Home / Trust centre / Privacy notice
Privacy notice
This notice explains what personal data Asveera collects through this website and during client work, why we hold it, how long we keep it, and what you can ask us to do about it.
1. Who we are
Asveera Data Protection and Compliance Business is a data protection and compliance consultancy in India. We build compliance into the systems small and medium businesses already run on.
For anything in this notice you can write to contact@asveera.in or call +91 80742 00954.
2. What we collect
We collect three separate things, and we keep them separate.
Enquiries
When you use the form on our contact page, or write or call us, we hold your name, your email address, and anything else you choose to give us, which may include your phone number, your organisation, your role, your team size, your sector and whatever you write in the message box. We also keep our notes from any call that follows.
Client engagement material
If you engage us, we hold the material needed to do the work. That includes your staff contact details, your system inventories, your existing policies, and screenshots or exports from your administrative consoles. We work from the minimum we need, and we say more about how we handle it in how we protect your data.
Website use
This site sets no analytics cookie unless you agree to it. If you do agree, we collect aggregate information about which pages people read. If you decline, we collect nothing beyond what our host records in ordinary server logs to keep the site running and secure.
3. Why we hold it
- To answer you. We use enquiry details to reply, to arrange a call, and to prepare a written scope. We ask for your agreement before you submit the form, and you can take it back at any time.
- To deliver an engagement. Once you are a client, we use the material you share to produce the documents set out in your engagement letter.
- To meet our own obligations. We keep records of engagements, invoices and correspondence for the periods that tax and company law require.
- To improve the site. Only if you accepted analytics, and only in aggregate. We do not build a profile of you.
We do not use your details to advertise to you unless you ticked the optional box asking for practical notes. That is a separate choice, it is never bundled with the first one, and one click stops it.
4. Who else sees it
Nobody buys this data from us, because we do not sell it. We share it only in these situations.
- Service providers we rely on to run the business, namely our email and document provider, our website host, and our analytics provider if you accepted analytics. Each one acts on our instructions.
- Specialists you have agreed to, where an engagement needs a skill we do not hold. We name them in advance and we do not bring anyone in without your written agreement.
- A public authority, where we are legally required to disclose. We will tell you unless we are prohibited from doing so.
5. How long we keep it
| What | How long | Then what |
|---|---|---|
| Enquiry that did not become an engagement | 12 months from last contact | Deleted |
| Optional updates list | Until you unsubscribe | Removed on request, same day |
| Client engagement files | As agreed in the engagement letter, by default 3 years after close out | Returned or destroyed, with written confirmation |
| Working copies and system exports | Destroyed at close out | Confirmed in the close out report |
| Invoices and tax records | As required by Indian tax law | Retained, access restricted |
| Website analytics | 14 months, aggregate only | Expires automatically |
6. Your rights
You can ask us to do any of the following, free of charge.
- Show you what we hold about you, and tell you who we shared it with.
- Correct it if it is wrong, incomplete or out of date.
- Delete it, where we do not have a legal reason to keep it.
- Withdraw your agreement at any time, as easily as you gave it. Withdrawing stops future use and does not make past use unlawful.
- Nominate someone to exercise these rights on your behalf if you are unable to.
- Complain, using the route in the next section.
Write to contact@asveera.in with the word "rights request" in the subject line. We will confirm receipt within two working days and complete the request within thirty days. If we need to verify who you are first, we will ask for the minimum needed and nothing more.
7. Grievance redressal
If you are unhappy with anything we have done with personal data, tell us and we will deal with it properly.
| Step | What happens | Within |
|---|---|---|
| You write to us | Email the Grievance Officer at contact@asveera.in with "grievance" in the subject line, or call +91 80742 00954 | Any time |
| We acknowledge | You receive written confirmation with a reference and the name of the person handling it | 2 working days |
| We investigate | We look into what happened and come back with findings and what we will do | 30 days |
| You escalate | If you are not satisfied, you may take the matter to the Data Protection Board of India | Your choice |
Grievance Officer
Asveera Innovaite Consultants LLP, India
Email contact@asveera.in
Phone +91 80742 00954
8. Children
This website and this business are aimed at people acting for a business. We do not knowingly collect personal data about anyone under eighteen through this site, and we do not direct any of our communications at children. If you believe a child has sent us personal data, write to us and we will delete it.
Where a client engagement involves records about young people, that data is handled under the client's instructions and the terms of the engagement letter, not under this notice.
9. How we protect it
Enquiry data sits in our business email and document system, reachable only by the people in the business who need it, each through their own named account with multi factor authentication. Devices are encrypted. We do not keep client or enquiry data on personal phones or personal accounts.
Client engagement material is handled under a tighter set of controls, which we publish in full at how we protect your data.
If something goes wrong and personal data is exposed, we will tell the people affected and the regulator as the law requires, and we will tell you what we are doing about it rather than waiting until it is resolved.
10. Changes to this notice
If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant and we hold your contact details, we will tell you directly rather than relying on you to notice.