Privacy Policy

1. Who we are and our role

Stavion Technologies is the technology division of Stavion Private Limited, a company incorporated under the Companies Act, 2013 (CIN: U62013KA2026PTC226686). This Policy explains how we handle personal data collected through staviontech.com and our consulting and business-digitization services.

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as the Data Fiduciary for personal data collected directly through this website. For personal data we handle on behalf of a consulting client, we act as a processor on that client's documented instructions, and the client remains the Data Fiduciary for that data.

2. What we collect

• Information you submit through our chat assistant or contact channels: name, email, phone, company name, and the nature of your enquiry.
• Standard website analytics: pages visited, browser/device type, and approximate location derived from IP address.
• For consulting clients: information necessary to scope and deliver the engagement, as agreed in a separate statement of work.

This website is not directed at children, and we do not knowingly collect personal data of children through it.

3. How we use it, and the basis for doing so

We use this information to respond to enquiries, route leads to the right team (sales, product, or consulting), deliver consulting services under a signed agreement, keep the website secure, comply with applicable law, and improve this website. We process it on the basis of your consent or because you voluntarily provided it for the purpose of your enquiry, and for other legitimate uses recognized under the DPDP Act, such as compliance with legal obligations. We do not sell personal data, and we do not use it for third-party advertising.

4. Sharing and service providers

We share personal data only as necessary to operate our services, and only with service providers who process it on our behalf. These fall into the following categories:

• Communication service providers — to deliver email, SMS, and WhatsApp messages;
• Cloud infrastructure, hosting, and storage providers — to host this website and our systems, run databases, and store files and backups securely;
• Government and regulatory authorities — where disclosure is required by law, court order, or a valid request from a competent authority;
• Professional advisors (auditors, legal counsel) under duties of confidentiality, where necessary.

We engage service providers only after reasonable due diligence, and only on terms that require them to protect personal data, keep it confidential, and process it solely to provide the service we engaged them for. They may not use it for their own purposes. We remain responsible for personal data handled by our service providers on our behalf, as required under the DPDP Act. You may ask us for information about the categories of service providers handling your data.

5. Security

We maintain reasonable security safeguards to protect personal data, including encryption in transit, access controls limited to personnel who need the data, and secure hosting. No system is completely immune to risk. In the event of a personal data breach we will notify affected persons and the Data Protection Board of India as required by the DPDP Act.

6. Retention

We keep enquiry data only for as long as needed to respond to you and manage the resulting relationship, and consulting data for the duration of the engagement and the period required for legal, tax, and accounting purposes. After that we delete or anonymize it, unless the law requires us to keep it.

7. Cross-border data transfer

Some of our service providers may store or process personal data outside India. We make such transfers only to the extent permitted under the DPDP Act, and not to any country or territory restricted by the Government of India by notification. We take reasonable steps, including contractual safeguards, to ensure that personal data transferred outside India continues to be protected.

8. Cookies and similar technologies

This website does not use advertising or cross-site tracking cookies. It uses your browser's local storage only for your own convenience, such as remembering your light/dark theme choice and holding an enquiry if our server is temporarily unreachable. We measure page views with a first-party beacon that sets no cookies and records no personal identifiers beyond standard request data.

9. Your rights

Under the DPDP Act, you have the right to:

• access a summary of the personal data we process and our processing activities;
• request correction, completion, or updating of your personal data;
• request erasure of personal data that is no longer necessary for its purpose, subject to legal retention requirements;
• withdraw consent you have given, as easily as it was given, without affecting processing done before withdrawal;
• have your grievance addressed, as described below; and
• nominate another individual to exercise these rights in the event of your death or incapacity.

To exercise a right, write to us at [email protected]. If your data is held by a consulting client of ours, we will direct your request to that client or support them in fulfilling it.

10. Grievance redressal

If you have a concern about how your personal data has been handled, please contact:

Grievance Officer
Stavion Technologies (a division of Stavion Private Limited)
Email: [email protected]

We will acknowledge grievances promptly and aim to resolve them within 30 days. If you have first raised a grievance and are not satisfied with our response (or receive none within that time), you have the right to file a complaint with the Data Protection Board of India.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy on this page with a revised "Last updated" date, and for material changes we will provide additional notice to affected clients.

12. Contact

For any question about this Policy: [email protected]