GDPR & Data Privacy
We take your privacy seriously. This page explains how we collect, process, and protect your personal data in compliance with GDPR and Indian data protection laws.
Your Privacy Rights
Right to Access
You have the right to request a copy of all personal data we hold about you. We will provide this within 30 days of a verified request.
Right to Rectification
You can request correction of inaccurate or incomplete personal data we hold about you at any time.
Right to Erasure
You can request deletion of your personal data, subject to legal retention requirements. We will delete within 30 days.
Right to Object
You can object to processing of your data for direct marketing or where processing is based on legitimate interests.
Right to Portability
You can request your personal data in a structured, machine-readable format to transfer to another service provider.
Right to Restrict
You can request restriction of processing while we verify the accuracy of data or assess an objection.
Data We Collect
We collect: Contact information (name, email, phone) when you fill forms on our website. Usage data (pages visited, session duration, device type) via Google Analytics. Payment information (processed securely by Razorpay/Stripe — we never store card details). Communications (emails and chat messages you send us). For SaaS product users: business data you enter into our products.
How We Use Your Data
We use your data to: Respond to your inquiries and provide our services. Process payments for services and subscriptions. Send project-related communications. Provide support for our products. Send marketing communications (only with your consent). Improve our website and services through analytics. Meet our legal and regulatory obligations.
Data Retention
Contact form submissions are retained for 3 years. Project communications are retained for 7 years (legal requirement). SaaS product data is retained for the duration of your subscription plus 90 days after termination. Analytics data is retained for 26 months (Google Analytics default). You can request deletion of your data at any time by contacting us.
Data Security
All data is encrypted in transit using TLS 1.3 and at rest using AES-256. We use access controls to limit data access to authorized personnel only. Regular security audits and penetration testing are performed. Incident response procedures are in place for data breach notification within 72 hours as required by GDPR.
Third-Party Processors
We use the following third-party processors: Google (Analytics, Ads, Workspace), Amazon Web Services (Cloud hosting), Razorpay/Stripe (Payment processing), Tawk.to (Live chat). Each processor is bound by Data Processing Agreements ensuring GDPR compliance. We do not sell your personal data to any third party.
Contact Our DPO
For any privacy-related requests or complaints, contact: Data Privacy Officer, Vewonex Wide Technology, Plot No. 49C, Rajendra Path, Sanjay Nagar D, Jhotwara, Jaipur, Rajasthan 302012. Email: contact@vewonex.com. We will respond within 30 days.
