Srivastava Holdings

1. Introduction

Welcome to the "Srivastava Holdings" website (hereinafter referred to as "Website") accessible at "http://srivastava-holdings.vercel.app", operated by "Srivastava Holdings Pvt. Ltd." (hereinafter referred to as "SH"), a company duly incorporated under "Comapnies Act, 2013" of India, hereinafter referred to as "we", "us", or "our".

2. Definition of Key Terms

To ensure clarity and prevent misinterpretation, the following terms shall have the meanings ascribed below, unless the context dictates otherwise:

1. "Personal Data": Any information relating to an identified or identifiable individual, including name, email address, phone number, or other identifiers, as defined under Section 2(20) of the DPDPA.
2. "Sensitive Personal Data or Information (SPDI)": Data such as financial information, passwords, or biometric details, as defined under Rule 3 of the IT Rules, 2011.
3. "Processing": Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion, as per Section 2(24) of the DPDPA.
4. "Data Subject": You, the individual whose Personal Data we process.

3. Acceptance of Policy

1. This document, titled "Privacy Policy" (hereinafter referred to as "Policy"), constitutes a legally binding agreement between you, the user (hereinafter referred to as "you", "your", or "User") and SH.
2. We are committed to protecting your privacy in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and the IT Rules, 2011.
3. This Privacy Policy outlines how we collect, use, process, store, disclose, and protect your personal data when you access or interact with the Website, our social media profiles, or any other engagement with us. It explains our data handling practices, your rights regarding your personal data, and the measures we take to safeguard it. By using the Website or interacting with us, you acknowledge that you have read, understood, and consent to the practices described herein. However, we make no guarantees regarding the absolute security of your data, and our liability is limited as outlined in Section 10.
4. This Privacy Policy is incorporated into and subject to our Terms of Use, available on the Website.
5. We reserve the right to modify, amend, or update this Policy at our sole discretion, with changes becoming effective upon posting on the Website with an updated "Last Updated" date. Your continued use of the Website, interaction with our social media profiles, or engagement with us following such updates constitutes your acceptance of the revised Policy.

4. Data We Collect

1. Data You Provide:
   1. Information submitted via the "Contact Us" section, including, but not limited to, your name, email address, phone number, message content, external links, etc.
   2. Any additional details you voluntarily share during interactions with us, including via Website, social media, email or any other medium.
2. Automatically Collected Data:
   1. Technical data, such as IP address, browser type, device information, operating system, and browsing behavior, collected through cookies or similar technologies.
   2. Usage data, including pages visited, time spent on the Website, and links clicked.
3. Third-Party Data: Information obtained from social media platforms or other third-party sources if you engage with us through those channels.
4. We collect only the data necessary for the purposes outlined in Section 5, in compliance with the data minimization principle under Section 6 of the DPDPA.

5. How We Use Your Data

We process your Personal Data for the following purposes, with your explicit consent where required:

1. Submitted Information:
   1. To read, review, analyze, and use information you submit via the "Contact Us" section in any manner we deem fit, including internal analysis, marketing, research, or publication, as per your consent in the Terms of Use.
   2. To store your contact information indefinitely and contact you at our discretion, whether in response to your submission or for other purposes (e.g., updates, inquiries).
   3. To process your submitted requests, though we make no commitment to fulfill them.
2. Website Operation: To operate, maintain, and improve the Website, including troubleshooting technical issues and analyzing usage patterns.
3. Communication: To respond to your inquiries or provide information you request through various channels.
4. Legal Compliance: To comply with applicable laws, regulations, or legal processes, such as responding to lawful requests under Section 7 of the IT Act.
5. We do not use your data for profiling, or selling to third parties unless explicitly consented to by you.

6. Legal Basis for Processing

We process your Personal Data based on:

1. Consent: Your explicit consent, provided by using the Website or submitting information via "Contact Us" as required under Section 7 of the DPDPA.
2. Legitimate Interest: For operational purposes, such as Website maintenance or analytics, balanced against your rights.
3. Legal Obligation: To comply with Indian laws, including data retention requirements under Section 67C of the IT Act.

7. Data Storage and Retention

1. Storage: Your Personal Data is stored in secure manner, though we do not guarantee regarding the absolute security of your data, and our liability is limited as outlined in section 10. Data submitted via "Contact Us" section may be retained indefinitely, as per your consent.
2. Retention: We retain your data for as long as necessary to fulfill operational purposes.

8. Data Sharing and Disclosure

1. We may disclose your Personal Data in the following circumstances:
   1. Service Providers: To third-party vendors (e.g., hosting providers, analytics firms) acting on our behalf, bound by confidentiality obligations and DPDPA compliance.
   2. Legal Requirements: When required by law, court order, or government authority under Section 7 of the IT Act or Section 10 of the DPDPA.
   3. Business Transfers: In the event of a merger, acquisition, or sale of assets, with your data transferred to the successor entity.
2. We do not share your data with third parties for marketing purposes without your explicit consent.

9. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar technologies to enhance Website functionality and analyze usage. These may collect technical and usage data (e.g., IP address, browsing patterns). You consent to their use by accessing the Website, though you may disable cookies via browser settings, potentially affecting Website performance. Our use complies with Rule 5 of the IT Rules, 2011.

10. Your Rights

1. Under the DPDPA, 2023, you have the following rights regarding your Personal Data:
   1. Right to Access: Request confirmation of whether we process your data and obtain a copy (Section 11).
   2. Right to Correction: Request correction of inaccurate or incomplete data (Section 12).
   3. Right to Erasure: Request deletion of your data, subject to our retention obligations (Section 13).
   4. Right to Withdraw Consent: Withdraw consent for future processing, though this does not affect prior actions (Section 7).
   5. Right to Grievance Redressal: Raise concerns for griveance (Section 14).
2. To exercise these rights, contact us via the "Let's Talk" tab in "Contact Us" section on homepage of our Website. We will respond within 30 days, as per DPDPA timelines, though we reserve the right to refuse requests conflicting with legal obligations.

11. Data Security

We implement reasonable security measures, such as access controls, to protect your Personal Data, in line with Rule 8 of the IT Rules, 2011, and Section 8 of the DPDPA. However, no system is entirely secure, and we do not guarantee protection against breaches, hacking, or unauthorized access beyond our legal duties. You assume the risk of data transmission over the internet.

12. Limitation of Liability

1. To the fullest extent permitted by law:
   1. We shall not be liable for any damages—direct, indirect, incidental, consequential, special, or punitive—arising from the use, misuse, or breach of your Personal Data, including due to technical failures, cyberattacks, or third-party actions.
   2. We bear no responsibility for any loss, harm, or inconvenience resulting from your interaction with the Website, social media profiles, third-party links, or us, through any medium.
   3. We shall never indemnify you or any third party for any claims related to data processing, breaches, or anything else.
2. This limitation applies to all claims, whether in contract, tort, or otherwise, and survives termination of this Privacy Policy.

13. Third-Party Links and Social Media

The Website and our social media profiles may contain links to third-party sites. We are not responsible for their privacy practices, and your interaction with them is at your own risk, as per Section 79 of the IT Act. We bear no liability for data collected by third parties.

14. Children’s Privacy

The Website is not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly, with no liability for prior processing.

15. Grievance Redressal

1. For privacy-related concerns, please message us through the "Let's talk" tab in "Contact Us" section on Website's homepage.
2. We will address complaints within 30 days, as per IT Rules, 2021, though we bear no liability for outcomes.

16. Contact Us

1. Message us through the "Let's Talk" tab of "Contact Us" section on the Website's homepage.
2. We bear no liability for communication failures or delays.