Privacy Policy

1. Who we are (Data Fiduciary / Data Controller)

Vectorweb Online Solutions ("we", "us", "our") is the Data Fiduciary under India's DPDP Act 2023 and the Data Controller under the GDPR. We operate this website (vectorweb.online) and the Bizap platform (bizap.org).

Contact for all privacy matters: contact@vectorweb.online

2. What personal data we collect

We collect only the information you voluntarily provide through the contact/enquiry form:

• Name — to address you personally in our reply
• Email address — to respond to your enquiry
• Phone number — if you choose to provide it, for follow-up calls
• Business name and type — to understand your context and needs
• Message / enquiry details — the specific problem or request you describe

We do not collect sensitive personal data (health, financial, biometric, caste, religion, etc.). We do not use tracking cookies, advertising pixels, or analytics scripts on this website.

3. Purpose of processing

Your personal data is used solely for the following purposes:

• Responding to your business enquiry
• Following up on a potential engagement you initiated
• Communicating project updates if we enter into a working relationship

We will never sell, rent, or share your personal data with any third party for marketing or advertising purposes.

4. Legal basis for processing

We process your personal data on two legal bases:

• Consent (DPDP Act / GDPR Art. 6(1)(a)) — you give explicit consent by ticking the checkbox and submitting the form. You may withdraw consent at any time by emailing us; withdrawal does not affect the lawfulness of processing before withdrawal.
• Legitimate interest (GDPR Art. 6(1)(f)) — responding to a business enquiry you initiated. We have balanced this interest against your rights and concluded that it does not override them, given the limited data collected and the direct relevance to the enquiry you sent.

5. How your data is stored and transferred

Contact form submissions are processed by Netlify, Inc. (United States), which provides our website hosting and form handling. Netlify may store your submitted data on servers outside India and outside the EU/EEA. Netlify operates under Standard Contractual Clauses for international data transfers and maintains its own Privacy Policy.

International transfer notice: By submitting the form, you acknowledge that your data will be processed by Netlify in the United States. We have no control over Netlify's infrastructure location. Where you are an EU/EEA resident, this constitutes a transfer to a third country; Netlify's Standard Contractual Clauses serve as the appropriate safeguard under GDPR Art. 46.

We may also store your details in an internal inbox or project management tool to manage and respond to your enquiry. We retain your data for a maximum of 24 months after our last communication, after which it is deleted.

6. Data security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant authority (Data Protection Board of India / applicable EU supervisory authority) and, where required, notify you directly, without undue delay.

7. Automated decision-making

We do not use any automated decision-making, profiling, or AI-based evaluation of your personal data that produces legal or similarly significant effects on you.

8. Your rights

Depending on your location, you have the following rights regarding your personal data. To exercise any of them, email contact@vectorweb.online. We will respond within 30 days (GDPR) / as required under the DPDP Act.

Under India's DPDP Act 2023:

• Right to access — obtain a summary of personal data we hold about you and how it has been processed
• Right to correction and erasure — have inaccurate or incomplete data corrected, or have your data erased where processing is no longer necessary
• Right to grievance redressal — raise a grievance with us; we will acknowledge and resolve it within the timeframe required by law
• Right of nomination — nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity (Section 13, DPDP Act)
• Right to withdraw consent — withdraw your consent at any time; this will not affect processing already carried out

Under GDPR (EU/EEA residents):

• Right of access (Art. 15) — obtain a copy of your personal data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion ("right to be forgotten")
• Right to restriction of processing (Art. 18) — ask us to pause processing while a dispute is resolved
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)) — at any time, without affecting prior processing
• Right to lodge a complaint (Art. 77) — with your local EU supervisory authority (e.g. the Information Commissioner's Office in the UK, or the relevant EU Data Protection Authority in your country of residence)

9. Grievance officer (DPDP Act)

In accordance with the Digital Personal Data Protection Act 2023, you may raise a grievance regarding the processing of your personal data by contacting our designated point of contact:

• Name: Vectorweb Online Solutions (Grievance Contact)
• Email: contact@vectorweb.online
• Response time: We will acknowledge your grievance promptly and endeavour to resolve it within 30 days

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India once it becomes operational, in accordance with Section 20 of the DPDP Act 2023.

10. Cookies

This website does not use cookies for tracking, analytics, or advertising. No cookie consent banner is shown because no non-essential cookies are set.

11. Third-party links

This website links to the Bizap app (bizap.org) and other external sites. We are not responsible for the privacy practices of those sites. Please review their respective privacy policies before submitting any information.

12. Children's privacy

Our services are business-to-business in nature and are not directed at children. Under India's DPDP Act 2023, we do not knowingly collect personal data from anyone under the age of 18 without verifiable parental consent. Under the GDPR, the minimum age for valid consent is 16 (or lower in certain EU member states, with a minimum of 13).

If you believe a child has submitted data to us, please contact us at contact@vectorweb.online and we will promptly delete it.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in the law or our practices. The "last updated" date at the top of this page will reflect any changes. For significant changes, we will make reasonable efforts to notify you. Continued use of this website after changes constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions, requests, or complaints: contact@vectorweb.online