Privacy Policy

Volvent Labs ("we," "us," or "our") is a web and software development practice based in India. We build high-performance websites, bespoke web applications, and digital platforms for businesses—primarily in the United States and the United Kingdom.

This Privacy Policy explains how we collect, use, store, and protect information when you visit our website at volventlabs.com or interact with us through our contact form. It applies to all visitors and prospective clients, regardless of location.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, we encourage you to discontinue use of the site and contact us with your concerns.

We collect a limited set of information necessary to respond to your inquiries and to understand how visitors interact with our website. The information we collect falls into the following categories:

Information You Provide Directly

When you submit our contact form, we collect the following information:

• Your name and email address
• Phone number (optional)
• Company name (optional)
• Project type and budget range
• A description of your project or inquiry

Information Collected Automatically

When you visit our website, certain information is collected automatically through cookies and similar technologies:

• Analytics data: Page views, device type, geographic location (city/country level), referral sources, and session duration, collected via Google Analytics.
• Server logs: IP address, browser type and version, operating system, and access timestamps, collected automatically by our web servers.

We use the information we collect for clearly defined, legitimate purposes. We do not use your information for purposes unrelated to operating and improving our services.

• Responding to inquiries: We use the information you provide through our contact form to understand your project requirements and to communicate with you about potential engagements.
• Website improvement: We analyse aggregated analytics data to understand how visitors use our website, which pages are most visited, and where we can improve the user experience.
• Security and operations: Server log data helps us monitor for security threats, prevent abuse, and ensure the reliable operation of our website.
• Legal obligations: We may process or retain information when required to comply with applicable laws, respond to lawful requests, or protect our legal rights.

Our website uses cookies and similar tracking technologies to collect analytics data and to ensure the website functions correctly. Cookies are small text files stored on your device by your web browser.

We currently use Google Analytics to understand website usage patterns. Google Analytics sets cookies on your device to collect information such as which pages you visit, how long you spend on the site, and how you arrived. This data is aggregated and anonymised before we review it. Google may also process this data in accordance with its own privacy policy.

How to Manage Cookies

You can control or disable cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is set. Please note that disabling cookies may affect certain features of the website.

To opt out of Google Analytics tracking specifically, you can install the Google Analytics Opt-out Browser Add-on, which is available for most major browsers.

We do not sell, rent, or trade your personal information to third parties. We do not share your contact form submissions with anyone outside of Volvent Labs, except in the limited circumstances described below.

• Service providers: We share analytics data with Google through our use of Google Analytics. Google processes this data in accordance with its own privacy policy and terms of service.
• Legal requirements: We may disclose information if required to do so by law, in response to a valid legal process, or to protect the rights, property, or safety of Volvent Labs, our clients, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We would notify affected individuals of any such change in ownership or control.

We retain the information you provide through our contact form for as long as necessary to respond to your inquiry and to maintain a record of our communications. If your inquiry leads to a business engagement, we retain your information for the duration of our professional relationship and for a reasonable period thereafter in accordance with applicable record-keeping obligations.

Analytics data collected through Google Analytics is retained in accordance with the data retention settings configured in our Google Analytics account. Server logs are retained for a limited period for security and operational purposes and are automatically purged on a rolling basis.

If you would like us to delete your personal information, please contact us using the details in the "Contact Us" section below. We will honour such requests unless we are required by law to retain the information.

Depending on your location and applicable law, you may have specific rights regarding the personal information we hold about you. We are committed to respecting the privacy rights of all our users and endeavour to align our practices with applicable requirements in the jurisdictions we serve.

For Users in the European Economic Area and the United Kingdom (GDPR)

If the General Data Protection Regulation (GDPR) or the UK GDPR applies to our processing of your personal data, you may have the right to:

• Access the personal data we hold about you and request a copy
• Rectify inaccurate or incomplete personal data
• Request erasure of your personal data ("right to be forgotten")
• Restrict or object to our processing of your personal data
• Request portability of your data in a structured, commonly used format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

We are not currently established in the EU or UK, and we are working to determine the full extent to which GDPR obligations apply to our specific operations. Regardless, we are committed to honouring the spirit of these rights and will respond to any legitimate request in good faith.

For Users in California (CCPA / CPRA)

If the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to you, you may have the right to:

• Know what personal information we collect, use, and disclose about you
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of your personal information — though we want to be clear that we do not sell or share personal information as those terms are defined under the CCPA/CPRA
• Not be discriminated against for exercising your privacy rights

As a business based in India that does not currently meet the CCPA/CPRA revenue and data-volume thresholds, we may not be directly subject to these regulations at present. However, we respect these rights and will honour reasonable requests from California residents.

For Users in India

India’s Digital Personal Data Protection Act, 2023 (DPDPA) provides rights to individuals whose personal data is processed, including the right to access information, correction, erasure, and grievance redressal. As the regulatory framework continues to evolve with the issuance of rules under the DPDPA, we are monitoring developments and will update our practices accordingly.

Exercising Your Rights

To exercise any of the rights described above, please contact us at hello@volventlabs.com. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.

Volvent Labs is based in India. If you are accessing our website from outside India—including from the United States, the United Kingdom, or the European Economic Area—please be aware that your information may be transferred to, stored, and processed in India or in other jurisdictions where our service providers (such as Google) operate.

These jurisdictions may have data protection laws that differ from those in your country of residence. By submitting information through our website, you acknowledge this transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

Where required by applicable law, we will implement appropriate safeguards—such as standard contractual clauses—to protect data transferred across borders. We are actively evaluating the mechanisms available to us as our client base grows.

We take the security of your information seriously and implement reasonable technical and organisational measures to protect against unauthorised access, alteration, disclosure, or destruction of your personal data. These measures include the use of HTTPS encryption for data in transit, access controls to limit who can view your information, and secure hosting infrastructure.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. We encourage you to take steps to protect your own information, such as using strong passwords and keeping your devices secure.

In the event of a data breach that affects your personal information, we will notify you and any applicable regulatory authorities in accordance with applicable law and within the timeframes required.

Our website and services are directed at businesses and professionals. We do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at hello@volventlabs.com, and we will take steps to delete such information from our records promptly.

If we become aware that we have inadvertently collected personal information from a child under 16, we will delete that information as soon as reasonably practicable.

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make changes, we will update the "Effective" date at the top of this page.

For significant changes that materially affect how we handle your personal information, we will make reasonable efforts to provide notice—such as posting a prominent notice on our website or, where feasible, sending a notification to the email address you have provided.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our website after any changes to this policy constitutes your acceptance of the updated terms.