Loading your experience...
Loading your experience...
This Privacy Policy explains how Verveo Solutions Private Limited ("Verveo," "we," "us," or "our"), and its affiliates collect, use, disclose, and protect your personal data when you visit our website (the "Site"), submit information to us through any web form on our Site, or interact with our services.
We are a digital solutions company based in India, providing services globally. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with applicable data protection laws globally. These laws include, but are not limited to, India's Digital Personal Data Protection Act (DPDP Act), Europe's General Data Protection Regulation (GDPR), and various U.S. state privacy laws, including the California Consumer Privacy Act (CCPA) as amended.
For the purposes of the GDPR, Verveo is the Data Controller. For the purposes of the DPDP Act, Verveo is the Data Fiduciary.
This policy applies to website visitors, individuals who submit information via our website's web forms, and data collected in the course of providing our services.
We collect personal data in the following ways:
We collect personal data that you voluntarily provide to us, such as when you complete and submit a form on our Site. This information includes:
When you visit our Site, we may automatically collect certain information from your device and web browser. This data includes:
We collect much of this Usage Data through cookies and similar technologies. For a detailed explanation of what we use and how you can manage your preferences, please see our Cookie Policy page.
We use your personal data only for specified, explicit, and legitimate purposes. For each purpose, we rely on a specific legal basis.
• To Respond to Your Inquiries: We use the data from our web forms (like your name, email, and message) to directly respond to your questions and requests.
• Legal Basis (GDPR/DPDP): Our legitimate interest to respond to your communication, or your deemed consent by voluntarily providing the information for this purpose (DPDP Act).
• To Provide and Manage Our Services: We use client contact information to deliver project updates, manage accounts, and provide support.
• Legal Basis (GDPR/DPDP): Performance of a contract with you or your company.
• For Marketing and Communications: We may use your email address to send you newsletters, service updates, or promotional materials.
• Legal Basis (GDPR/DPDP): Your explicit, affirmative consent. We will only send you marketing materials if you have actively opted-in (e.g., by checking an optional, unchecked box on our contact form). You can withdraw this consent at any time.
• For Analytics and Website Improvement: We use aggregated Usage Data to understand how users interact with our Site, identify areas for improvement, and enhance user experience.
• Legal Basis (GDPR/DPDP): Your consent (for non-essential cookies) or our legitimate interest in maintaining and improving our website's functionality.
• For Security and Fraud Prevention: We use technical data like IP addresses to monitor for malicious activity, prevent security breaches, and protect our Site.
• Legal Basis (GDPR/DPDP): Our legitimate interest in securing our network and services.
Under the CCPA, these are our "business or commercial purposes" for collecting personal information.
We do not sell your personal information in the traditional sense of the word. However, we may share your data with trusted third parties in the following circumstances:
We engage third-party companies to perform services on our behalf. These "Data Processors" are contractually obligated (via Data Processing Agreements, or DPAs) to protect your data and only process it according to our instructions.
Categories of these recipients include:
Various U.S. state privacy laws have broad definitions for the "sale" of data, "sharing" of data, or using data for "targeted advertising." The use of certain third-party analytics or advertising technologies (like cookies from Google or Meta) on our Site may be considered "sharing" or "targeted advertising" under these laws.
You have the right to opt out of these activities. We disclose this activity and provide you with the right to opt out via our Cookie Policy page and our U.S. Privacy Choices page.
We may disclose your personal data if we are required to do so by law or in the good faith belief that such action is necessary to:
We are based in India, and your personal data is primarily processed and stored on secure servers located in India.
For Individuals in the EEA, UK, and Switzerland: If you are in the European Economic Area (EEA), the UK, or Switzerland, your personal data will be transferred to India, a country that has not received an "adequacy decision." We rely on legal safeguards such as the Standard Contractual Clauses (SCCs) to protect your data. As required, we also supplement these contracts with Transfer Impact Assessments (TIAs) and additional security measures (like encryption) to ensure your data is afforded a level of protection essentially equivalent to that provided in your home jurisdiction.
For Individuals in India: In accordance with the DPDP Act, we may transfer your personal data for processing to countries outside India, provided that such transfers are not to a country or territory restricted by the Indian Central Government.
We are committed to providing you with rights over your personal data. Your specific rights vary depending on your location.
To exercise any of the rights listed below, or to ask a question, please contact us by using the contact details in Section 10.
We will need to verify your identity before processing your request to protect your data from unauthorized access. We will respond to your request within the timeframes required by law.
The table below summarizes the key rights available to you under the DPDP Act, GDPR, and CCPA/CPRA. Residents of other U.S. states (such as Colorado, Virginia, and Texas) generally have similar rights to those listed under the CCPA/CPRA.
| Right | India (DPDP Act) | Europe (GDPR) | California (CCPA/CPRA) |
|---|---|---|---|
| Access / Know | Yes | Yes | Yes (Specific categories, sources, purposes) |
| Correction | Yes | Yes (Rectification) | Yes |
| Deletion | Yes | Yes (Erasure) | Yes |
| Opt-Out of Sale/ Sharing | No | N/A (Right to Object) | Yes (Mandatory Link) |
| Data Portability | No | Yes | Yes (part of Right to Know) |
| Restrict / Limit Use | No | Yes | Yes (for Sensitive Personal Information) |
| Grievance Redressal | Yes | Yes (Right to lodge a complaint) | Yes (Right to lodge a complaint) |
| Right to Nominate | Yes | No | No |
| Right to Non-Discrimination | No | N/A | Yes |
• Right to Opt-Out (U.S. Residents): You have the right to direct us not to "sell" or "share" your personal information. You can exercise this right by visiting our U.S. Privacy Choices page.
• Right to Object (GDPR): You have the right to object to our processing of your data based on legitimate interests or for direct marketing.
• Right to Grievance Redressal (India): You have the right to have your grievances addressed by us. Please contact us at the details below.
• Right to Nominate (India): In accordance with the DPDP Act, you have the right to nominate another individual who can exercise your data protection rights on your behalf in the event of your death or incapacity. You can submit this request by contacting our Grievance Officer.
We have implemented and maintain reasonable security safeguards to protect your personal data. This includes a combination of technical (e.g., encryption), administrative (e.g., access controls, employee training), and physical controls to prevent unauthorized access, use, alteration, or disclosure.
We practice "storage limitation" and will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected.
• For example, personal data submitted through our web forms will be retained for a period of 24 months after the inquiry has been resolved, after which it will be securely deleted or anonymized.
• We may retain certain data for longer periods if required to comply with our legal, regulatory, or financial obligations.
Our website and services are not directed to, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child without verifiable parental consent, we will take immediate steps to delete that information.
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. The "Effective Date" at the top of this policy will indicate when it was last revised. We encourage you to review this policy periodically.
If you have any questions, concerns about this Privacy Policy, or wish to exercise your data protection rights, please contact our designated Data Protection Officer (DPO) and Grievance Officer:
Email: privacy@verveo.com
Mailing Address: Verveo Solutions Private Limited, L-376/A, 1st Floor, 14th B Cross Rd, Sector 6, HSR Layout, Bengaluru, Karnataka 560102
In accordance with India's DPDP Act, we request that you first submit any grievances to our Grievance Officer above. If your grievance is not resolved to your satisfaction, you have the right to lodge a complaint with the Data Protection Board of India.
You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been infringed.
