Legal
Privacy Policy
Contents
1. Who We Are
VARP Techlabs Private Limited (“VARP Techlabs”, “we”, “us”, “our”) is a technology and digital transformation company. This Privacy Policy applies to personal data collected through our website at varptechlabs.com and through our business enquiry processes.
For privacy-related queries, contact us at [email protected].
2. What Data We Collect
We collect only what is necessary for our legitimate business purposes. Specifically:
- Contact information you submit through our enquiry and contact forms: your name, company name, job title, business email address, and the content of your message
- Information about how you interact with our website, including pages visited and time spent (only if analytics are enabled - see Section 8)
- Technical information automatically collected when you visit our website: your IP address, browser type, device type, and operating system
- Any additional information you choose to provide when corresponding with us by email
3. How We Use Your Data
We use the personal data we collect for the following purposes:
- To respond to your enquiry and communicate with you about potential or active engagements
- To assess whether VARP Techlabs's services are a fit for your organisation's requirements
- To fulfil contractual obligations where a services engagement has been agreed
- To comply with our legal obligations under applicable law
- To improve our website and services, where analytics data is collected
4. Legal Basis for Processing
We process your personal data on the following grounds:
- Legitimate interests: to respond to business enquiries and pursue commercial relationships
- Contractual necessity: to fulfil obligations under client service agreements
- Legal obligation: to comply with applicable regulations in jurisdictions where we operate
- Consent: where you have explicitly consented to receiving communications from us
5. How Long We Keep Data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal requirements:
- Enquiry data from web forms: retained for up to 24 months from the date of last contact, unless an engagement was initiated
- Client engagement data: retained for 7 years from the end of the engagement, in accordance with standard commercial record-keeping requirements
- Website analytics data (where applicable): retained for up to 13 months
- Marketing communication preferences: retained until you withdraw consent
7. How We Protect Your Data
VARP Techlabs maintains enterprise-grade security practices aligned with ISO 27001, SOC 2, and applicable data protection regulations. Specific measures include:
- Encryption of data in transit (TLS 1.2+) and at rest
- Role-based access controls limiting data access to authorised personnel only
- Regular security assessments and penetration testing
- Immutable audit logging of all data access events
- Employee security training and background screening procedures
9. Your Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:
- The right to access personal data we hold about you
- The right to correct inaccurate or incomplete personal data
- The right to erasure of your personal data, subject to legal retention requirements
- The right to withdraw consent where processing is based on consent
- The right to grievance redressal
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
If you have submitted an enquiry and would like us to delete your data, please email [email protected] with the subject line “Data Deletion Request”. We will process your request within 30 days.
10. International Data Transfers
VARP Techlabs operates from offices in India, UK, and US. Personal data submitted through our website may be accessed by team members in any of these locations. In all cases, access is limited to authorised personnel and governed by our internal data protection policies.
Where data is transferred outside India, we take appropriate measures to ensure that such transfers comply with the DPDP Act and applicable international data transfer requirements.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Effective” date at the top of this page will be updated whenever material changes are made. We encourage you to review this policy periodically.
Continued use of our website following any update constitutes acceptance of the revised policy.
12. Contact Us
For any questions, requests, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us:
- Email: [email protected]
- Address: VARP Techlabs Private Limited, India