Privacy policy

MNF INFOTECH is a proprietorship owned by Nancy Gopal Savaliya, registered in Surat, Gujarat, India. We are the party that decides why and how personal information submitted through this website is used, and we are the party you should contact about it.

Trade name

MNF INFOTECH

Proprietor

Nancy Gopal Savaliya. The business is a proprietorship, not a company or an LLP, so it has no corporate identity number.

GSTIN

24HQXPB6184C1ZK (Regular registration, registered 03 September 2026)

Registered and principal place of business

1st Floor, Plot No 37, Marutidham Bunglows, Gurukul Road, Near ABC Circle Sarthana, Nana Varachha, Surat, Gujarat 395006, India

Contact for privacy questions

contact@mnfinfotech.com

This policy covers mnfinfotech.com and the enquiry that you may choose to send us through it. It does not cover the separate accounts, platforms or systems belonging to a client that we may work in under a signed engagement — in that situation the client decides how their data is handled and we act on their instructions.

There are only two ways this website receives information about you: you type it into the enquiry form, or your browser generates it automatically by requesting a page.

What you send us through the enquiry form

• Your name, so we know who we are replying to
• Your work email address, which is where our reply goes
• Your organisation, where you choose to give it
• A telephone number, only if you choose to type one in — the field is optional and we do not require it
• The service you are interested in, and an approximate indication of the size or shape of the requirement
• The message you write, in your own words
• Your confirmation that you are asking us to contact you about your enquiry

What your browser sends automatically

Like any website, this one is served by a hosting provider that keeps standard request logs for reliability, diagnostics and abuse prevention. Those logs can include your IP address, your browser and device user agent string, the URL you requested and the date and time of the request. We do not use these logs to build a profile of you, and we do not attempt to identify individual visitors from them.

It is as useful to know what is absent as what is present, so this list is deliberately specific.

• No user accounts, logins, profiles or passwords — the site has none
• No payments and no card or bank details are taken on this website
• No cookies are set by this site at present, and nothing is written to your browser's local storage to track you
• No analytics product, tag manager, advertising pixel or remarketing tag is currently installed
• No special-category information — we do not ask for and do not want details of health, religion, caste, political opinions, biometrics or anything similar
• No purchase of contact lists, and no enrichment of your enquiry against third-party data brokers

Because the site sets no cookies of its own, there is no consent banner to dismiss. If we ever add analytics or an advertising tag, we will update this policy and the cookie policy to say exactly what was added, and where consent is required before such a tag runs, we will ask for it first rather than afterwards.

The practical answer is the honest one: you contacted us about our services, and we cannot answer you without holding what you sent. We use enquiry details to understand what you are asking for, to reply to you, to prepare a proposal if one is wanted, and to keep an ordinary business record of the exchange. We rely on server logs to keep the site running and to protect it from abuse.

We do not use your enquiry to send you marketing you did not ask for. We do not run a newsletter, and we do not add enquiry addresses to a mailing programme.

The site is statically rendered and has a single dynamic endpoint, which receives the enquiry form. That endpoint validates the submission on the server, applies a hidden honeypot field and simple in-memory rate limiting to filter out automated abuse, and then forwards the message by email to contact@mnfinfotech.com through a third-party transactional email provider.

• Hosting provider (Vercel) — serves the pages, runs the enquiry endpoint and keeps standard server request logs
• Transactional email provider (Resend) — delivers the enquiry from the site to our inbox
• Our own email provider — holds the resulting message in our business mailbox, in the same way as any other email you might send us

Each of these is engaged as a processor: its role, under the terms on which we use it, is to deliver its service to us rather than to use your information for its own independent purposes. We do not sell, rent or trade personal information, and we do not share your enquiry with any other organisation unless you ask us to, or unless we are required to disclose it by law or by a lawful order from a competent authority.

We keep enquiry emails for as long as they are needed for the enquiry itself, for any engagement that follows from it, and for our ordinary business record-keeping and tax obligations. We do not keep them longer than necessary for those purposes, and we do not stockpile enquiries in the hope of finding a use for them later.

Server request logs are held by our hosting provider under its own operational retention arrangements, which that provider sets and we do not control. They are diagnostic records rather than an archive we maintain: we do not copy them into our own records, we do not link them to enquiry submissions, and we cannot state a retention period for them as though it were ours to set.

If you would prefer that we delete an enquiry sooner, email us and say so. Where nothing else requires us to keep it, we will remove it from our records and confirm that we have done so.

We are based in Surat, Gujarat, India, and that is where our business records are managed. The hosting and email providers described above operate global infrastructure, so a request you make or an email delivered on our behalf may be handled on servers located outside India.

This is a normal consequence of using established internet infrastructure rather than a separate decision about your data. Where we choose a processor, we look for one that offers HTTPS in transit, sensible access controls and clear published terms about how it handles the customer data it holds. Sending us an enquiry means accepting that it will travel through this kind of infrastructure to reach us.

We keep the surface area small, which is the most effective protection available to a site of this kind. These are the measures actually in place — not aspirations, and not a claim to any certification, audit or accreditation, which we neither hold nor imply.

• The whole site is served over HTTPS, so form submissions are encrypted in transit
• Standard security headers are set on responses
• Provider credentials and API keys are held as environment variables on the server, never in the published code or in the browser
• Enquiries are not written to any public store, object bucket or shared document
• Access to the mailbox that receives enquiries rests with the proprietor and anyone she has asked to help answer them, and with nobody else
• Submissions are validated on the server and rate limited per connection, which blunts automated abuse of the form — it is a sensible obstacle, not a claim to have defeated a determined attacker

No method of transmission or storage is perfectly secure, and we will not pretend otherwise. If we become aware of a breach that affects information you sent us and creates a real risk to you, we will act to contain it and tell affected people what happened and what we are doing about it.

You can ask us what we hold about you, ask us to correct something that is wrong, ask us to delete it, or withdraw a consent you previously gave. Because we hold very little and it lives in an email inbox, most of these requests are simple for us to action.

1. 01Email contact@mnfinfotech.com from the address you used to contact us, or tell us which address the enquiry came from
2. 02Say what you want — a copy of what we hold, a correction, deletion, or an end to any further contact
3. 03We will acknowledge the request and act on it promptly, and we will tell you if anything prevents us from doing exactly what you asked and why

We will not charge you for a reasonable request and we will not make you create an account to make one. We may need to ask a question to confirm that the request genuinely comes from you, so that we do not disclose someone's information to the wrong person.

Where you are in a jurisdiction that grants you specific statutory data rights, we will consider and respond to a request made to that email address on its merits. We make no claim to be certified or formally registered under any particular foreign data protection regime.

This is a business-to-business website about product engineering and digital growth services. It is not directed at children, we do not knowingly collect information from children, and we have no reason to think a child would have any use for the enquiry form. If you believe a child has sent us information through this site, email us and we will delete it.

Some pages link to external websites — platform documentation, published policies and similar references. Those sites are operated by other organisations under their own privacy practices, which we do not control and cannot vouch for. A link is a pointer to something we found useful; it is not an endorsement, and it does not mean the two organisations are connected. Read the privacy policy of any site you go on to use.

We will update this policy when what the site does changes — for example if we add analytics, introduce a cookie, or begin storing enquiries somewhere other than an email inbox. The revision date shown with this document tells you when it was last changed, and the current version is always the one published here.

We will not quietly broaden what we do with information you already sent us. If a change materially affects how we handle an enquiry you have already made, we will say so.