Privacy policy

Summary. We collect the minimum needed to answer your enquiry, run our recruitment process and keep this site working. We do not sell personal data, we do not run advertising trackers, and the only cookie-equivalent storage this site uses is your theme preference.

Scope of this policy

This policy explains how Technoviaa Technologies Pvt. Ltd. ("Technoviaa", "we", "us") handles personal data when you visit this website, contact us, apply for a role, or engage us as a client. It covers our role as a data controller.

Where we process personal data inside software we build or operate for a client, that client is the controller and we act as a processor under their instructions and our data processing agreement. Section client data we process explains that relationship.

Information we collect

Information you give us

Enquiries. Name, work email, company, indicative budget, the service you are interested in and whatever you write in the message field.
Job applications. Contact details, CV or profile, work history, portfolio links and any adjustments you ask us to make to the process.
Client engagements. Business contact details for the people we work with, plus records of the work performed.
Correspondence. Emails and messages you send us, retained so we have context on prior conversations.

Information collected automatically

Server logs. IP address, user agent, requested URL and timestamp, recorded by our hosting provider for security and troubleshooting.
Local storage. Your light or dark theme preference and whether you have dismissed the cookie notice. Both stay in your browser and are never transmitted to us.

We do not use advertising cookies, cross-site trackers, session recording or fingerprinting on this website.

How we use information

To respond to enquiries and prepare proposals or estimates
To assess job applications and communicate with candidates
To deliver, support and invoice contracted work
To secure our systems, investigate abuse and diagnose faults
To meet legal, tax, accounting and audit obligations

We do not use your information to build advertising profiles, and we do not sell or rent personal data to anyone, in any circumstances.

Lawful bases for processing

Where the GDPR or UK GDPR applies, we rely on:

Legitimate interests — responding to business enquiries, securing our infrastructure and maintaining business records, balanced against your rights.
Performance of a contract — delivering and administering services you have engaged us for.
Consent — where you explicitly opt in, for example by ticking the consent box on the contact form. You may withdraw consent at any time.
Legal obligation — retaining financial records and responding to lawful requests.

Where India's Digital Personal Data Protection Act applies, we process on the basis of your consent or a legitimate use recognised by that Act.

We share personal data only with:

Service providers who process data on our behalf under contract — hosting, email, applicant tracking, accounting and error monitoring.
Professional advisers such as auditors and lawyers, where necessary and confidential.
Authorities, where we are legally required to do so. We will notify you unless legally prevented.
An acquirer, in the event of a merger or sale of the business, subject to this policy continuing to apply.

International transfers

We operate from India, the United Kingdom, Singapore and the United States, so personal data may be accessed from those countries. Where data leaves the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses with supplementary technical measures.

Clients who require data to remain in a specific jurisdiction can request EU-only or India-only residency for their engagement. This is agreed in the contract, not left to chance.

How long we keep data

Enquiries that do not proceed — 24 months, then deleted.
Unsuccessful job applications — 12 months, or longer only with your consent.
Client records — for the engagement plus 7 years, to satisfy statutory accounting requirements.
Server logs — 90 days.

How we protect data

We hold ISO 27001 certification and complete an annual SOC 2 Type II audit. Practical controls include encryption in transit and at rest, least-privilege access with mandatory multi-factor authentication, quarterly access reviews, dependency and secret scanning in every pipeline, and a policy of never using production personal data in development environments.

If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Your rights

Subject to local law, you may ask us to:

Confirm what personal data we hold about you and provide a copy
Correct data that is inaccurate or incomplete
Delete data where we no longer have grounds to keep it
Restrict or object to processing based on legitimate interests
Receive your data in a portable, machine-readable format
Withdraw consent, without affecting processing already carried out

Email support@technoviaa.work and we will respond within 30 days. There is no charge. If you are unhappy with our response you may complain to your local supervisory authority — in the UK, the Information Commissioner's Office; in India, the Data Protection Board.

Client data we process

When we build or operate software for a client, personal data inside that system belongs to the client. We process it only as instructed, under a data processing agreement covering confidentiality, sub-processors, security measures, breach notification, audit rights and deletion on termination.

If you are a user of a system we built and want to exercise your rights over your data, contact the organisation that operates the service. We will support them in responding but cannot act on their data without their instruction.

Children

This website and our services are directed at businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with information, contact us and we will delete it.

Changes to this policy

We update this policy when our practices change. The revision date at the top always reflects the current version, and material changes are announced on this page for at least 30 days before taking effect.

Contacting us

Technoviaa Technologies Pvt. Ltd.
14th Floor, Prestige Atrium, 12 Residency Road
Bengaluru 560025, India
Email: support@technoviaa.work

This policy is provided as website content for a demonstration build. Before relying on it commercially, have it reviewed by a qualified data protection adviser against the jurisdictions you actually operate in.