Legal
Privacy policy
This policy explains what personal information we collect through this website and in the course of our work, why we collect it, who sees it, how long we keep it and the choices you have.
Effective date: 8 November 2026. Last updated: 8 November 2026.
Summary
- We collect the details you give us (for example in the enquiry form or by email) and basic technical data needed to run and secure the site.
- We use them to reply to you, prepare proposals, deliver and bill our services, and keep the site safe. We do not sell your personal information.
- Payment card and bank details are handled by Razorpay and Stripe. We do not store them.
- You can ask to access, correct or erase your information, or withdraw consent, by emailing us. Our Grievance Officer acknowledges complaints within 24 hours and resolves them within 15 days.
Who we are
This website, https://www.projovi.co, is operated by Projovi (OPC) Private Limited (CIN U74999RJ2018OPC061647) ("Projovi", "we", "us"). Registered office: 1/288, W.N.1, Jhunjhunu City, Jhunjhunu, Rajasthan 333001, India. Working office: E210, E Block, Sector 63, Noida, Uttar Pradesh 201301, India.
For the purposes of the Digital Personal Data Protection Act, 2023 (DPDP Act), Projovi is the data fiduciary for the personal information described in this policy. For the purposes of the GDPR and UK GDPR, Projovi is the controller. Where we handle personal data on a client's behalf while delivering a project, we act as a processor under the terms of our written agreement with that client.
This policy applies to visitors to this website, people who contact us, our clients and their representatives, and people who apply to work with us.
What we collect
We collect only what we need for the purposes set out below.
- Enquiry form: your name, work email address, company, the service you are interested in, your budget range, your message and a record of your consent to be contacted.
- Correspondence: emails, call notes and messages you send us, and your contact details and role at your company.
- Client and billing details: company name, billing address, tax registration numbers (for example GSTIN), invoice and payment history, and the contact people for a project.
- Payment-related data: when you pay by card, UPI or net banking, you enter payment details on a page operated by Razorpay or Stripe. They give us confirmation of the payment, its amount, status and a transaction reference. We do not receive or store your full card number, CVV, UPI PIN or net banking credentials.
- Careers applications: if you apply to work with us, the information in your application, such as your name, contact details, CV, work history and any links or messages you provide.
- Technical data: IP address, browser and device type, the pages requested and the time of the request. This appears in server and security logs kept by our hosting and security providers.
- Browser storage: an essential theme preference. See the cookie policy.
We do not knowingly collect sensitive personal data (such as health, biometric or financial account data) through this website. Please do not include it in the enquiry form.
How we use your information
We use personal information for these purposes and, where the GDPR or UK GDPR applies, on these legal bases.
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry, arranging a consultation and preparing a proposal | Your consent (enquiry form); steps at your request before entering a contract; our legitimate interest in responding to business enquiries |
| Delivering services, managing projects and communicating about them | Performance of a contract with you or your company |
| Invoicing, taking payments, tax and accounting records | Performance of a contract; legal obligation (tax, GST and company law) |
| Keeping the website and our systems secure, preventing abuse and fraud | Legitimate interest in the security of our services; legal obligation where applicable |
| Handling careers applications | Steps at your request before entering a contract; your consent to retain your application |
| Responding to your rights requests and complaints | Legal obligation; legitimate interest |
| Sending you updates about our services | Your consent. You can withdraw it at any time. We do not send marketing email without it. |
| Establishing, exercising or defending legal claims | Legitimate interest; legal obligation |
We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Notice and consent under the DPDP Act
If you are in India, or we process your personal data in connection with offering services to you from India, this section is the notice required by the DPDP Act.
- Personal data we process and the purposes: as listed in the sections above.
- Consent: where we rely on consent, it is requested when you submit the enquiry form, through a clear action by you for the specified purpose. Consent is free, specific, informed and unambiguous, and not a condition of anything beyond handling your enquiry.
- Withdrawing consent: you can withdraw consent at any time by emailing us. Withdrawal is as easy as giving consent. It does not affect processing done before withdrawal, and we will stop processing and erase the data unless the law requires us to keep it.
- Your rights: to access a summary of your data and the processing, to correct, complete and update it, to have it erased, to grievance redressal and to nominate another person to exercise your rights in the event of your death or incapacity. How to exercise them is described below.
- Complaints: you may contact our Grievance Officer first. If you are not satisfied, you may complain to the Data Protection Board of India once it is operational, as the DPDP Act provides.
- Children: we do not process the personal data of children (under 18) without verifiable parental consent. See the section on children.
If you prefer to give or manage consent in English or another language listed in the Eighth Schedule to the Constitution of India, tell us and we will assist.
International transfers
Projovi serves clients worldwide and its providers operate globally, so your information may be processed in India, the United States, the European Union and other countries.
The DPDP Act allows transfers of personal data outside India except to countries the Government of India restricts by notification. Where the GDPR or UK GDPR applies and we transfer personal data to a country without an adequacy decision, we use safeguards such as the European Commission's Standard Contractual Clauses and the UK addendum, together with the data protection terms offered by our providers. You can ask us for a copy of the relevant safeguards using the contact details below.
How long we keep it
We keep personal information only as long as needed for the purposes above, then delete or anonymise it. Our standard periods are:
| Information | Retention period |
|---|---|
| Enquiries that do not lead to a proposal or project | 24 months after our last contact with you |
| Proposals and correspondence for clients | 6 years after the end of the project or service |
| Invoices, payment records and tax records | 8 years from the end of the relevant financial year, as Indian company and tax law requires |
| Careers applications that are unsuccessful | 12 months after the decision, or sooner if you ask |
| Server and security logs | Up to 90 days, unless needed to investigate an incident |
| Records of consent and rights requests | 3 years after the request is closed |
| Client project data we hold as a processor | As set in the project agreement; by default deleted within 90 days after the end of the engagement or on the client's written instruction |
We may keep information for longer where the law requires it or where it is needed to establish, exercise or defend a legal claim, and then only for as long as that need lasts.
How we protect it
We use technical and organisational measures that are reasonable for the nature of the information, consistent with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the DPDP Act. They include:
- Encryption of data in transit (HTTPS/TLS) on this website.
- Network protection, DDoS mitigation and a web application firewall through Cloudflare.
- Access limited to people who need the information to do their work, with strong authentication on business systems.
- Confidentiality obligations for our staff and contractors.
- Separation of payment handling: card and bank details are entered with Razorpay or Stripe and never pass through our servers.
- Procedures to detect, investigate and report personal data breaches. Where the law requires, we notify the affected people and the relevant authority, including the Data Protection Board of India and EU or UK supervisory authorities, within the required time.
No system is completely secure. If you believe your information has been put at risk, tell us immediately at the email address below.
Your rights
Depending on where you live, you have some or all of these rights over your personal information:
- Access: to get confirmation that we process your data and a copy or summary of it.
- Correction: to have inaccurate or incomplete data corrected, completed or updated.
- Erasure: to have your data deleted when it is no longer needed or you withdraw consent, unless we must keep it by law.
- Withdraw consent: at any time, where we process data on the basis of consent.
- Nominate: under the DPDP Act, to nominate a person to exercise your rights if you die or cannot do so yourself.
- Grievance redressal: to have a complaint about our handling of your data heard and resolved.
- GDPR and UK GDPR: in addition, to restrict processing, to object to processing based on legitimate interests, to data portability (receive your data in a structured, commonly used, machine-readable format) and not to be subject to solely automated decisions with legal effects.
How to exercise your rights: email hello@projovi.co with the subject line "Privacy request", say which right you want to use and give the email address you used to contact us so we can find your records. We may ask for information to confirm your identity. We acknowledge requests within 24 hours and respond within 15 days (and in any case within the period the law sets, which is one month under the GDPR, extendable where permitted).
We do not charge a fee unless a request under the GDPR is manifestly unfounded or excessive. If you are in the European Union or the United Kingdom you may also complain to your local supervisory authority, for example the Information Commissioner's Office in the United Kingdom.
Children
Our services are for businesses and this website is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email us and we will delete it.
Links to other sites
This site may link to other websites and to the payment pages of Razorpay and Stripe. Their privacy practices are their own; please read their policies before sharing information with them.
Changes to this policy
We may update this policy to reflect changes in our practices or the law. The effective date at the top shows the current version. For material changes we will give notice on this website, and by email to our clients where appropriate, before the change takes effect.
Grievance Officer
In accordance with the Information Technology Act, 2000, the SPDI Rules 2011 and the DPDP Act, the following officer handles privacy complaints and requests.
- Name: Shubham Shrivastava, Grievance Officer
- Email: hello@projovi.co
- Phone: +91 96460 56969
- Response time: we acknowledge your complaint within 24 hours and resolve it within 15 days of receipt.
- Registered office: 1/288, W.N.1, Jhunjhunu City, Jhunjhunu, Rajasthan 333001, India
Questions
If you have a question about this policy or how we handle personal information, contact us.
- Company: Projovi (OPC) Private Limited, CIN U74999RJ2018OPC061647
- Email: hello@projovi.co
- Phone: +91 96460 56969
- Registered office: 1/288, W.N.1, Jhunjhunu City, Jhunjhunu, Rajasthan 333001, India
- Working office: E210, E Block, Sector 63, Noida, Uttar Pradesh 201301, India