1. Who we are
This website, www.ariventa.com, is operated by Ariventa Solutions Private Limited ("Ariventa", "we", "us" or "our"), a private limited company incorporated in India under the Companies Act, 2013.
- Legal name
- Ariventa Solutions Private Limited
- CIN
- U62011HR2025PTC134790
- Registered office
- Gurugram, Haryana 122102, India
- info@ariventa.com
For the personal data described in this policy, Ariventa is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025. This means we decide why and how your personal data is processed, and we are responsible for it. We also follow the Information Technology Act, 2000 and the rules made under it.
2. What this policy covers
This policy applies to personal data we collect when you visit this website, contact us by form, email, phone or WhatsApp, book a call, request a Zoho CRM health check, or engage us for a project. It does not cover third-party websites we link to, or our separate software products (such as Suad Survey), which have their own privacy terms.
3. Personal data we collect
We collect only what we need for the purposes listed in section 4.
| Category | What it includes | Where it comes from |
|---|---|---|
| Enquiry details | Name, work email, phone number (optional), company (optional), the service you are interested in, budget range, timeline, your project description, and the web page you sent the enquiry from. | You, through our contact form, email, phone or WhatsApp. |
| Booking details | Name, email, chosen time slot, time zone and any notes you add. | You, through our call-booking tool. |
| Health-check details | Information about your Zoho CRM setup that you choose to share, and any access you grant us for the review. | You or your organisation. |
| Client and contract details | Names, business contact details and roles of your team members, billing details, GSTIN, and communication records. | You or your organisation, when we work together. |
| Technical data | IP address, browser type, device type, pages requested, date and time of access, and referring page. These are recorded automatically by our web server for security and to keep the site running. | Your browser. |
| Analytics data (only with consent) | Pages visited, time on page, approximate location at city level, device and browser type, and how you reached the site. | Google Analytics cookies, only after you click "Accept". |
We do not ask for sensitive information such as financial account numbers, passwords, health data, biometric data or government ID numbers through this website. Please do not include such information in your message.
4. How and why we use it
| Purpose | Data used | Legal basis under the DPDP Act |
|---|---|---|
| Replying to your enquiry, holding a discovery call and preparing a proposal or quote. | Enquiry and booking details. | Your consent, given when you submit the form or contact us. |
| Carrying out a Zoho CRM health check you requested. | Health-check details. | Your consent. |
| Delivering services, managing the project, invoicing and support. | Client and contract details. | The specified purpose for which you voluntarily provided the data, and our contract with you or your organisation. |
| Keeping the website secure, preventing spam and misuse, and fixing errors. | Technical data. | Legitimate uses permitted by the DPDP Act, including the purpose for which you voluntarily visit the site. |
| Understanding which pages are useful so we can improve the site. | Analytics data. | Your consent through the cookie banner, which you can withdraw at any time. |
| Meeting legal, tax, accounting and regulatory obligations, and responding to lawful requests from authorities. | Client and contract details, and any data the law requires. | Compliance with law. |
We do not sell or rent your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you. We will not send you marketing emails unless you have separately agreed to receive them, and every such email will include a way to unsubscribe.
5. Data we handle for our clients
When we build or support a CRM, AI system, software platform or app for a client, we may process personal data of that client's own customers or staff. In that work, the client is the Data Fiduciary and Ariventa acts as a Data Processor. We process that data only on the client's documented instructions, under a written agreement, and keep it confidential. If your data is held in a system we manage for one of our clients, please contact that organisation first; we will help them respond to your request.
6. Who we share it with
We share personal data only where needed for the purposes above, and only with parties who are bound to protect it:
- Service providers (Data Processors) who help us run our business, including our website hosting provider, our business email provider, our CRM (Zoho), our form-handling and call-booking tools, cloud infrastructure providers, and our accountants and auditors. They may use the data only to provide their services to us.
- Google, for Google Analytics (only if you accept analytics cookies) and Google Fonts, which loads the typefaces on this site and receives your IP address when your browser requests them.
- WhatsApp (Meta), if you choose to message us on WhatsApp. Your messages are then also subject to WhatsApp's own privacy policy.
- Professional advisers, such as lawyers, under a duty of confidentiality.
- Government and law-enforcement authorities, courts or regulators, where required by law or to protect our legal rights.
- A buyer or successor, if Ariventa is involved in a merger, acquisition or sale of assets, under the same protections described here.
7. Processing outside India
Some of our service providers, such as Google and cloud hosting providers, may store or process data on servers outside India. We transfer personal data outside India only as permitted by section 16 of the DPDP Act, and never to a country or territory that the Government of India has restricted. We choose providers that apply security measures at least as protective as those described in this policy.
8. How long we keep it
We keep personal data only for as long as the purpose requires, or as long as the law requires, and then delete or anonymise it.
| Data | How long |
|---|---|
| Enquiries that do not lead to a project | 24 months from our last contact with you, unless you ask us to delete them sooner. |
| Client, contract and invoice records | For the length of our relationship, then 8 years from the end of the relevant financial year, as required by the Companies Act, 2013 and Indian tax laws. |
| Web server and security logs | Up to 12 months, or longer only if needed to investigate a security incident. |
| Google Analytics data | No more than 14 months, after which Google deletes it. |
| Your cookie choice | Stored in your own browser until you clear this site's data. |
9. How we protect it
We use reasonable security practices and procedures in line with the IT Act, 2000 and the DPDP Rules, 2025. These include encrypted (HTTPS) connections, role-based access limited to staff who need the data, multi-factor authentication on business accounts, reputable providers with their own security certifications, and regular review of who has access. Our team is bound by confidentiality obligations.
No method of transmission or storage is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and the people affected, as and when required by the DPDP Act and Rules, and explain what happened, its likely impact and the steps we are taking.
10. Your rights
Under the DPDP Act, you have the right to:
- Access information about the personal data we hold about you, how we process it, and the parties we have shared it with.
- Correct, complete or update personal data that is inaccurate, incomplete or out of date.
- Erase personal data that is no longer needed for the purpose it was collected, unless the law requires us to keep it.
- Withdraw your consent at any time, as easily as you gave it. This does not affect processing already carried out before withdrawal. If you withdraw consent, we may not be able to continue responding to your enquiry.
- Grievance redressal: raise a complaint with us about how we handle your data, and receive a response.
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
To use any of these rights, email info@ariventa.com with the subject "Privacy request". We may ask you to confirm your identity before acting on the request. We do not charge a fee. We will acknowledge your request promptly and respond within 30 days.
When exercising your rights, the DPDP Act also asks you to provide accurate information and not to file false or frivolous complaints.
11. Children's data
This website and our services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.
12. Cookies
The website works without any non-essential cookies. Google Analytics cookies are set only if you click "Accept" in the cookie banner, and you can change your mind at any time. The full list of cookies and similar technologies, and how to control them, is in our cookie policy.
13. Grievance Officer and contact
If you have a question or complaint about this policy or how we handle your personal data, please contact our Grievance Officer:
- Contact
- Grievance Officer, Ariventa Solutions Private Limited
- info@ariventa.com (subject: "Grievance")
- Address
- Gurugram, Haryana 122102, India
- Hours
- Monday to Friday, 10am to 7pm IST
We will acknowledge your grievance within 2 business days and aim to resolve it within 30 days of receipt. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
14. Changes to this policy
We may update this policy when our services, providers or the law change. The latest version will always be on this page with its effective date. If a change materially affects how we use personal data you have already given us, we will tell you before it takes effect and, where required, ask for your consent again.