Privacy Policy

This policy covers personal data we handle through this website and in the course of providing our services. Vertasya Private Limited is the data fiduciary for that data under the Digital Personal Data Protection Act, 2023.

When you contact us

Our contact form asks for your name, work email address, an optional mobile number, the subject of your enquiry and your message. We collect these because you chose to send them.

When you use the site

Our servers record standard technical information — IP address, browser and device type, pages requested and timestamps — in access logs. This is ordinary web server operation, used to keep the site available and secure.

During an engagement

Delivering a project may mean we process data held in your systems, which can include personal data about your staff or customers. We process that only on your instructions and only for the engagement. Where required we will enter a separate data processing agreement.

• To reply to your enquiry and work out whether we are a fit — on the basis of the consent you gave by submitting the form.
• To deliver and administer an engagement, including invoicing — on the basis of performing our contract with you.
• To keep the site secure and working — on the basis of our legitimate interest in operating it.
• To meet legal obligations, including tax, accounting and company law record-keeping.

We do not sell personal data, and we do not use enquiry details for unrelated marketing.

We share personal data only with service providers who help us operate — hosting and infrastructure, email delivery, and payment processing — and only what each needs to do its job. Payment card details are handled entirely by our payment gateway and are never received or stored by us. We also disclose data where the law requires it.

Some of these providers operate outside India. Where data is transferred abroad we use providers offering appropriate safeguards, and transfer only what the service requires.

We use only what is needed to serve the site and keep it functioning. We do not use advertising or cross-site tracking cookies. Your browser can block or delete cookies; the site is built to work without them.

• Enquiries that do not become engagements — up to 24 months, then deleted.
• Client and engagement records — for the engagement, and as long afterwards as tax, accounting and company law require.
• Server access logs — a rolling short window, for security and diagnostics.

The site is served over HTTPS. Access to systems holding personal data is restricted to people who need it, and we review that access. No system is perfectly secure, but we design for the failure cases, and will notify you and the authorities of a reportable breach as the law requires.

You may ask us to give you a copy of your personal data, correct or complete it, erase it where we have no continuing basis to hold it, or withdraw a consent you previously gave. You may also nominate someone to exercise these rights on your behalf. Write to the grievance officer below, and we will respond within the statutory period.

If something about how we handle your data concerns you, raise it with Vasanth Kumar Pavan Kumar at info@vertasya.com. If you remain unsatisfied, you may complain to the Data Protection Board of India.

Our services are provided to businesses. We do not knowingly collect the personal data of children.

We may update this policy. The date at the top of this page shows when it last changed, and material changes will be flagged here.