Privacy Policy

1. Overview & Commitment to Privacy

Grova Tech Private Limited (“Grova Tech”, “we”, “us”, or “our”) is a technology and digital accessibility consulting firm registered under the Companies Act, 2013, with its registered office in Mewad Region (Udaipur), Rajasthan, India.

We take your privacy seriously. This Privacy Policy outlines how we collect, process, store, and protect personal data when you visit our website (https://grovatech.com) or engage our services. We strictly adhere to India's Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and international data protection standards including the GDPR and CCPA where applicable.

2. Principles of Data Minimization & Purpose Limitation

Under Section 6 of the DPDP Act 2023, we practice strict data minimization. We only collect personal data that is directly necessary to respond to your commercial inquiries, deliver consulting or accessibility audits, and execute contracts.

Data We Collect Directly From You:

• Contact Information: Full name, professional email address, phone/WhatsApp number, and company/organization name.
• Project Inquiries: Details regarding your software engineering needs, website URL for IAAP audits, budget expectations, and target timelines.
• Communication Records: Messages, correspondence, and feedback submitted via our contact forms or email channels.

We Do NOT Collect: Sensitive personal data (such as financial account passwords, biometric data, religious beliefs, or health records) through our public marketing website.

3. Lawful Basis for Processing

We process your personal data under the following legitimate grounds:

• Consent (Section 6, DPDP Act): When you explicitly tick the consent box on our project inquiry form.
• Contractual Necessity: To take pre-contractual steps at your request or execute an agreed Statement of Work (SOW) or Master Services Agreement (MSA).
• Legal Compliance: To comply with applicable statutory tax, corporate, and regulatory requirements in India.

4. Local Storage, Theme, & Cookie Preferences

Our website utilizes client-side localStorage strictly to remember your accessibility preferences (font scaling, high contrast, dyslexia spacing) and color theme mode (dark vs. light). These settings reside locally on your device and are never transmitted to our servers.

We do not use invasive third-party tracking pixels (such as Meta Pixel or cross-site fingerprinting). For full information, please review our Cookie Policy.

5. Data Storage, Retention, & Security

All submitted inquiries are encrypted in transit using industry-standard Transport Layer Security (TLS 1.3 / SSL) and stored on secure cloud servers with restricted role-based access control.

We retain personal inquiry data only for as long as necessary to fulfill the commercial purpose for which it was collected (typically up to 24 months for ongoing B2B negotiations, or as mandated by statutory accounting regulations in India), after which it is permanently anonymized or erased.

6. Your Rights Under the DPDP Act 2023

As a Data Principal under India's DPDP Act, you possess clear statutory rights:

• Right to Information (Section 11): Right to know the summary of personal data being processed and third parties with whom it has been shared.
• Right to Correction & Erasure (Section 12): Right to correct misleading or inaccurate data, update incomplete data, or request permanent deletion.
• Right to Grievance Redressal (Section 13): Right to have your complaints addressed by our Data Protection Officer within 30 days.
• Right to Withdraw Consent: You may revoke consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.
• Right to Nominate (Section 14): Right to nominate an individual who shall exercise your rights in the event of death or incapacity.

7. Grievance Officer & Data Fiduciary Contact Details

In compliance with Section 13(1) of the DPDP Act 2023 and Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, the designated Grievance Officer details are: