Privacy Policy

Sarvasv Technologies Private Limited ("Sarvasv", "we", "us", or "our") is committed to protecting the privacy and personal data of visitors to our website sarvasv.in (the "Website") and our clients. This Privacy Policy describes how we collect, use, disclose, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian data protection laws.

By using our Website or engaging our services, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We may collect the following personal data when you voluntarily provide it:

• Contact information: Name, email address, phone number, and company/organization details when you submit inquiries, fill out contact forms, or engage our services.
• Project information: Details about your project requirements, business goals, timelines, and technical specifications shared during consultations or engagements.
• Business information: Billing address, GSTIN, and other information required for invoicing and statutory compliance.
• Communications: Records of correspondence including emails, messages, and meeting notes.

1.2 Information Collected Automatically

When you visit our Website, we may automatically collect:

• Usage data: IP address, browser type and version, device information, operating system, referring URLs, pages visited, and time spent on pages.
• Analytics data: Aggregate and anonymized data about website traffic and user behavior collected through Google Analytics.
• Cookie data: Cookies and similar technologies used to remember preferences and understand how you use our Website.

2. How We Use Your Information

We use the personal data we collect for the following purposes:

• Responding to inquiries: To answer your questions, provide information about our services, and schedule consultations.
• Providing services: To deliver consulting, product development, and SaaS development services as agreed in Statements of Work.
• Billing and invoicing: To generate invoices, process payments, and maintain financial records as required by Indian tax laws.
• Communication: To send project updates, deliverables, and service-related notifications.
• Website improvement: To analyze usage patterns and improve the content, functionality, and performance of our Website.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, and to protect our rights and property.
• Marketing: To send occasional updates about our services. You may opt out at any time.

3. Legal Basis for Processing

We process personal data under the following lawful bases as defined by the DPDPA:

• Consent: When you voluntarily provide personal data through forms, inquiries, or engagements.
• Contractual necessity: To fulfill obligations under Statements of Work and service agreements.
• Legal compliance: To meet requirements under Indian tax, corporate, and data protection laws.
• Legitimate interests: To improve our services, maintain security, and prevent fraud.

4. Cookies & Tracking Technologies

Our Website uses cookies and similar technologies to enhance your browsing experience and analyze website traffic. We use the following types of cookies:

• Essential cookies: Required for the basic functionality of the Website.
• Analytics cookies: Google Analytics cookies that help us understand how visitors interact with our Website. These cookies collect anonymized data.
• Preference cookies: Remember your settings and preferences for a better experience.

You can control and manage cookies through your browser settings. Disabling cookies may affect some features of the Website. We do not use cookies for targeted advertising.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your personal data in the following circumstances:

• Service providers: Third-party providers who assist us in delivering services, such as cloud hosting (AWS, GCP, Azure), email services, and payment processors. These providers are bound by confidentiality obligations.
• Partner brands: For digital branding and online presence services, we may share relevant project information with our partner brand, pagr.in, to facilitate service delivery.
• Legal compliance: When required by law, court order, or government authority, or to protect our legal rights and interests.
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred as part of the transaction, subject to applicable data protection laws.

6. Data Security

We implement industry-standard security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Zero-Trust architecture principles
• Employee training on data protection and confidentiality
• Secure data storage on cloud platforms with enterprise-grade security

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach, we will notify affected individuals and relevant authorities as required by the DPDPA.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active engagement data: Retained for the duration of the engagement plus 7 years for legal, tax, and audit compliance.
• Inquiry data: Retained for up to 2 years from the last interaction, unless an engagement is initiated.
• Website analytics data: Anonymized and aggregated data retained for up to 26 months.
• Cookie data: Retained for the lifespan of the cookie, up to a maximum of 2 years.

Upon expiry of the retention period, personal data is securely deleted or anonymized.

8. Your Rights Under DPDPA

As a data principal under the DPDPA, you have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to grievance redressal: You may file a complaint if you believe your data protection rights have been violated.
• Right to withdraw consent: You may withdraw consent for processing personal data at any time, subject to contractual obligations.
• Right to nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact us at [email protected] or call +91 87429 56111.

9. Children's Privacy

Our Website and services are intended for businesses and professionals. We do not knowingly collect personal data from children under the age of 18. If you believe that a child has provided us with personal data, please contact us, and we will take steps to delete such data.

10. International Data Transfers

Your personal data may be processed on servers located outside India, as our cloud infrastructure providers (AWS, Google Cloud, Azure) may have data centers in multiple countries. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

11. Third-Party Links

Our Website may contain links to third-party websites, including our partner brand pagr.in. We are not responsible for the privacy practices or content of these third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Grievance Officer

In compliance with the DPDPA, we have designated a Grievance Officer to handle data protection related complaints and queries:

We will acknowledge receipt of your grievance within 24 (twenty-four) hours and strive to resolve it within 30 (thirty) days.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Updated versions will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

14. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data:

• Sarvasv Technologies Private Limited
• 62, Rashi Apartments, Plot 3, Sector 7, Phase-I, Dwarka, New Delhi 110075, India
• Phone: +91 87429 56111
• Email: [email protected]
• Business Hours: 10:00 AM to 6:00 PM IST, Monday to Friday (excluding gazetted and national holidays)
• GSTIN: 07AANCS0402J1ZG