Privacy Policy

1. Introduction

Indevra Consulting ("Company", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website indevraconsulting.com or engage our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

2. Information We Collect

We may collect the following categories of personal information:

• Contact data: name, email address, phone number, company name, and any content you voluntarily submit through our contact or quote request forms.
• Usage data: IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and other diagnostic data collected automatically when you access our website.
• Communications data: records of correspondence when you contact us by email or any other means.
• Cookies and tracking data: information stored via cookies, web beacons, and similar technologies as described in Section 8.

We do not knowingly collect sensitive personal data (e.g., health, financial, or government-issued ID information) through this website.

3. How We Use Your Information

We process your personal data for the following purposes:

• To respond to your inquiries and provide requested services.
• To send quotes, proposals, and project-related communications.
• To manage our contractual obligations and business relationship with you.
• To improve, personalize, and optimize our website and service offerings.
• To comply with applicable legal obligations.
• To protect the rights, property, or safety of Indevra Consulting, our clients, or others.
• To send occasional service-related notices (not marketing) where you have a legitimate expectation of receiving them.

We will never sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our legal bases for processing your personal data are:

• Contractual necessity: processing required to perform a contract with you or to take steps at your request before entering a contract.
• Legitimate interests: operating and improving our website, preventing fraud, and ensuring network security.
• Legal obligation: compliance with applicable laws and regulations.
• Consent: where you have given explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing and Disclosure of Information

We do not share your personal information except in the following limited circumstances:

• Service providers: trusted third-party vendors who assist us in operating our website and business (e.g., email hosting, analytics) under strict confidentiality agreements and data processing agreements where required.
• Legal requirements: when disclosure is required by law, court order, or governmental authority.
• Protection of rights: when necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or threats to physical safety.
• Business transfers: in connection with a merger, acquisition, or sale of all or part of our assets, provided the acquiring party agrees to honor this Privacy Policy.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. Contact form data is typically retained for up to 24 months from the date of submission, after which it is securely deleted or anonymized. Project-related data may be retained for the duration of a legal limitation period applicable in our jurisdiction.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your data where we have no legitimate reason to continue processing it.
• Restriction: request that we limit how we use your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interests.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@indevraconsulting.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

8. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies to enhance your browsing experience. Categories of cookies used:

• Strictly necessary: essential for the website to function and cannot be disabled.
• Analytical/performance: help us understand how visitors interact with the website (e.g., page views, traffic sources). Data is aggregated and anonymous.
• Functional: remember your preferences such as language selection.

You can control cookies through your browser settings. Disabling certain cookies may affect website functionality. We do not currently use advertising or cross-site tracking cookies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where transfers occur outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or we rely on adequacy decisions.

10. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete such information.

12. Third-Party Links

Our website may contain links to third-party websites. We have no control over and assume no responsibility for the content or privacy practices of any third-party site. We encourage you to review the privacy policy of every site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of our website after any changes constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Indevra Consulting

Email: privacy@indevraconsulting.com

Website: indevraconsulting.com