Legal

Privacy Policy

Effective date: [DD Month YYYY] · Last updated: [DD Month YYYY]

This Privacy Policy is a template drafted with reference to the Information Technology Act, 2000; the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"); and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Placeholders (shown like [this]) must be completed with your actual details, and this document should be reviewed by a qualified advocate — particularly as DPDP Act rules and enforcement timelines are still being notified — before publication.

Note on cross-border structure: Vercetti's Head Office is stated as London, United Kingdom, while this Policy is framed primarily around Indian data protection law because it targets customers in India. If your business is registered in, or processes data from, the UK/EEA, UK GDPR and/or the EU GDPR may independently apply to you as a data controller, in addition to the DPDP Act. An advocate should confirm which regime(s) apply based on your actual incorporation and customer base.

Contents

  1. Introduction
  2. Information we collect
  3. How we collect information
  4. Purpose & legal basis for processing
  5. Disclosure of information
  6. Cookies & tracking
  7. Data storage & retention
  8. Data security
  9. Your rights
  10. Children's privacy
  11. Third-party platforms
  12. Cross-border transfer
  13. Grievance officer
  14. Changes to this policy
  15. Contact us

01Introduction

Vercetti Tech Solutions ("Vercetti", "we", "us", "our") is committed to protecting the privacy of visitors to our website [www.vercettitech.com] (the "Website") and individuals who contact us regarding our services (collectively, "you", "your"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices and rights available to you, in accordance with Applicable Law, including the DPDP Act and the SPDI Rules.

By using the Website, submitting our Customer Response Hub form, or emailing us, you consent to the collection and processing of your personal data as described in this Policy.

02Information We Collect

(a) Information you provide to us

  • Name, email address, and phone number
  • Company/organisation name and designation, where applicable
  • Details of the service you require and any project-related information you choose to share
  • Any documents, files, or content you send us to enable us to scope or deliver Services
  • Correspondence records when you contact us via email or our Customer Response Hub

(b) Information collected automatically

  • Log data such as IP address, browser type, device information, and pages visited on the Website, collected through standard web-server logs and, where used, analytics tools
  • Cookies and similar technologies, as described in Section 6 below

We do not intentionally collect sensitive personal data or information (such as financial information, health data, biometric data, or passwords) through the Website or our Customer Response Hub. Please avoid sharing such sensitive information with us unless specifically requested and necessary for delivering a Service.

03How We Collect Information

We collect personal data when you: (a) fill out our Customer Response Hub form (hosted on Google Forms); (b) email us; or (c) otherwise voluntarily provide it to us in the course of a Service engagement.

04Purpose & Legal Basis for Processing

We process your personal data on the basis of your consent (given by voluntarily submitting your details) and, where applicable, for the performance of a contract with you, for the following purposes:

  • To respond to your enquiries and communicate with you about our Services
  • To prepare quotations, proposals, and deliver contracted Services
  • To send service-related updates, invoices, and, where you have opted in, promotional communications
  • To improve the Website and our Services
  • To comply with legal obligations, including under tax, accounting, and consumer protection laws
  • To detect, prevent, and address fraud, security, or technical issues

05Disclosure of Information

We do not sell or rent your personal data. We may share your information with:

  • Service providers who assist us in operating the Website or delivering Services (for example, hosting providers, Google LLC for form collection, or payment processors), bound by confidentiality obligations
  • Professional advisors such as accountants or legal counsel, where necessary
  • Government authorities or law enforcement, where required under Applicable Law, a court order, or a lawful request by a government agency
  • A successor entity in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections

06Cookies & Tracking Technologies

The Website may use cookies and similar technologies to remember preferences and understand how visitors use the Website. You can control or disable cookies through your browser settings; however, doing so may affect certain features of the Website. We do not currently use cookies for targeted third-party advertising.

07Data Storage & Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, accounting, or reporting obligations, or to resolve disputes. Enquiry details of prospects who do not proceed with a Service engagement will generally be retained for up to [12] months, after which they will be deleted or anonymised, unless a longer period is required by Applicable Law or you have asked us to retain your information for future opportunities.

08Data Security

We implement reasonable security practices and procedures, as contemplated under the SPDI Rules, including access controls and secure handling of data, to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

09Your Rights

Subject to Applicable Law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Withdraw consent to processing at any time, without affecting the lawfulness of processing before withdrawal
  • Request erasure of your personal data, subject to our legal retention obligations
  • Grievance redressal, as described in Section 13 below
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity, in accordance with the DPDP Act

To exercise any of these rights, please contact us using the details in Section 15. We will respond within a reasonable timeframe and in accordance with Applicable Law.

10Children's Privacy

Our Website and Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without verifiable parental/guardian consent, we will take steps to delete such data.

11Third-Party Platforms

Our Customer Response Hub is hosted on Google Forms (Google LLC), which is the platform we use to collect and organise all enquiries, quote requests, feedback, and support queries. Information you submit through this platform is also subject to Google's privacy policy. We encourage you to review it. Vercetti is not responsible for the data-handling practices of this third-party platform.

12Cross-Border Transfer

Vercetti's Head Office is located in London, United Kingdom, and we also use third-party platforms such as Google Forms. As a result, your personal data may be processed or stored on servers located outside India, including in the United Kingdom. Where such transfers occur, we rely on the safeguards implemented by these established service providers and, to the extent required under the DPDP Act, such transfers will be made only to jurisdictions not restricted by the Central Government. If you are located in the UK or EEA, you may additionally have rights under UK GDPR or EU GDPR, as applicable.

13Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, any grievances regarding the processing of your personal data may be addressed to:

Grievance Officer / Data Protection Contact: [Full Name]
Email: Vercetti.techsolutions@gmail.com
Head Office: London, United Kingdom
Registered Address: [complete registered address]

You may also have the right to file a complaint with the Data Protection Board of India, once constituted and operative under the DPDP Act, if you are not satisfied with our response.

14Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or Applicable Law. The "Last updated" date at the top of this page indicates when it was last revised. We encourage you to review this Policy periodically.

15Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Vercetti Tech Solutions
Email: Vercetti.techsolutions@gmail.com
Customer Response Hub: forms.gle/yzskSFsCtRci8vGB8
Head Office: London, United Kingdom
Registered Address: [complete registered address]