Privacy Policy

1. Who We Are

UVTech Global Private Limited ("UVTech", "we", "our", or "us") is a company registered in India providing ERPNext implementation, custom software development, AI automation, and related technology services. Our registered office is in India.

This Privacy Policy explains how we collect, use, disclose, and protect personal information about visitors to our website at www.uvtechglobal.com and individuals who contact us or engage our services.

2. Information We Collect

We collect the following categories of personal information:

Information you provide directly:

• Contact details: Name, email address, phone number, WhatsApp number
• Company information: Company name, job title, company size, industry
• Communication content: Messages you send us via our contact form, email, or WhatsApp
• Project requirements: Technical specifications and descriptions of services you require
• Account credentials: If you access our project portal or client dashboard

Information collected automatically:

• Usage data: Pages visited, time spent, referring URLs, click paths
• Device information: Browser type, operating system, screen resolution, device type
• IP address: Used to determine approximate geographic location
• Cookies and session data: As described in Section 8

3. How We Collect Information

• Contact forms: When you submit a consultation request or inquiry on our website
• Email and WhatsApp: When you contact us directly at our published contact details
• Analytics tools: We use privacy-respecting analytics to understand website usage patterns
• Project engagements: Information exchanged during the course of delivering our services
• Referrals: If a client or partner refers you to us

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• Responding to enquiries: To reply to consultation requests and answer questions about our services
• Service delivery: To scope, plan, and execute projects you engage us for
• Communication: To send project updates, proposals, invoices, and status reports
• Marketing communications: To send relevant newsletters or service updates — only with your consent, and you may unsubscribe at any time
• Website improvement: To understand how visitors use our website and improve the user experience
• Legal compliance: To meet our obligations under Indian tax law, the IT Act 2000, and other applicable regulations
• Fraud prevention: To detect and prevent fraudulent or abusive use of our services

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Consent: Where you have given us explicit consent (e.g., newsletter sign-up)
• Contract performance: Where processing is necessary to fulfill a project agreement you have with us
• Legitimate interests: Where we have a legitimate business interest that does not override your rights (e.g., improving our website, responding to unsolicited enquiries)
• Legal obligation: Where we are required to process data to comply with applicable law (e.g., GST invoicing, accounting records)

6. Data Sharing & Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Service providers: Trusted vendors who assist in our operations (email delivery, cloud hosting, analytics) under strict data processing agreements
• Professional advisors: Chartered accountants, legal counsel, and auditors bound by confidentiality obligations
• ERPNext / Frappe ecosystem: Frappe Technologies Pvt. Ltd. when reporting bugs or obtaining support on your behalf (with your consent)
• Government authorities: When required to comply with applicable Indian law, court orders, or regulatory requests
• Business transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred — you will be notified in advance

All third-party providers are contractually obligated to process your data only for the specified purpose and to maintain appropriate security standards.

7. Data Storage & Retention

Your personal data is stored on secure servers located in India and/or reputable cloud providers (AWS, Google Cloud). We retain personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Enquiry / lead data: 3 years from last interaction, unless converted to a client engagement
• Client project data: 7 years after project completion to comply with Indian accounting and tax requirements
• Marketing consent records: Until consent is withdrawn, plus 1 year for compliance purposes
• Website analytics: Aggregated data retained indefinitely; individual session data deleted after 26 months

When data is no longer needed, it is securely deleted or anonymised.

8. Cookies & Tracking Technologies

Our website uses the following types of cookies and tracking technologies:

• Essential cookies: Required for the website to function (session management, CSRF protection). These cannot be disabled.
• Analytics cookies: We use privacy-focused analytics to understand traffic patterns. These do not contain personally identifiable information.
• Preference cookies: To remember your settings (e.g., language, timezone) between visits.

We do not use third-party advertising cookies or tracking pixels. You may disable non-essential cookies through your browser settings, though this may affect some website functionality.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Role-based access controls limiting who can access personal data
• Regular security assessments of our systems and third-party providers
• Employee training on data protection best practices
• Incident response procedures for data breaches

Despite these measures, no method of transmission or storage is 100% secure. If you suspect a data breach, please contact us immediately at business@uvtechglobal.com.

10. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data where there is no legitimate basis for retention
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing

To exercise any of these rights, email us at business@uvtechglobal.com with the subject line "Privacy Rights Request". We will respond within 30 days.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

12. International Transfers

Our primary operations are in India. If we transfer your personal data to recipients in other countries (e.g., through cloud service providers), we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data in accordance with applicable Indian and international data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify active clients by email. Your continued use of our website after the updated policy is posted constitutes your acceptance of the changes.

14. Contact Us

For any privacy-related queries, requests, or complaints, please contact our data protection point of contact: