Privacy Policy
1. Information We Collect
1.1 Information You Provide
When you submit our contact form or otherwise communicate with us, we collect:
- Identity data: your name and the name of your brand or company;
- Contact data: your email address;
- Business data: your approximate monthly advertising spend and any details you share in your message.
You are not required to submit this information. Providing it means you consent to us processing it for the purpose of responding to your enquiry.
1.2 Information Collected Automatically
When you visit our website, our server logs may collect:
- IP address and approximate geographic location;
- Browser type, device type, and operating system;
- Pages visited, referring URL, and time of visit.
This information is used solely for security monitoring and aggregate analytics. We do not use third-party analytics trackers or advertising pixels on this website.
1.3 Cookies
This website does not use cookies for tracking or advertising. Basic session functionality may use strictly necessary browser storage that does not identify you personally.
2. How We Use Your Information
We process your personal data only for specified, lawful purposes:
- To respond to your enquiry — the primary and only purpose for which contact-form data is collected;
- To assess suitability — to determine whether an engagement may be appropriate for both parties;
- To perform contractual obligations — where a services engagement is entered into, to deliver, manage, and invoice for those Services;
- To comply with legal obligations — including record-keeping requirements under Indian law;
- To protect our legitimate interests — including fraud prevention and network security.
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
3. Lawful Basis for Processing
Under the DPDPA 2023, we process your personal data on the basis of:
- Consent — freely given when you submit the contact form or otherwise provide your details to us voluntarily;
- Contractual necessity — where processing is necessary to perform an agreed services engagement;
- Legitimate interests — for security, fraud prevention, and internal analytics, where such interests are not overridden by your rights.
4. Sharing of Information
We share personal data only in the following limited circumstances:
- Service providers: We use Telegram (a messaging application) to receive internal notifications of form submissions. Submission data is transmitted to Telegram's servers subject to Telegram's own privacy policy. No other third-party processors currently receive your personal data;
- Legal requirements: We may disclose personal data where required by Indian law, court order, or a competent government authority;
- Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
We do not transfer your personal data outside India unless the recipient country has been notified by the Indian Government as providing adequate data protection, or unless we have obtained your explicit consent.
5. Data Retention
We retain personal data for no longer than is necessary for the purpose for which it was collected:
- Enquiry data (no engagement): retained for up to twelve (12) months from the date of last contact, then securely deleted;
- Client data (active engagement): retained for the duration of the engagement and for seven (7) years thereafter as required by Indian financial record-keeping laws;
- Server logs: retained for up to ninety (90) days for security purposes.
6. Your Rights as a Data Principal
Under the DPDPA 2023, you have the following rights in relation to your personal data:
- Right to access — to obtain a summary of the personal data we hold about you and how it is being processed;
- Right to correction and erasure — to have inaccurate or incomplete personal data corrected, and to have your data erased where it is no longer necessary or where you withdraw consent;
- Right to grievance redressal — to have your complaints addressed by our Grievance Officer within a reasonable time;
- Right to nominate — to nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, please contact our Grievance Officer (details below). We will respond within thirty (30) days of receiving your request.
7. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews.
No method of transmission over the internet is entirely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
8. Children's Privacy
Our Services are directed solely at businesses and adult professionals. We do not knowingly collect personal data from individuals under the age of eighteen (18). If we become aware that we have inadvertently collected such data, we will delete it promptly.
9. Links to Third-Party Sites
Our website may contain links to external websites (including LinkedIn and Instagram). We are not responsible for the privacy practices of such sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised policy will be posted on this page with an updated effective date. Where changes are material, we will take reasonable steps to notify affected individuals.
11. Grievance Officer
In accordance with the Information Technology Act, 2000, and the DPDPA 2023, the name and contact details of our Grievance Officer are:
Grievance Officer
Souvnear Global Private Limited
Chandigarh, India
Email: privacy@souvnear.com
Response time: within 30 days of receipt of complaint
You also have the right to lodge a complaint with the Data Protection Board of India once constituted under the DPDPA 2023, should you believe your rights have been violated.