1. Introduction
This Privacy Policy explains how VeroMinds Private Limited (“VeroMinds”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data when you visit our website, contact us, submit an inquiry, engage with our services or otherwise interact with us. We are committed to handling personal data responsibly and in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and rules and notifications brought into force under it, to the extent applicable.
2. Scope
This Policy applies to personal data processed in connection with our website and our business-facing activities, including inquiries about business transformation, technology advisory, AI readiness, operations excellence, project and quality management, implementation governance and related consulting services. Where we process personal data on behalf of a client under a separate agreement, the applicable client agreement and documented instructions may govern that processing.
3. Personal Data We May Collect
Depending on your interaction with us, we may collect: (a) identity and professional details such as name, designation, employer and business profile; (b) contact details such as business email address, telephone number and business address; (c) inquiry and communication information, including messages, meeting requests and feedback; (d) engagement information needed to assess or deliver services; (e) website and technical information such as IP address, browser type, device information, pages visited, approximate location derived from technical data, referral source and log data; and (f) marketing preferences and consent records. Please do not submit sensitive, confidential or client-restricted information through public website forms unless specifically requested through an appropriate secure channel.
4. How We Collect Information
We may collect information directly from you when you complete a form, email or call us, subscribe to updates, attend an event or engage our services. We may also receive business contact information from your organization, professional networking platforms, publicly available sources, referrals and service providers, subject to applicable law. Certain technical information may be collected automatically through cookies, server logs and similar technologies.
5. Purposes of Processing
We may use personal data to: respond to inquiries and requests; assess potential business engagements; provide, administer and improve our services; communicate about proposals, contracts, projects and service delivery; manage customer, supplier and partner relationships; maintain security and prevent fraud or misuse; operate, troubleshoot and improve our website; send relevant business updates or marketing communications where permitted; comply with legal, regulatory, accounting and governance obligations; establish, exercise or defend legal claims; and perform other purposes disclosed at the time of collection or otherwise permitted by law.
6. Legal Basis and Consent
We process personal data on the basis permitted by applicable law. Where the DPDP Act requires consent, we will seek consent that is free, specific, informed, unconditional and unambiguous, through a clear affirmative action, and provide a means to withdraw it. Certain processing may be undertaken for a legitimate use or other permitted ground recognized by applicable law. Withdrawal of consent will not affect processing already undertaken lawfully before withdrawal and may affect our ability to provide a requested service.
7. Sharing and Disclosure
We do not sell personal data. We may share relevant information with our employees and authorized personnel, professional advisers, technology and hosting providers, website analytics or communication providers, implementation partners, subcontractors and other vendors who support our operations, subject to appropriate confidentiality and security requirements. We may also disclose information where required by law, court order or competent authority, or where reasonably necessary to protect our rights, users, systems or business. If VeroMinds is involved in a merger, restructuring or business transfer, information may be transferred subject to appropriate safeguards and applicable law.
8. Cross-Border Processing
Our service providers or business operations may involve processing or storage of information outside India. Any such transfer will be undertaken subject to applicable Indian law, including any restrictions or conditions notified by the competent government authority. We will take reasonable steps to ensure that service providers are subject to appropriate contractual and security obligations.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including responding to inquiries, managing an engagement, maintaining business records, meeting statutory retention requirements, resolving disputes and enforcing agreements. Retention periods vary by data category and context. When information is no longer required, we will take reasonable steps to erase it or render it irreversibly anonymous, subject to lawful retention requirements and backup-cycle limitations.
10. Security
We maintain reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction. Measures may include access controls, authentication, confidentiality obligations, secure systems, vendor oversight, backups and incident-response procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights and Choices
Subject to applicable law and its commencement, you may have rights to obtain information about processing, seek correction or erasure, withdraw consent, raise a grievance and nominate another individual to exercise rights in the event of death or incapacity. You may also opt out of marketing communications using the unsubscribe mechanism or by contacting us. We may need to verify your identity and may retain certain information where legally permitted or required. Rights and response timelines will be applied in accordance with the provisions in force at the relevant time.
12. Children’s Personal Data
Our website and services are intended for businesses and adults and are not directed at children. We do not knowingly solicit children’s personal data through the website. If you believe a child’s personal data has been provided to us, please contact us so that we can assess and take appropriate action in accordance with applicable law.
13. Third-Party Websites and Services
Our website may contain links to third-party websites, platforms or services. Their privacy practices are governed by their own policies. We are not responsible for the content, security or privacy practices of third parties. We encourage you to review their policies before providing information.
14. Cookies and Similar Technologies
We may use cookies and similar technologies to enable essential website functionality, remember preferences, understand website usage and improve performance. Where required, non-essential cookies will be used only after obtaining the required consent. Please refer to our separate Cookie Policy for further information and available controls.
15. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, services, technology or applicable law. The revised version will be posted on our website with an updated effective or revision date. Your continued use of the website after publication of changes indicates that you have read the updated Policy, without overriding any consent requirement under applicable law.
16. Contact and Grievances
For privacy-related questions, requests or grievances, contact:
Naveen Ranganna
Director & Compliance Officer
VeroMinds Private Limited
#55, 3rd Cross, 3rd Main Road, VHBCS Layout, Mahalakshmipuram, Bengaluru, Karnataka, India – 560086.
Email: privacy@verominds.in
Phone: +91-70198 53302.
We will acknowledge and address grievances within the timelines prescribed by applicable law. Where no specific statutory timeline applies, we aim to acknowledge a grievance within 7 working days and resolve it within 30 calendar days, where practicable.