Privacy Policy

India Nationwide Notice | Last updated: October 4, 2026

This Privacy Policy explains how MaxX Holdings Inc. ("MaxX," "we," "us," or "our") handles personal data in connection with this website, contact form, and support chat for individuals in India. It applies to people in India who visit or use these services, wherever in India they access them. Other local privacy laws may also apply to people outside India.

1. Who handles your data

MaxX Holdings Inc. determines the purposes for which information submitted through its website contact and support channels is handled. Where India's Digital Personal Data Protection Act, 2023 (DPDP Act) applies, MaxX Holdings Inc. acts as the Data Fiduciary for that processing, subject to the Act and applicable rules. The website is operated by a company whose listed office address is in the United States; certain providers or systems may also process information outside India.

2. Personal data we collect

The information depends on how you interact with the website:

• Contact enquiries: name, email address, phone number, message, and the Turnstile verification response. The contact form sends valid enquiries to our designated mailbox after verification.
• Support chat: name, email address, phone number, concern, and chat transcript. When a chat is ended, the site may send these details to our support system and email the transcript to our support recipient.
• Technical and device information: browser user agent, platform, language, time zone, screen dimensions, IP address, and, where supplied by the network provider, country, city, and region information.
• Location: browser latitude, longitude, and accuracy are requested only when you select the location-sharing option in the support pre-chat form and grant permission through your browser. You can decline either step and still use other site features.
• Hosting records: the hosting provider may record IP address, requested pages, timestamps, referrer, and technical or security events in server logs.

The public website does not currently provide user account registration or online card-payment checkout. Do not send passwords, payment-card details, government identification numbers, or other sensitive information in a message unless we specifically request it through an appropriate secure channel.

3. Sources of information

We receive information directly from you when you submit a contact enquiry or use the support chat. Technical information may be generated automatically by your browser, the website host, Cloudflare Turnstile, or other third-party services loaded by the page. If you choose to share browser location, it comes from your device's location service. We do not intentionally purchase personal-data lists or obtain profile data from data brokers for this website.

4. Purposes and lawful processing

We use personal data as needed to respond to enquiries, assess and route support requests, communicate about a requested service, maintain chat and lead records, protect contact channels from automated abuse, secure and troubleshoot the website, and meet legal obligations. Where the DPDP Act applies, processing is based on consent or another permitted ground under that Act, including applicable legitimate uses. We request browser-location permission separately; you may decline or withdraw that permission through your device settings or by contacting us.

5. How information is shared

We do not sell personal data. Information may be shared only as reasonably needed with:

• Website hosting, database, email, and infrastructure providers that operate or secure the website and deliver enquiries or support records.
• Cloudflare, to perform Turnstile verification and, where enabled by the hosting configuration, provide network security signals.
• Google, when your browser loads the Google Maps embed or Google Fonts.
• Unsplash, when your browser loads images hosted on Unsplash.
• Government, regulators, courts, or law-enforcement authorities where disclosure is required or permitted by law, or where reasonably necessary to protect rights and safety.
• A successor or transaction party if the business is involved in a merger, acquisition, financing, or restructuring, subject to appropriate safeguards and applicable law.

Service providers may process information on our behalf under their applicable terms and privacy notices. Their own services may also be governed by their separate policies.

6. Processing and transfers outside India

MaxX Holdings Inc. lists its office in the United States, and its service providers may operate servers or support teams in other countries. Personal data may therefore be transferred to or processed outside India for the purposes described in this policy. Any such transfer will be subject to restrictions, safeguards, or other requirements that apply under Indian law, including restrictions notified under the DPDP Act. Contact us for information about a particular processing activity.

7. Cookies and similar technologies

The site uses Cloudflare Turnstile for contact-form security, a Google Maps embed, Google Fonts, and remotely hosted Unsplash images. These providers may receive technical connection information and may use cookies or similar technologies under their own policies. The website code does not intentionally set first-party analytics or advertising cookies. See our Cookies Policy for service details and ways to manage browser cookies.

8. Security

We use reasonable technical, administrative, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These may include access restrictions, secure hosting configurations, and protections provided by service vendors. No internet transmission or storage system can be guaranteed to be completely secure.

9. Retention

Contact enquiries are sent to the designated business mailbox. Support-chat leads, transcripts, and associated metadata may be stored in the support database and emailed to the support recipient. We retain these records for as long as reasonably necessary to respond to and manage the request, maintain business and security records, resolve disputes, and meet legal obligations. The current code does not specify an automatic deletion period for chat leads; records should be reviewed and deleted or de-identified when they are no longer required, unless retention is legally necessary.

10. Your rights in India

Where the DPDP Act applies, you may have the right to request information about personal data being processed, seek correction or completion of inaccurate or incomplete data, request erasure where permitted, withdraw consent, use the grievance-redressal process, and nominate another person to exercise rights in circumstances allowed by law. These rights are subject to statutory conditions and exceptions. You may also have additional rights under other laws that apply to you.

To make a request, email the Privacy and Grievance Contact below with the request type and the email or phone number associated with your enquiry. We may request reasonable information to verify identity and will respond within the period required by applicable law. Withdrawal of consent does not affect processing that lawfully occurred before withdrawal or processing that may continue under another permitted legal ground.

11. Children's data

The website and support services are not directed to children. Where the DPDP Act applies, a child is generally an individual under 18 years of age. We do not knowingly seek to process children's personal data without verifiable parental or lawful guardian consent where required, and we do not knowingly conduct prohibited tracking, behavioural monitoring, or targeted advertising directed at children. A parent or guardian may contact us to raise a concern or request review or erasure, subject to applicable law.

12. Changes to this policy

We may update this policy when our services, data practices, or legal obligations change. The current version and its last-updated date will be posted on this page. Where a material change requires notice or consent under applicable law, we will provide that notice or seek consent as required.

13. Contact and grievance redressal

For privacy requests, questions, or grievances, contact the Privacy and Grievance Contact at info@maxxholdingsinc.us.

If applicable law requires a designated Grievance Officer or additional particulars, those details should be published here.