Privacy Policy

1. Introduction

Visitors to zuvenova.world leave some information behind, and part of it identifies a person. The sections that follow describe what Zuvenova does with it, on what grounds, and for how long it stays with us.

Your rights under statute stand on their own. What follows describes how we meet them; it cannot narrow them, and any conflict between the two is settled in favour of the statute.

Questions about any sentence here are welcome and cost nothing to ask. A short reply from us is better than a wrong assumption on your part.

2. Who is responsible for your data

Zuvenova is the controller for everything described in this document. Postal and email details appear in the final section.

Being the controller means the decisions about your data, and the accountability for them, sit with us rather than with our suppliers.

Firms brought in to run part of the service receive written instructions and nothing beyond them. Putting your data to a purpose of their own is not permitted.

3. Data we collect

Information reaching us falls into two groups, and the difference between them matters.

Information you give us. A form submission carries the fields you filled in: the name you used, an address for the reply, a telephone number where you added one, and the question you asked.

Records kept by the site. Some data arrives without anyone typing it, because a browser must identify itself for a page to be delivered at all.

• the network address of the connection, shortened where the whole of it is not needed
• browser type and version, and the operating system it runs on
• the page requested, the page you arrived from, and the time of the request
• viewport dimensions and preferred language, applied when deciding how the page is drawn
• on submission of a form, the moment of sending and proof that permission was granted

We deliberately collect no special category data. If you send it to us unprompted in free text, we delete it once the enquiry is closed.

What we hold is what you gave us and what the server logged. Nothing has arrived from a data vendor or from a scrape of public sources.

4. Legal bases for processing

Processing without a lawful basis is not permitted, so each activity here maps to one of the following:

• Consent — asked for before optional cookies are set and before any promotional email goes out. You may take it back whenever you like, by the same route you gave it.
• Performance of a contract — where you have asked us for something and we need your details to deliver it, or to take steps before entering an agreement.
• Legitimate interests — keeping the site safe from attack, spotting fraudulent submissions, and counting page use in totals. Each interest is weighed against your rights, and yours win where the two conflict.
• Legal obligation — where retention or disclosure is required of us by law.

Should you object to processing we base on legitimate interests, the burden falls on us: either we show grounds that outweigh your objection, or we stop.

5. How we use your data

What follows is the whole of it. A purpose outside this list would oblige us to come back to you before anything happened.

• answering enquiries and continuing a conversation you started
• supplying whatever was asked for in the request itself
• maintaining uptime and safety, which includes turning away automated traffic that causes harm
• measuring use at the level of the whole audience in order to find and fix weak pages
• keeping the records that legislation requires us to keep

We do not sell personal data. We have never done so and the business does not depend on it.

We do not use your data to build advertising profiles or to track you across other websites.

6. Sharing and disclosure

Only staff whose duties require it, and the providers running the infrastructure behind the site, can reach personal data at all.

• Hosting and infrastructure — the company whose servers hold the site files and the request records.
• Email delivery — whoever transports the mail we send and the replies that come back.
• Analytics — where enabled and consented to, a measurement service that receives aggregate usage data.
• Outside specialists — solicitors or accountants, and only for the particular matter they are advising on.
• Authorities — on production of an order that we are legally bound to obey.

A contract sits behind every supplier relationship, setting out what may be done with the data and the standard of security expected.

If the business is ever sold or reorganised, personal data may transfer as part of it. Any acquirer would be bound by this policy until you are told otherwise.

7. How long we keep data

Nothing is stored on the basis that it might one day prove useful. A file stays while the job it was collected for is still running, and is removed afterwards.

• Enquiries and correspondence — kept while the matter is open and for a reasonable period afterwards, in case you return to the same subject.
• Server logs — retained for a short operational window, then rotated and discarded.
• Consent records — kept for as long as we rely on the consent, plus the period needed to demonstrate we had it.
• Records required by law — kept for the statutory period and no longer.

When a retention period ends, data is deleted or irreversibly anonymised so it can no longer be linked to you.

8. International transfers

Part of the technical work behind this site happens on machines in other countries. A move of that kind counts as a transfer under applicable data protection law, and is permitted only on the conditions set out there.

• the destination being one already accepted as offering equivalent protection
• otherwise, the model clauses concluded with the supplier before any data moves
• encryption of the material in storage and on the wire, whichever route it takes

Ask about any specific transfer and we will name the mechanism it relies on.

9. Your rights

Under applicable data protection law and equivalent laws you have the following rights, and exercising any of them is free:

• Access — confirmation of what is held about you, together with a copy and an account of its use.
• Correction — inaccurate entries put right, and gaps in a record filled in.
• Deletion — removal of material we can no longer justify holding.
• Restriction — processing held still while a question over accuracy or lawfulness is settled.
• Portability — what you supplied returned in a common electronic form that another provider can read.
• Objection — a challenge to processing we justify by legitimate interests, and an unconditional stop on marketing.
• Withdrawal of consent — permission revoked whenever you choose, with everything done beforehand remaining valid.

Use the contact details at the end of the document. Ordinary requests are dealt with well inside the month allowed, and anything unusual brings a note from us saying how long it will take.

We may ask you to confirm your identity before acting. That is a safeguard for you, not an obstacle: it stops someone else obtaining your data by asking for it.

Should the outcome leave you unhappy, the competent data protection authority for your country will hear the matter. Coming back to us beforehand is welcome, though nothing obliges you to.

10. Security

Security is handled as an ongoing obligation rather than a one-off configuration.

• transport security on every page, form and file the site serves
• permissions granted by name and taken back promptly when someone stops needing them
• a boundary between what visitors can reach and where correspondence is held
• a patching routine covering the server itself and the libraries the site depends on
• backup copies kept out of general reach and verified by trial restoration

Residual risk remains whatever is done, and pretending otherwise would be the least trustworthy line in this document. Our commitment is to tell the competent data protection authority about a serious breach, and to tell you when the rules oblige us to.

11. Cookies and similar technologies

A cookie is a short piece of text the browser keeps on our behalf. The ones that hold the site together are unavoidable; measurement cookies are set only after you agree.

Nothing here reads inaction as a yes, and a refusal is remembered instead of being asked again at every step.

A separate cookie policy lists the individual groups, what each is for and how long each stays.

12. Children

The site is not aimed at children and is not designed to appeal to them.

Where a parent or guardian tells us that a child has been in touch, the record is taken out as soon as we can identify it.

13. What we do not collect

Policies usually describe collection in terms wide enough to permit almost anything. It seems more useful to state the boundaries instead.

• No precise location is requested or derived. A country can be inferred from an address on the network, and that is the limit of it.
• There is no payment path on these pages, and correspondingly no stored payment data.
• No identity document is requested, scanned or retained at any point.
• Profiles are not topped up from third-party datasets; what we hold is what reached us directly.

A change of approach would be written here in advance of being put into effect.

14. Keeping what we hold accurate

The cost of an error falls on the person the record is about, so putting one right is a normal operation here rather than an exception.

A correction needs only the error and its replacement. Once made, it is passed on to anybody who was given the earlier version.

Where we disagree about whether a record is accurate, you can ask that its use be restricted while the point is examined, and we will note the dispute alongside the entry.

15. Changes to this policy

When our handling of data shifts, the wording here shifts with it, and the foot of the page carries the date that version took effect.

The test is whether the change takes something away from you. If it does, you are told so on the site; if it only tidies the wording, the change is made and left at that.

16. Contact

Questions about this document, or a request concerning your data, can be sent to the address below. We answer written enquiries in the order received and aim to reply within one calendar month.

Zuvenova
1801 Ujjain - Makshi Highway
456010 Ujjain
India
[email protected]
+91 734 5453759