VANAVYA TECH Logo
Governance, Data Privacy & Trust

Privacy Policy

Our principles and statutory practices governing data collection, lawful processing, encryption safeguards, and user privacy under the Digital Personal Data Protection Act (DPDPA 2023), GDPR, and international frameworks.

Effective Date: January 1, 2025•Last Updated: October 2025• DPDPA & GDPR Compliant
Executive Summary & Privacy Commitment

At Vanavya Consulting Pvt Ltd (operating as VANAVYA TECH), privacy is built into our engineering lifecycle. We do not sell personal data, we minimize collection strictly to what is necessary for service delivery, and we provide transparent controls under India's Digital Personal Data Protection Act (DPDPA 2023) and global benchmarks.

01

1. INTRODUCTION

Vanavya Consulting Pvt Ltd (hereinafter referred to as “Company”, “VANAVYA TECH”, “we”, “our”, or “us”) recognizes the foundational importance of protecting personal data in modern interconnected digital environments. We are steadfastly committed to maintaining the highest benchmarks of data privacy, confidentiality, and institutional transparency.

This Privacy Policy delineates the principles, security standards, and statutory protocols governing the collection, processing, storage, disclosure, and protection of personal and commercial data when you interact with our digital properties, software solutions, cloud engineering workflows, advisory engagements, and enterprise platforms.

We understand that our corporate clients, end-users, and website visitors (“you”, “your”) entrust us with valuable personal and business data. Our governance framework is architected to comply rigorously with applicable data protection statutes, including the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (EU GDPR), and relevant international norms. By interacting with our services, you acknowledge that your information will be processed in accordance with this Policy.

02

2. SCOPE & APPLICABILITY

This Privacy Policy applies comprehensively to all categories of personal and operational information gathered or processed by VANAVYA TECH in connection with:

  • Website Visitors: Individuals navigating our digital platform (vanavyatech.com), reviewing publications, or submitting contact inquiries.
  • Clients & Prospective Partners: Corporate organizations and authorized representatives commissioning software engineering, cloud architecture, AI workflows, or consulting services.
  • End-Users of Client Solutions: Where VANAVYA TECH architects custom platforms or applications, this Policy governs how data is handled during development, staging, testing, and managed support.
  • Contractors & Technical Vendors: Ecosystem partners collaborating on technical delivery, infrastructure maintenance, or operational workflows.

This Policy does not apply to third-party websites, applications, or external services that may link to or be referenced from our platform. We encourage you to independently inspect the privacy statements of those external services.

03

3. INFORMATION WE COLLECT

We collect information through transparent direct interactions, automated system telemetry, and authorized integrations. Categories of data processed include:

Personal Identifiers

Full legal name, professional email address, telephone number, billing details, and enterprise designation.

Business & Project Information

Company registration info, Statements of Work (SOW), technical specifications, repository access, and contractual documentation.

Technical & Diagnostic Telemetry

IP addresses, browser type, device fingerprints, operating system, geolocation headers, and audit logs.

Analytical & Preference Data

Session duration, interaction patterns, feature usage, and privacy preferences gathered via privacy-compliant analytics.

Statutory Compliance Reference

• Section 5 of DPDPA, 2023: Notice is provided at or before data collection detailing categories and exact processing intents.

• GDPR Article 13: Comprehensive identity disclosure of data controllers, lawful purpose, and subject rights.

04

4. PURPOSE OF PROCESSING

VANAVYA TECH processes personal data exclusively for verifiable, legitimate, and lawful purposes:

  • Engineering & Service Delivery: To architect, build, deploy, host, and maintain software, web platforms, AI applications, and cloud systems.
  • Direct Client Communication: To share milestone deliverables, respond to inquiries, and provide ongoing technical support.
  • Contractual Execution & Billing: To administer Statements of Work, invoicing, tax compliance, and commercial accounts.
  • Infrastructure Security: To detect malicious activities, prevent distributed denial of service, safeguard data integrity, and protect system infrastructure.
  • Regulatory & Statutory Compliance: To satisfy statutory filings, assist lawful governmental inquiries, and protect legal rights.

Statutory Compliance Reference

• Section 7, DPDPA 2023: Mandates that processing be confined strictly to declared lawful purposes with explicit authorization.

• Article 6, GDPR: Requires legitimate interest balancing tests and contractual necessity benchmarks.

06

6. DATA SHARING & DISCLOSURE

VANAVYA TECH does not sell, lease, monetize, or trade your personal data under any circumstances.

Disclosures are strictly limited to the following regulated contexts:

  • Vetted Sub-processors & Cloud Partners: Tier-1 cloud infrastructure providers (e.g., AWS, Azure, Google Cloud), managed database providers, and payment processors bound by stringent Data Protection Agreements (DPAs).
  • Statutory & Legal Requirements: When compelled by valid judicial decrees, subpoenas, regulatory investigations, or lawful orders issued by competent authorities in India or designated jurisdictions.
  • Corporate Reorganization: In the event of a merger, acquisition, or restructuring, subject to contractual covenants preserving the terms of this Policy.
07

7. DATA SECURITY MEASURES

We implement multi-layered technical, administrative, and physical security safeguards to shield your data against unauthorized access, loss, or destruction:

End-to-End Encryption

TLS 1.3 protocol for all data in transit and AES-256 bit encryption for persistent data at rest.

Zero-Trust & Access Controls

Role-based access control (RBAC), multi-factor authentication (MFA), and least-privilege policies.

Continuous Audits & Vulnerability Testing

Periodic penetration testing, dynamic code analysis, dependency reviews, and automated patch management.

Employee Confidentiality & NDAs

Strict non-disclosure agreements, ongoing data privacy training, and internal security guidelines.

08

8. DATA RETENTION & DISPOSAL

VANAVYA TECH preserves personal and commercial data only for as long as necessary to accomplish the intended business objectives, honor contractual obligations, and conform with statutory tax or accounting rules.

Upon the expiration of the retention window or upon a verified erasure request, digital records are either irreversibly purged through cryptographic wipe routines or permanently anonymized for historical analytical aggregates.

09

9. YOUR RIGHTS & DATA AUTONOMY

Under the Digital Personal Data Protection Act (DPDPA 2023) and GDPR, you possess comprehensive statutory rights over your data:

Right to Access & Confirmation

Request a clear summary of personal data held, processing history, and identities of third parties with whom data was shared.

Right to Correction & Rectification

Promptly rectify any inaccurate, obsolete, or incomplete personal data records.

Right to Erasure (“Right to be Forgotten”)

Demand complete removal of your data when processing is no longer necessary or when consent has been withdrawn, subject to statutory limits.

Right to Data Portability

Obtain your data in a structured, commonly used, and machine-readable format for transfer to another provider.

Right to Withdraw Consent & Grievance Redressal

Withdraw consent at any time without punitive consequences, and direct grievances to our designated Grievance Officer.

10

10. INTERNATIONAL DATA TRANSFERS

As an engineering firm collaborating across global ecosystems, VANAVYA TECH may transfer and process data in secure cloud server regions outside of India or the European Economic Area (EEA).

All cross-border transfers strictly comply with Section 16 of the DPDPA 2023 and execute under Standard Contractual Clauses (SCCs) approved under GDPR, ensuring equivalent data protection safeguards worldwide.

11

11. CHILDREN'S PRIVACY

Our services are engineered for enterprise institutions, professionals, and adult users. We do not intentionally solicit or process data belonging to minors under 18 years of age without verifiable parental consent in compliance with Section 10 of DPDPA 2023. If discovered, such records are expunged immediately.

12

12. GRIEVANCE REDRESSAL MECHANISM

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023, VANAVYA TECH has designated an institutional Grievance Officer responsible for expeditious resolution of privacy-related grievances:

Grievance & Privacy Officer

Vanavya Consulting Pvt Ltd

DPDPA Appointed
Response timeframe: Acknowledged within 24 hoursResolution: Within 30 days
13

13. POLICY UPDATES & NOTICES

We may periodically revise this Privacy Policy to reflect changing legal requirements, judicial interpretations, or architectural advancements in our platform. All updates are posted with an updated “Last Updated” date. Material adjustments impacting data handling rights will be communicated through direct email notifications or prominent website announcements.

14

14. CONTACT INFORMATION

For any questions regarding this Privacy Policy, your legal rights, or enterprise data protection agreements, please reach out to our legal and data protection team:

Vanavya Consulting Pvt Ltd

Corporate Data Privacy & Compliance Office

Telephone+91 94211 91111
Official Emailsupport@vanavyatech.com
Corporate Office

Dayanand Colony, Lajpat Nagar Part IV, New Delhi, 110024, India

Open in Google MapsSubmit a Formal Inquiry