Privacy policy

The short version

• We use your contact details only to reply to you and follow up on your enquiry. We don't sell them.
• We use analytics tools to understand how the site is used, and a visitor identification service (RB2B) to learn which businesses, and in the United States which people, visit our site.
• Where the law requires it, these tools run only after you accept them in our cookie banner. You can change your choice at any time.
• To ask about, correct or delete your data, email info@shvx.in with the subject “Privacy request”.

Who is responsible for your data?

shvx.in is run by SHVX Software, a Vitoba Technologies Private Limited company, based in Mumbai, India (“SHVX”, “we”, “us”). We decide how and why your personal data is used on this website, which makes us the data controller under GDPR and the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDPA).

Privacy contact: info@shvx.in, subject “Privacy request”. This is also our grievance contact under the DPDPA.

What data do we collect?

Data you give us

When you use our contact form or email us, we receive your name, work email, company, the service you are interested in and your message. If you follow a link from one of our blog posts, the form also records which post you came from.

Data collected when you browse

When you visit the site, our tools may collect your IP address, browser and device type, the pages you view, the links you click, the page that referred you and approximate location. Some of this is stored in cookies or similar technologies on your device (see Cookies and similar technologies).

Data from visitor identification

We use RB2B, a visitor identification service. For visitors in the United States, RB2B may match a visit with publicly available business profile data, such as a name, job title, company and LinkedIn profile, and share that with us. For visitors outside the United States, at most company-level information is provided. RB2B states that its database is designed to exclude personal contact data of people in the EU and UK.

Why do we use it?

We may contact people who visit or enquire with information about our services. Every marketing email tells you how to stop receiving them.

Cookies and similar technologies

Cookies are small files stored by your browser. We sort ours into three groups:

• Necessary: remember your cookie choice and protect the site. These always run.
• Analytics: Google Analytics and Mixpanel, which measure visits, pages viewed and clicks on buttons such as “Book an assessment”.
• Advertisement (visitor identification): RB2B, which helps us identify visiting businesses and, in the United States, people.

When you first visit, our cookie banner (provided by CookieYes) asks for your choice. Google Analytics and Mixpanel run only if you accept Analytics, and RB2B runs only if you accept Advertisement. You can change or withdraw your choice at any time with the cookie settings button shown on every page. Withdrawing consent stops future collection; it does not undo processing that already took place.

Our pages also load fonts from Google Fonts, which means your browser sends your IP address to Google when it fetches them.

Who do we share it with?

We share personal data only with service providers that help us run the site and our business, and only for the purposes above:

• Web3Forms, which delivers contact form messages to our inbox.
• Google Workspace, our email provider, where enquiries are received and answered.
• Google, Mixpanel and RB2B, as described in the cookies section.
• Cloudflare, our web host, which serves the site, protects it from attacks and keeps short-term technical logs.
• CookieYes, our consent provider, which keeps a record of each consent choice (with a masked IP address) as proof of consent.

We don’t sell your contact form details. Under some US state laws, such as California’s, letting RB2B and similar tools collect browsing data may count as “sharing” or a “sale”. You can opt out as described under Your choices. We may also disclose data if the law requires it, or to protect our rights.

Is your data transferred abroad?

We are based in India, and some of our providers process data in the United States and the European Union. Where data leaves the country you are in, we rely on the safeguards the law allows, such as the European Commission’s standard contractual clauses or the provider’s certification under the EU–US Data Privacy Framework.

How long do we keep it?

• Enquiries: for as long as we are discussing or delivering work with you, and then only as long as we need for legal, tax or accounting reasons.
• Analytics data: according to the retention settings in Google Analytics and Mixpanel, which we keep to the shortest period that meets our needs.
• Visitor identification records: deleted when they are no longer useful for following up a business enquiry.
• Consent records: as long as needed to show what you agreed to.

What are your choices?

• Cookies: use the cookie settings button on any page, or block cookies in your browser.
• RB2B: opt out of RB2B identification through its database opt-out. California residents can also use the RB2B CCPA opt-out.
• Google Analytics: install Google’s opt-out browser add-on.
• Marketing emails: use the unsubscribe link in any email, or write to us.

What are your rights?

Depending on where you live, you may have the right to:

• know what personal data we hold about you and get a copy;
• have it corrected, completed, updated or deleted;
• object to or restrict how we use it, including for direct marketing;
• receive it in a portable format;
• withdraw consent at any time;
• opt out of the sale or sharing of your data, and not be treated differently for using your rights;
• nominate another person to exercise your rights if you die or become unable to (India);
• complain to a data protection authority, such as your local supervisory authority in the EU or UK, or the Data Protection Board of India after first raising your concern with us.

To use any of these rights, email info@shvx.in with the subject “Privacy request”. We may need to confirm your identity first. We will reply within the time the applicable law requires.

How do we protect it?

We use access controls, encrypted connections (HTTPS) and reputable providers, and give access to personal data only to people who need it. No website is perfectly secure, so if we become aware of a breach that affects you, we will tell you and the relevant authorities where the law requires.

Children

This site is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We will update this page when our tools or practices change, and show the new date at the top. If a change is significant, we will make it clear on the site.