and Session Storage. These browser-based storage technologies operate similarly to cookies but offer higher security, lower network overhead, and persistent retention directly on your local device without sending unnecessary tracking payloads over every HTTP request.

Categories of Cookies We Use

We classify all cookies and tracking mechanisms into four distinct functional tiers:

Comprehensive On-Site Cookie & Storage Audit Table

Below is an itemized inventory of all cookies and local storage tokens utilized on this website:

Google Consent Mode v2 & Technical Compliance

Our website is engineered with Google Consent Mode v2. By default, before user interaction, telemetry tags operate with denied states for analytics_storage, ad_storage, ad_user_data, and ad_personalization. Only upon an explicit affirmative action are corresponding tags unlocked.

We also support Global Privacy Control (GPC) signals. If your browser broadcasts a GPC header, non-essential analytics and advertising trackers remain disabled automatically.

How to Control Cookies in Your Web Browser

All major modern web browsers permit you to inspect, manage, restrict, or clear stored cookies and local storage directly:

Note: Completely disabling strictly necessary cookies in browser settings may prevent secure contact forms, Turnstile bot checks, and navigation menus from functioning properly.

6. Information Sharing, Disclosures & Sub-Processors

We do not sell, rent, or disclose personal data submitted through our website contact forms to third parties for their independent marketing. Personal information is only shared under the following strictly defined conditions:

• Authorized Service Providers & Sub-Processors: Trusted technology vendors bound by contractual data processing agreements (DPAs) that reflect GDPR Standard Contractual Clauses, including Cloudflare (DNS/WAF/security), Google (Google Analytics with IP masking), and secure enterprise SMTP providers.
• Corporate Clients of Lead Datasets: As part of our commercial B2B data licensing services, verified professional business contact data (name, company email, job title) is licensed to enterprise clients for legitimate B2B sales development and marketing outreach. All clients must warrant compliance with international telemarketing and anti-spam legislation.
• Legal & Regulatory Compliance: When mandated by court order, law enforcement investigation, or statutory authority (such as the Data Protection Board of India or court subpoenas).
• Business Transfers: In the event of a merger, acquisition, restructuring, or asset sale, data may be transferred subject to equivalent confidentiality commitments.

7. Cross-Border & International Data Transfers

Tech Support Leads operates globally with server and operational infrastructure located in India, the United States, and the European Union. Whenever personal data is transferred across international borders, we ensure adequate protection through recognized legal mechanisms:

• European Union & UK Transfers: Standard Contractual Clauses (SCCs) approved by the European Commission (Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum (IDTA) are executed with vendors and international clients.
• India DPDP Act Compliance: Data transfers outside India comply with Section 16 of the DPDP Act, transferring data only to territories not restricted by the Central Government of India.
• Technical Safeguards: Cross-border data flows are safeguarded with TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access control, and stringent confidentiality agreements.

8. Data Security and Retention Schedule

We maintain comprehensive technical and administrative security measures to protect personal data against accidental loss, unauthorized access, destruction, and disclosure:

• Security Controls: Full TLS 1.3 encryption for data in transit, AES-256 database encryption at rest, enterprise Cloudflare WAF protection, strict least-privilege administrative access, and regular vulnerability scanning.
• Customer Inquiry Retention: Inquiries submitted through our website contact forms are retained for up to 24 months from the date of last contact, after which records are permanently purged or anonymized unless required for tax or contractual defense.
• Commercial Lead Data: Commercial datasets are subject to routine quarterly verification and refresh cycles. Stale or disconnected records are scrubbed promptly. Records subject to verified opt-out or deletion requests are placed on a persistent global suppression list to prevent re-acquisition.

9. India Digital Personal Data Protection Act, 2023 (DPDP Act)

In full compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), Tech Support Leads operates with high standards of data stewardship:

• Grounds for Processing: Personal data is processed exclusively on the basis of consent (Section 6) or legitimate uses specified under Section 7 (such as voluntary provision of details for a requested quote or fulfilling contractual services).
• Right to Access Information (Section 11): Data Principals have the right to obtain a summary of their personal data being processed and the identities of third parties with whom it has been shared.
• Right to Correction & Erasure (Section 12): Data Principals may request correction of inaccurate data, completion of incomplete data, updating, or permanent erasure of personal data that is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal (Section 13): You have the right to register a grievance with our designated Grievance Officer, who will resolve inquiries within 30 days.
• Right to Nominate (Section 14): You have the right to nominate any other individual who, in the event of death or incapacity, shall exercise your rights under the DPDP Act.
• Right to Complain to the Data Protection Board of India (DPBI): If you are dissatisfied with our Grievance Officer's resolution or after exhausting grievance redressal, you may file a formal complaint with the Data Protection Board of India pursuant to Section 18 of the DPDP Act.

10. European Union (GDPR) & United Kingdom (UK GDPR)

For individuals residing within the European Economic Area (EEA) and the United Kingdom, our processing complies with the General Data Protection Regulation (Regulation (EU) 2016/679) and the UK Data Protection Act 2018 / UK GDPR:

• Right of Access (Art. 15): Request confirmation and a copy of your personal data processed by us.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten” — Art. 17): Request deletion of your data where processing is no longer necessary or based on withdrawn consent.
• Right to Restriction of Processing (Art. 18): Restrict how your data is used during dispute investigations.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object at any time, on grounds relating to your situation, to processing based on legitimate interests or direct marketing. Upon objection, direct marketing processing ceases immediately without fee.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local EU Supervisory Authority (e.g., CNIL in France, BfDI in Germany, DPC in Ireland) or the UK Information Commissioner's Office (ICO).

11. United States State Privacy Laws (CCPA / CPRA & State Statutes)

This section applies to residents of California, Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon, Utah, and other US states with comprehensive consumer privacy enactments:

• Right to Know & Access: Request disclosure of the specific pieces and categories of personal information collected, sources, business purposes, and third parties to whom data was disclosed or sold over the preceding 12 months.
• Right to Delete: Request permanent deletion of personal information collected directly from you, subject to legal defense exemptions.
• Right to Correct: Request correction of inaccurate personal records.
• Right to Opt-Out of Sale or Sharing (“Do Not Sell or Share My Personal Information”): You have the unconditional right to direct us not to sell or share your personal data. You may exercise this right at any time via our Privacy Request Portal.
• Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information as defined by California Civil Code § 1798.140.
• Right to Non-Discrimination: We will never deny services, charge different wholesale prices, or alter service quality because you exercised statutory privacy rights.

12. Canada: PIPEDA, Quebec Law 25, and CASL Compliance

Our practices adhere to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Law 25 (Act respecting the protection of personal information in the private sector), and Canada's Anti-Spam Legislation (CASL):

• We collect business contact information strictly for commercial communication purposes in accordance with Section 4.01 of PIPEDA.
• Under CASL, commercial electronic messages are dispatched only where valid express or implied consent exists, always including an unambiguous, one-click unsubscribe mechanism.
• Canadian individuals may request access to or correction of their personal data by contacting our Privacy Office.

13. Australia: Privacy Act 1988 & Australian Privacy Principles (APPs)

Tech Support Leads handles personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), alongside the Spam Act 2003 and Do Not Call Register Act 2006:

• Australian telemarketing lead datasets are scrubbed against the Australian Communications and Media Authority (ACMA) Do Not Call Register prior to client delivery.
• Australian residents may request access to, or correction of, personal information held by us under APP 12 and APP 13.
• If you are dissatisfied with our response to a complaint, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Other International Frameworks (Brazil, Singapore, Switzerland)

Our international operations are aligned with major global privacy statutes:

• Brazil (LGPD — Lei Geral de Proteção de Dados): Brazilian Data Subjects enjoy rights of access, anonymization, blocking, deletion, portability, and revocation of consent under Law No. 13.709/2018.
• Singapore (PDPA): Personal Data Protection Act compliance ensures data collection is transparent with purpose limitation and protection obligations honored.
• Switzerland (FADP): Swiss Federal Act on Data Protection standards are applied to Swiss residents, with cross-border protections matching EU GDPR adequacy decisions.

15. Children's Privacy Protections

Our website, digital marketing services, and commercial data products are exclusively designed for enterprise businesses and individuals aged 18 years or older. In compliance with Section 9 of the DPDP Act 2023 (India), the US Children's Online Privacy Protection Act (COPPA), and Article 8 of the GDPR, we do not knowingly solicit, collect, or process personal data from children under 18 years of age.

If you believe that a minor has provided us with personal data, please contact our Grievance Officer immediately at info@techsupportleads.com, and we will take prompt steps to verify and permanently delete such records.

16. How to Exercise Your Privacy Rights (DSAR Portal)

Whether you reside in India, the European Union, the United Kingdom, the United States, Canada, Australia, or elsewhere, you can exercise any of your statutory rights at zero cost through our integrated on-site portal or via direct communication:

You can also click here to open the formal request form at any time from anywhere on this page.

Statutory Response Timelines:

• DPDP Act (India): Grievances and rights requests addressed within 30 calendar days.
• GDPR / UK GDPR: Addressed within 30 calendar days (extendable by 60 days for complex requests with formal notification).
• CCPA / CPRA (USA): Acknowledged within 10 business days; full substantive response within 45 calendar days.
• PIPEDA (Canada) & Australia (Privacy Act): Addressed within 30 calendar days.

17. Statutory Grievance Officer & Data Protection Officer Contact Details

In accordance with Section 5(2) and Section 13 of the DPDP Act, 2023 (India), Articles 37–39 of the GDPR, and global accountability mandates, Tech Support Leads has appointed a designated Grievance Officer and Data Protection Officer:

We are committed to resolving any inquiries, concerns, or grievances amicably, transparently, and in strict accordance with the law.