Privacy Policy

1. Who we are

1.1. Vantaloop Digital Solutions Private Limited is a company incorporated under the Companies Act, 2013, with its registered office at Unit 402, Sample Business Park, 100 Feet Road, Indiranagar, Bengaluru, Karnataka 560038, India.

1.2. For the purposes of the Digital Personal Data Protection Act, 2023, we act as a Data Fiduciary for the personal data described in this policy.

1.3. This policy applies to our website, landing pages, email communications, WhatsApp communication and any services we provide under a contract with you.

2. Data we collect

2.1. Data you give us directly. When you fill in a form, request an audit, make a payment or contact us, we may collect:

• your name and job title;
• company name, website and GSTIN;
• email address and phone number;
• billing address and state;
• information about your business, marketing goals and budget;
• any other information you choose to include in a message.

2.2. Data we collect automatically. When you use our website, we may collect:

• IP address, browser type and device information;
• pages visited, time spent and referring website;
• approximate location based on your IP address;
• information collected through cookies and similar technologies, as described in Section 6.

2.3. Data from third parties. We may receive data from advertising platforms, analytics providers and our payment gateway, such as payment status and campaign performance data.

2.4. We do not collect or store your full card number, CVV, UPI PIN or net banking password. These are processed only by our payment partner.

3. How we use your data

3.1. We use personal data for the following purposes:

3.2. We will not use your data for purposes that are materially different from those listed above without informing you and, where required, asking for your consent.

4. Legal basis for processing

4.1. We process your personal data only where we have a lawful basis to do so, including:

• your consent, which you can withdraw at any time;
• the performance of a contract with you or steps taken at your request before entering into a contract;
• compliance with legal obligations, including tax and accounting laws;
• other legitimate uses permitted under applicable law.

4.2. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing your data

5.1. We do not sell your personal data. We share it only with:

• Service providers who help us run our business, such as hosting, CRM, email and analytics providers;
• Payment gateway partners, to process your payments securely;
• Advertising platforms, when you are a client and we manage campaigns on your behalf;
• Professional advisers, such as auditors and lawyers, under confidentiality obligations;
• Government authorities, when required by law.

5.2. All service providers are bound by written agreements that require them to protect your data and use it only on our instructions.

5.3. Some providers may store data outside India. Where this happens, we ensure the transfer complies with applicable Indian law.

6. Cookies and tracking

6.1. We use cookies to make our website work, remember your preferences and understand how visitors use our pages.

6.2. The types of cookies we use are:

6.3. You can change your cookie preferences at any time using the “Manage Preferences” link in the footer or your browser settings.

7. Data storage and security

7.1. We use reasonable security safeguards, including encryption in transit, access controls, two-factor authentication and regular reviews of who can access personal data.

7.2. Despite these measures, no system is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

8. How long we keep your data

8.1. We keep personal data only for as long as necessary for the purposes described in this policy:

• audit requests from people who don’t become clients — up to 24 months;
• client and contract data — for the duration of the contract and 8 years after, as required by tax laws;
• newsletter subscriptions — until you unsubscribe;
• website analytics data — up to 14 months.

8.2. When data is no longer needed, we delete or anonymise it securely.

9. Your rights

9.1. Subject to applicable law, you have the right to:

• access information about the personal data we hold about you;
• correct inaccurate or incomplete data;
• request erasure of your data;
• withdraw consent at any time;
• nominate another person to exercise your rights in case of death or incapacity;
• raise a grievance with us and, if unresolved, with the Data Protection Board of India.

9.2. To exercise any of these rights, write to privacy@vantaloop.example. We may ask you to confirm your identity before responding.

10. Children’s data

10.1. Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

11.1. We may update this policy from time to time. The “Last updated” date at the top shows when the latest changes were made.

11.2. If changes are significant, we will notify you by email or through a notice on our website before they take effect.