Introduction Vayak Global (“we”, “us”, “our”) is committed to protecting the privacy, confidentiality and security of personal data collected through our website www.vayak.in (the “Site”) and in the course of providing our services (the “Services”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we retain it, the legal bases for processing, the rights available to you under applicable law (including the Digital Personal Data Protection Act, 2023 (“DPDP Act”)), and how to contact us.

This Policy applies to all visitors, users, customers, prospects and other persons who interact with the Site or our Services (“you”, “your”, “data principal”).

1. Data Controller / Data Fiduciary

   1. Vayak is the data fiduciary responsible for processing personal data collected via the Site and Services. Contact details:
      • Company: Vayak Global LLP
      • Website: www.vayak.in
      • Email: support@vayak.in
      • Grievance Officer: Ankit, Email: support@vayak.in, Phone: +91-8591995571

2. Types of Personal Data We Collect

   1. We collect the following categories of personal data depending on how you interact with the Site and Services:
   2. A. Identity and contact data
      • Name, email address, telephone/mobile number, and postal address.
   3. B. Transactional and commercial data
      • Enquiry/quote form details, service preferences, purchase history, invoices, payment transaction identifiers (payment card details are processed by third‑party payment processors and are not stored by us except as permitted by law).
   4. C. Technical and usage data
      • IP address, device identifiers, browser type and version, operating system, pages visited, referral source, date/time stamps, cookies and similar tracking technologies, analytics data.
   5. D. Communications data
      • Records of communications with us (email, chat, phone, support tickets), feedback, reviews, and user‑generated content you submit.
   6. E. Sensitive personal data
      • We do not intentionally collect sensitive personal data (such as health, biometric, caste, religion) through the Site. If you voluntarily provide any such information, we will treat it with heightened protection and only process it where we have a lawful basis and your explicit consent where required.

3. How We Collect Personal Data

   1. Directly from you: when you submit enquiry/quote forms, register for newsletters, create an account, contact us by email/phone, or otherwise provide information.
      • Automatically: through cookies, server logs, analytics and similar technologies when you visit the Site.
      • From third parties: service providers (e.g., CRM, analytics, marketing platforms), publicly available sources, or partners (with appropriate legal basis).

4. Purposes of Processing and Legal Bases

   1. We process personal data for the following purposes and legal bases:

We will not process your personal data for purposes incompatible with those listed above without informing you and, where required, obtaining your consent.

1. Cookies and Tracking Technologies

   1. We use cookies and similar technologies to operate the Site and improve your experience. Cookies fall into categories:

      • Strictly necessary cookies: required for Site functionality.

      • Performance and analytics cookies: collect anonymous usage statistics (e.g., Google Analytics).

      • Functional cookies: remember preferences and settings.

      • Advertising/targeting cookies: used by third parties to deliver relevant ads.

      • You can manage cookie preferences via the cookie banner on the Site or through your browser settings. Disabling certain cookies may affect Site functionality.

2. Third‑Party Services and Data Sharing

   1. We may share personal data with:

      • Service providers (hosting, CRM, email, analytics, payment processors, marketing platforms) who process data on our behalf under contract.

      • Professional advisors (lawyers, auditors) where necessary.

      • Regulators, law enforcement or courts when required by law or to protect rights.

      • Business partners only with your consent or where necessary to provide Services.

      • We require third parties to implement appropriate security and confidentiality measures and to process data only as instructed.

3. International Data Transfers

   1. Personal data may be transferred to, stored and processed in jurisdictions outside India (including countries that may not have the same level of data protection). Where transfers occur, we ensure appropriate safeguards (standard contractual clauses, data processing agreements, or other lawful mechanisms) to protect your data in accordance with applicable law.

4. Data Retention

   1. We retain personal data only as long as necessary for the purposes described, including to: perform the contract, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Typical retention periods:

      • Enquiry and quote records: 3–7 years (or as required by tax/record‑keeping laws).

      • Account and transaction records: as required by law.

      • Marketing consents: until withdrawal.

      • Analytics and logs: up to 24 months (or as required for security/analytics).

      • We will securely delete or anonymise data when no longer required.

5. Security Measures

   1. We implement reasonable technical, administrative and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. Measures include encryption in transit, access controls, secure hosting, regular security assessments and staff training. No system is completely secure; in the event of a data breach we will follow applicable notification obligations under law and inform affected individuals and regulators as required.

6. Your Rights (under DPDP Act and applicable law)

   1. Subject to applicable exceptions, you may have the following rights:

      • Right to confirmation and access to personal data we hold.

      • Right to correction of inaccurate or incomplete data.

      • Right to data portability in a structured, commonly used, machine‑readable format.

      • Right to erasure (right to be forgotten) where processing is no longer necessary or consent withdrawn and no other lawful basis exists.

      • Right to restrict or object to processing on grounds of legitimate interest.

      • Right to withdraw consent where processing is based on consent (withdrawal does not affect processing prior to withdrawal).

      • Right to grievance and redress: you may lodge a complaint with our Grievance Officer (contact details above) or with the relevant supervisory authority.

      • To exercise any right, contact support@vayak.in. We will verify your identity before acting on requests and respond within the time-frames required by law.

7. Children

   1. Our Site and Services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe we have collected data of a child, contact us and we will take steps to delete it.

8. Links to Other Sites

   1. The Site may contain links to third‑party websites. We are not responsible for the privacy practices or content of those sites. Review their privacy policies before providing personal data.

9. Changes to this Policy

   1. We may update this Privacy Policy to reflect changes in law, our practices, or Services. We will post the revised Policy on the Site with an updated effective date. Where required by law, we will seek consent for material changes.

10. Contact and Grievance Redressal

    1. If you have questions, requests or complaints about this Policy or our processing, contact:

       1. Email: support@vayak.in

       2. Address: C-201, Military Road, Marol, Andheri (East), Mumbai, Maharashtra 400059

       3. Phone: +91-8591995571

       4. If you remain unsatisfied, you may lodge a complaint with the relevant data protection authority in India.

11. Consent and Acknowledgement

    1. By using the Site or submitting personal data (including via enquiry/quote forms), you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and transfer of your personal data as described herein, to the extent consent is required by law.