Privacy Policy

Version 0.9 · Last updated 12 October 2026

Who we are

This website, www.solvra.in, is operated by Solvra, a business strategy and operations consultancy based in Pune, India. For the data described below, Solvra decides why and how the data is used (the “controller” under the GDPR and the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023).

Privacy contact: hello@solvra.in. Write “Privacy” in the subject line so it reaches the right person quickly.

What we collect, and why

Activity	Data	Why	Legal basis
Contact / Diagnostic form	Name and email (required); context of your enquiry (required); company, what prompted the enquiry, and preferred contact timing (optional).	To reply to you, understand your situation and arrange a call.	GDPR: steps at your request before a contract (Art. 6(1)(b)) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). DPDP: you voluntarily provide the data for this purpose (s. 7(a)).
Confirmation email	Your name and email.	To confirm we received your message.	As above.
Privacy requests	Name, email, request type and any details you add.	To handle your request and keep a record that we did.	GDPR: legal obligation and legitimate interest. DPDP: your request, and compliance with law.
Email unsubscribe	Your email address.	To make sure we do not email you again after you unsubscribe (a suppression list).	Legitimate interest / legal compliance; DPDP: legitimate use.
Hosting and security logs	IP address, browser type, pages requested and timestamps, kept by our hosting provider.	To deliver the website, prevent abuse and fix faults.	GDPR: legitimate interests (Art. 6(1)(f)). DPDP: legitimate use / security safeguards.
Analytics (optional)	Pages viewed, which calls to action are clicked, approximate location, device and browser. No form content and no names or emails are sent to analytics.	To understand which parts of the website are useful.	Your consent only. Nothing runs unless you accept analytics, and you can withdraw at any time (see the Cookie Policy).

We do not sell personal data. We do not use it for advertising, and we do not make decisions about you by automated means or profile you.

The contact form asks only for what we need to reply. Optional fields can be left empty, and there is no marketing opt-in: submitting an enquiry does not sign you up to anything.

Who receives your data

We use service providers who process data on our behalf, only for the purposes above:

Vercel Inc. (United States): website hosting, server logs and, if you allow analytics, Vercel Web Analytics.
Resend (United States): delivery of the notification and confirmation emails generated by the contact form.
Google: our email service receives enquiry emails, and Google Analytics receives analytics data only if you allow analytics.
Our professional advisers and, where the law requires, authorities, when we are legally obliged to disclose.

Where you ask us to involve a specialist partner in an engagement, we will tell you first and share only what is needed.

Transfers outside India and the EEA

Our providers process data on servers outside India, including in the United States. Where the GDPR applies to you, we rely on the safeguards our providers make available (for example the EU Standard Contractual Clauses or the EU–US Data Privacy Framework, where a provider is certified). Under the DPDP Act we will follow any restriction on transfers to particular countries that the Government of India notifies.

How long we keep it

We keep enquiry details for as long as needed to respond and manage the relationship that follows. After that we delete or anonymise them unless we need to keep them for a contract, a legal, tax or accounting obligation, or to deal with a dispute. Analytics data is kept according to the settings of the analytics providers. Records of privacy requests are kept so we can show we handled them. You can ask us to delete your enquiry earlier (see your rights below).

Your rights

Depending on where you are and which law applies to your data, you may have the right to: access your data; have it corrected or completed; have it erased; restrict or object to our processing; receive it in a portable format; withdraw consent at any time (withdrawal does not affect earlier lawful processing); and complain to a regulator.

Under India's DPDP Act you may also ask for a summary of the personal data we process and who we share it with, ask for correction, completion, updating or erasure, nominate another person to exercise your rights if you die or become incapacitated, and use our grievance process. Some of these rights take effect only when the relevant parts of the Act and Rules come into force; we will honour them as soon as they do and are happy to act earlier.

To exercise any right, use the form on our Your data rights page or email hello@solvra.in. We may need to verify your identity first. We respond within one month where the GDPR applies, and within the period required by applicable law in every case.

Complaints and grievances

Please raise concerns with us first at hello@solvra.in so we can fix them. If you are in the EEA or UK you can also complain to your local data protection authority. In India, you may approach the Data Protection Board of India once that route is operative, after using our grievance process.

Security

Data is encrypted in transit (HTTPS) and form submissions are rate-limited to reduce abuse. No system is perfectly secure; if a personal data breach affects you we will notify you and the relevant authority as the applicable law requires.

Children

This website is for business users and is not directed at children. We do not knowingly collect children's personal data. If you believe a child has sent us data, email us and we will delete it.

Changes to this policy

When we change what we do with personal data, we will update this page and its date. If a change needs your consent, we will ask again.