What we collect, and what we do not.

§ 01

Data we collect

What you type into our forms, plus the standard server logs any website generates.

We collect what you give us directly — name, email, phone and message when you submit a contact, application or newsletter form; and project, billing and communication data if you become a client with Client Portal access.

We also receive standard server logs generated by any web request: IP address, browser user agent and timestamps. We do not buy, scrape or otherwise acquire personal data about you from third parties.

§ 02

How we use it

To reply to you, deliver and invoice work, run the Client Portal, and send only the email you asked for.

We use your data to respond to enquiries and applications, deliver and invoice contracted projects, operate the Client Portal (authentication, project updates, approvals and documents), and send transactional email such as receipts, status updates and password resets.

Newsletter email is sent only to addresses that explicitly opted in, and never covers anything beyond what you signed up for.

§ 03

Legal basis for processing

Consent, contract, or legitimate interest — whichever is narrowest for the purpose.

Where the GDPR applies, we process your data under one of three bases: your consent (newsletter signup, cookie preferences), performance of a contract (delivering a project you have engaged us for), or our legitimate interest in responding to enquiries and keeping our services secure.

Where more than one basis could apply, we rely on the narrowest one that fits the purpose.

§ 04

Third parties and processors

We never sell your data. A short list of infrastructure providers process it on our instructions.

We do not sell, rent or trade your personal information, and we do not share it with third parties for cross-context behavioural advertising.

We use a small set of infrastructure processors to run the business, each of which processes data only on our instructions and under its own security commitments:

Cloud hosting and application platform

Runs the website and Client Portal, and stores your account and project records

Content delivery network

Serves the website quickly from a location near you

Payment processor

Handles card and online payments where applicable

Transactional email provider

Delivers receipts, notifications and password resets

We name the categories rather than the individual vendors because our providers can change. If you need the current list — for a vendor assessment or a DPA — email us and we will send it.

§ 05

Your rights under the GDPR

Access, correct, delete, restrict, port or object — and complain to your regulator if we get it wrong.

If you are in the EU or UK, you have the right to:

Access

Obtain a copy of the personal data we hold about you

Rectification

Have inaccurate or incomplete data corrected

Erasure

Request deletion of your data where no overriding obligation applies

Restriction and objection

Limit or object to how we process your data

Portability

Receive your data in a structured, machine-readable format

Withdraw consent

At any time, without affecting processing already carried out

You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these, use the contact details at the end of this document.

§ 06

Your rights under the CCPA and CPRA

California residents can know, delete and correct. There is nothing to opt out of, because we do not sell data.

If you are a California resident, you have the right to know what personal information we hold, to request its deletion, and to correct inaccuracies.

You also have the right to opt out of the sale or sharing of personal information. That right is moot here: we do not sell personal information, and we do not share it with third parties for cross-context behavioural advertising.

Exercising any of these rights will never result in different pricing, different service levels, or any other form of discrimination.

§ 07

Data retention

Enquiries for as long as we might reasonably follow up; client records for as long as the law requires.

Contact and application submissions are kept for as long as reasonably needed to respond, plus a short window afterwards in case you follow up.

Client Portal and billing data is kept for the life of the engagement and afterwards for as long as accounting, tax and legal record-keeping requires. Newsletter addresses are kept until you unsubscribe.

§ 08

International transfers

We are in India and our providers are global; transfers rely on their standard safeguards.

We operate from Chennai, India, and work with clients internationally. Our infrastructure providers may process and store data in regions outside your own, under their respective standard contractual clauses and security safeguards.

§ 09

Security

Encrypted in transit and at rest, access restricted by role, dependencies patched on an ongoing basis.

We rely on our infrastructure providers’ encryption in transit (TLS/HTTPS) and at rest, and restrict Client Portal access by authenticated role.

No system is perfectly secure. We reduce exposure by designing access controls narrowly, auditing dependencies continuously and patching on an ongoing basis rather than on a release cycle.

§ 10

Children’s privacy

This is a business service. We do not knowingly collect data from anyone under 16.

Our services are directed at businesses and professionals, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us data, contact us and we will remove it.

§ 11

Changes to this policy

The effective date at the top always tells you which version you are reading.

We may update this policy as our services or legal obligations change. The effective date at the top of this document always reflects the current version, and material changes will be summarised there.

§ 12

Exercising your rights

Email contact@ivnextech.com. We acknowledge within a few business days.

For access, correction, deletion or any other request under this policy, email contact@ivnextech.com.

We aim to acknowledge requests within a few business days and to resolve them within the timeframe required by applicable law.