Privacy Policy.

This policy explains how Vantrock Ventures LLP ("Vantrock", "we", "us") collects, uses, and protects personal data when you visit vantrock.com or contact us through this website. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are.

Vantrock Ventures LLP is a limited liability partnership registered in India under the Limited Liability Partnership Act, 2008, with its registered office in Mumbai. For the purposes of the DPDP Act, Vantrock is the Data Fiduciary in respect of personal data processed through this website.

2. What we collect.

We collect personal data in two ways:

Information you give us directly.

When you submit our Application Form or Enquiry Form, we collect:

• Name
• Email address
• Mobile number
• LinkedIn URL (Application Form only)
• Company or family office name (Enquiry Form only)
• The nature of your enquiry (Enquiry Form only)
• Any additional information you choose to include in the free-text note field

Information collected automatically.

When you visit the site, we and our analytics provider collect:

• IP address (anonymised by Google Analytics)
• Browser type, device type, and operating system
• Pages viewed and time spent on the site
• Referring website
• Approximate location (city-level)

This information is collected through cookies and similar technologies only after you accept analytics cookies on first visit. See Section 7 for details.

3. Why we use it.

We process your personal data only for the following purposes:

• To respond to your enquiry or application. Form submissions are used solely to contact you about the matter you have raised.
• To improve the website. Analytics data is used in aggregate to understand how visitors engage with the site.
• To comply with legal obligations. Where required by Indian law, we may retain or disclose data to satisfy regulatory, tax, or law-enforcement requests.

We do not sell personal data. We do not use your data for advertising or profiling.

4. Legal basis for processing.

Under the DPDP Act, we rely on your consent as the legal basis for processing personal data submitted through our forms. By submitting a form, you confirm that consent. You may withdraw consent at any time by writing to privacy@vantrock.com.

5. Who we share it with.

We share personal data only with the following categories of processors, and only to the extent necessary to operate the website:

• Formspree (Formspree, Inc., United States) - processes form submissions and forwards them to our email inboxes. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.
• Google Analytics 4 (Google LLC, United States) - collects anonymised website usage data. Google's privacy policy is available at policies.google.com/privacy.
• Vercel (Vercel Inc., United States) - hosts the website infrastructure.
• Cloudflare (Cloudflare, Inc., United States) - provides DNS and basic security services.
• Google Workspace (Google LLC, United States) - handles email correspondence sent to our vantrock.com addresses.

We do not share personal data with any other third parties for their own purposes.

6. Cross-border transfer.

The processors listed above are based outside India, primarily in the United States. By submitting personal data through this website, you consent to its transfer to and processing in those jurisdictions. We take reasonable steps to ensure all processors maintain appropriate safeguards.

7. Cookies.

We use cookies for two purposes:

• Essential cookies. Required for the website to function, including storing your cookie consent choice. These are always active.
• Analytics cookies. Set by Google Analytics 4 to measure site usage. These are only set after you accept them via the cookie banner.

You can change your cookie preferences at any time by clearing your browser's cookies for this site and revisiting the homepage.

8. How long we keep it.

Form submissions are retained for as long as necessary to address your enquiry, and thereafter for up to three years for our records and any potential follow-up. Analytics data is retained for 14 months in line with the GA4 default.

You may request earlier deletion by writing to privacy@vantrock.com.

9. How we protect it.

We use reasonable technical and organisational measures to safeguard personal data, including HTTPS encryption across the website, restricted access to form submission inboxes, and processors that meet recognised security standards. No system is perfectly secure, and we cannot guarantee absolute protection.

10. Your rights.

Under the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data, subject to our legal retention obligations
• Withdraw consent at any time
• Nominate another individual to exercise these rights in the event of your death or incapacity
• File a grievance with our Grievance Officer (see Section 11)
• File a complaint with the Data Protection Board of India if your grievance is not resolved

To exercise any of these rights, email privacy@vantrock.com. We will respond within a reasonable period, and in any case within the timelines required by law.

11. Grievance Officer.

If you have a complaint about how we handle your personal data, contact:

Grievance Officer, Vantrock Ventures LLP
Email: privacy@vantrock.com
Address: Mumbai, India

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

12. Children.

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact privacy@vantrock.com and we will delete it.

13. Changes to this policy.

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated through a notice on the homepage.

14. Contact.

For any question about this policy or about how we handle your personal data, email privacy@vantrock.com.