Privacy Policy

This policy explains how Vantrock Ventures LLP (“Vantrock“, “we“, “us“) collects, uses, and protects personal data when you visit vantrock.com or contact us through this website.

1. Who we are

Vantrock Ventures LLP is a limited liability partnership registered in India under the Limited Liability Partnership Act, 2008, with its registered office in Mumbai. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act“), Vantrock is the Data Fiduciary in respect of personal data processed through this website.

2. What we collect

For the purposes of this policy, “personal data” shall mean any data about an individual who is identifiable by or in relation to such data. We collect your personal data in the following ways:

• Information you give us directly.
• Information collected automatically.

The table below sets out the categories of personal data collected under each sub-heading above, the associated purposes of collection, and goods, services or uses enabled by such processing:

We do not use Personal Data for any other purpose, and we do not sell or share it for marketing.

We also do not use your personal data for advertising or profiling.

3. Legal basis for processing

Where required under applicable law including the DPDP Act, we rely on your consent as the legal basis for processing personal data submitted through our forms. Where we process your personal information based on your consent, you may withdraw your consent by accessing our website. Alternatively, you may withdraw consent at any time by writing to privacy@vantrock.com.

Use of Personal Data without your consent

In accordance with, and as permitted under applicable laws including the DPDP Act, we may use your personal data without your consent for the following purposes:

a) Ensure Security and Prevent Fraud

We implement security measures on our website and conduct fraud-prevention activities. We use information about your device (such as brand, model, operating system, settings and browser) and the network you are connected to (such as IP address, domain, carrier) to identify suspicious activity.

b) Where it’s necessary to exercise or comply with legal rights or obligations

We may need to use your personal data in connection with legal claims, or for compliance and regulatory purposes. For example, we will use, share or retain your personal data where we are required by law, a court order or regulatory body.

c) For facilitating exercise of your rights under applicable laws

When you exercise any rights available to you under applicable law, we may request identification and verification documents from you for the purpose of confirming your identity.

4. Who we share it with

We share personal data only with the following categories of processors, and only to the extent necessary to operate the website:

• Formspree (Formspree, Inc., United States) processes form submissions and forwards them to our email inboxes. Formspree’s privacy policy is available at formspree.io/legal/privacy-policy.
• Google Analytics 4 (Google LLC, United States) collects anonymised website usage data. Google’s privacy policy is available at policies.google.com/privacy.
• Vercel (Vercel Inc., United States) hosts the website infrastructure.
• Cloudflare (Cloudflare, Inc., United States) provides DNS and basic security services.
• Google Workspace (Google LLC, United States) handles email correspondence sent to our vantrock.com addresses.

We do not share personal data with any other third parties for their own purposes.

Files uploaded by you are shared with and stored by our third-party form processing provider on servers located outside India, including in the United States. Files are transmitted over an encrypted connection and held in an access-controlled account. By submitting the form you consent to this transfer and storage.

5. Cross-border transfer

The processors listed above are based outside India, primarily in the United States. We take steps to ensure all processors maintain appropriate technical and organizational measures and reasonable security safeguards as required under applicable laws.

6. Cookies

We use cookies for two purposes:

• Essential cookies. Required for the website to function, including storing your cookie consent choice. These are always active.
• Analytics cookies. Set by Google Analytics 4 to measure site usage. These are only set after you accept them via the cookie banner.

You can change your cookie preferences at any time by clearing your browser’s cookies for this site and revisiting the homepage.

7. How long we keep it

Form submissions are retained for as long as necessary to address your enquiry, and thereafter for up to three years for our records and any potential follow-up. Analytics data is retained for 14 months in line with the GA4 default.

Uploaded documents, including resumes and land submission files, are retained on the same basis as the form submission they accompany.

8. How we protect it

We use reasonable technical and organisational measures to safeguard personal data, including HTTPS encryption across the website, restricted access to form submission inboxes, and processors that meet recognised security standards. No system is perfectly secure, and we cannot guarantee absolute protection. Nevertheless, although we use appropriate security measures once we have received your Personal Data, the transmission of information over the internet is never completely secure. All access to Personal Data within Vantrock will be limited to those who have a need to know the information for the purposes described in this policy.

9. Your rights

Where we process Personal Data based on your consent, you have the right to:

• ask us for a copy of your personal data;
• to obtain a summary of the Personal Data you have provided to us in a structured, machine-readable format;
• request access to identities of all other data fiduciaries and data processors with whom the Personal Data has been shared along with the description of the Personal Data as shared and any other information related to the Personal Data and its processing; and
• withdraw your consent at any time.

You also have a right to grievance redressal, and the right to nominate any other individual in the event of your death or incapacity to exercise your rights at a data principal.

You can exercise your rights under applicable data protection laws by accessing our website, or by contacting our grievance officer at privacy@vantrock.com.

If you ask to withdraw your consent to Vantrock processing your Personal Data, this will not affect any processing which has already taken place at that time.

Please note, however, that certain Personal Data may be exempt from requests pursuant to applicable data protection laws or other laws and regulations. For your protection, we may need to verify your identity before implementing your request.

If you have unresolved concerns, you have the right to complain to the Data Protection Board of India.

10. Grievance Officer

If you have a complaint about how we handle your personal data, please reach out to our Grievance officer using the mechanism described under Section 9 above.

We will acknowledge your grievance within 48 hours and aim to resolve it within 30 days.

11. Children

This Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact privacy@vantrock.com and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be communicated through a notice on the homepage.

13. Contact

For any question about this policy or about how we handle your personal data, email privacy@vantrock.com.