Privacy Policy

1. Data Controller

evvolv.ai acts as the data controller for personal data collected through this website. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under India's Information Technology Act, 2000.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g., newsletter subscriptions, marketing communications)
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms
• Legal obligation: Where processing is necessary to comply with legal obligations

3. Information We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact information (name, email address, phone number, company name, job title)
• Communication preferences and marketing consents
• Information provided in forms, surveys, or assessments (including AI readiness quiz responses)
• Correspondence and communications with us
• Information provided during consultations or service requests

3.2 Information Collected Automatically

• Technical information including IP address, browser type and version, operating system
• Usage data including pages visited, time spent on pages, click-through rates
• Device information and unique device identifiers
• Cookies and similar tracking technologies (see our Cookie Policy below)

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide and deliver our services and respond to your requests
• To send you newsletters and marketing communications (only with your explicit consent)
• To improve our website, services, and user experience through analytics
• To comply with legal obligations and protect our legitimate business interests
• To prevent fraud, security breaches, and other harmful activities
• To conduct business operations including customer relationship management

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting business, subject to strict confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards
• Consent: With your explicit consent for specific purposes

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK and India. Where we transfer data to countries without an adequacy decision, we implement appropriate safeguards including:

• Standard Contractual Clauses approved by the relevant authorities
• Binding Corporate Rules where applicable
• Certification schemes and codes of conduct

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Contact information: Until you withdraw consent or request deletion
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics: Up to 26 months
• Legal and compliance records: As required by applicable law

8. Your Rights

Under UK GDPR and Indian data protection laws, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the details provided below. We will respond within one month of receiving your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Staff training on data protection and security practices
• Incident response procedures for data breaches

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. Our cookie banner allows you to manage your preferences for different types of cookies:

• Strictly Necessary Cookies: Essential for website functionality
• Analytics Cookies: Help us understand how visitors use our website
• Marketing Cookies: Used to deliver relevant advertisements

You can control cookie settings through your browser preferences or our cookie consent banner.

11. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

13. Complaints and Supervisory Authorities

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• India: Data Protection Authority or relevant state authority

14. Contact Information

For any questions about this privacy policy or to exercise your rights, please contact our Data Protection Officer: