Privacy Policy

1. Overview

Nexvias Solutions LLP ("Nexvias", "we", "us", "our") provides legal, tax, regulatory compliance, intellectual property, management consultancy, technology law, and training services to startups, SMEs, enterprises and individuals. This policy explains what personal data we collect through nexvias.in and our client engagements, how we use it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

2. Our role

When you fill out our contact form or browse nexvias.in, we act as a Data Fiduciary under the DPDP Act: we decide why and how your personal data is processed. When we're engaged as your consultant for a specific mandate (drafting a contract, filing a trademark, running a DPDP audit for your business), we process the personal data in the documents and information you share with us solely to deliver that engagement, under the terms of our service agreement.

3. Personal data we collect

• Through our website contact form: full name, email address, phone number, the service you're enquiring about, and your enquiry details.
• Through a client engagement: whatever personal data appears in the documents, contracts, registers or communications you share with us to deliver the mandate (for example, names and contact details of your directors, employees or customers, where relevant to the work).
• Automatically, via cookies: IP address, browser and device type, pages visited, and session identifiers, but only once you've consented, per our cookie policy.

4. Why we collect it

• To respond to your enquiry and follow up about the service you asked about
• To deliver the specific legal, tax, compliance or consultancy engagement you've instructed us for
• To invoice you and meet our own statutory record-keeping obligations
• To improve nexvias.in, once analytics cookies are consented to

5. Cookies

nexvias.in uses cookies only after you consent via our cookie banner. Strictly necessary cookies (keeping the site working) are always on; functional, analytics or marketing cookies load only once you opt in, and you can change your choice at any time via the "Cookie settings" link in the footer.

6. Who we share it with

We do not sell your personal data. We share it only with:

• Vetted service providers who support our practice (for example, our accounting, email or case-management tools), bound by confidentiality obligations
• Regulators, courts or government authorities, where legally required
• A successor entity, if Nexvias is ever acquired or restructured, under the same confidentiality commitments

Some tools we use process data outside India: currently Google Analytics (Google LLC) and Microsoft Clarity (Microsoft Corporation), both for site analytics, once you've consented to analytics cookies. We only use providers meeting DPDP Act-equivalent safeguards, and we'll update this list if that changes.

7. How long we keep it

• Website enquiry data: kept for 12 months from your last contact with us, then deleted, unless you become a client.
• Client engagement data: kept for the engagement's duration plus 7 years, to meet our own legal and professional record-keeping obligations, after which it is securely deleted.

You can ask us to delete your enquiry data sooner at any time. See Section 9.

8. Children's data

Our services are directed at businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has shared data with us, contact our Grievance Officer below and we'll delete it.

9. Your rights as a Data Principal

Under the DPDP Act, you can:

• Ask for a summary of the personal data we hold about you and how it's been processed
• Ask us to correct or update inaccurate or incomplete data
• Ask us to erase your data, where we're not required to keep it for a legal or contractual reason
• Withdraw any consent you've given us, as easily as you gave it
• Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
• Raise a grievance with our Grievance Officer (Section 10) and, if unresolved, with the Data Protection Board of India

To exercise any of these rights, email our Grievance Officer at dpo@nexvias.in with your name and the data you're referring to.

10. Grievance Officer / Data Protection Officer

Nexvias Solutions LLP is the same legal entity behind Confirmita. Any question, complaint or rights request under this policy or the DPDP Act can be raised with:

We will acknowledge your request within 7 business days and resolve it within 30 days. If you're not satisfied with our response, you may raise your grievance with the Data Protection Board of India.