Privacy Policy
1. Who We Are
This website (svucyberresilience.com) is operated by SVU-CyberResilience, part of the SVU Group. We build and offer Kavach Pragya, a DPDPA Privacy Governance Platform, and related engineering assurance and cybersecurity services.
For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDPA"), SVU-CyberResilience is a Data Fiduciary in respect of the personal data described in this policy.
Registered contact:
SVU-CyberResilience
Kandivali (West), Mumbai, Maharashtra, India
Email: contact@svucyberresilience.com
2. What Personal Data We Collect
We collect personal data only where you choose to provide it to us, including:
- Contact form submissions: name, email address, organisation name, and any message content you provide.
- Discovery call / demo bookings: name, email, organisation, and areas of interest you select.
- DPDPA Penalty Exposure Scanner: if you use our public scanner tool, we process the domain/URL you submit for scanning. We do not require you to submit personal data to use the scanner itself.
- Website usage data: standard technical data such as IP address, browser type, and pages visited, collected via cookies and similar technologies where you have consented (see Section 7).
We do not knowingly collect personal data from individuals under the age of 18 through this website.
3. Why We Process Your Data (Purpose)
We use the personal data described above only for the following purposes:
- Responding to your enquiries and discovery call / demo requests.
- Providing the DPDPA Penalty Exposure Scanner report you requested.
- Improving our website and services.
- Complying with our legal obligations.
We do not use your personal data for any purpose beyond what you were informed of at the time of collection, in line with the DPDPA's purpose limitation principle.
4. Legal Basis for Processing
We process your personal data on the basis of your consent, given when you voluntarily submit a form on this website, or where processing is otherwise permitted under applicable law (for example, to comply with a legal obligation).
You may withdraw your consent at any time by writing to our Grievance/Privacy Officer (Section 9). Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may limit our ability to respond to a request you have already made.
5. How Long We Keep Your Data
We retain personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, or as required by applicable law, after which it is deleted or anonymised. Contact form and demo-request data is typically retained for the duration of our business relationship or engagement discussion, and deleted thereafter unless a longer retention period is required for legal, accounting, or dispute-resolution purposes.
6. Sharing of Your Data
We do not sell your personal data. We may share personal data with:
- Service providers who help us operate this website (e.g., hosting, email delivery, and analytics providers), bound by contractual obligations to protect your data.
- Regulatory or governmental authorities, where required by law.
We do not transfer personal data outside India except where necessary for the services above, and only in a manner consistent with applicable law.
7. Cookies and Consent Mechanism
This website may use cookies and similar technologies to operate correctly and understand website usage. Where consent is required, you will be presented with a clear option to accept or decline non-essential cookies. You can change your cookie preferences at any time through your browser settings.
8. Your Rights as a Data Principal
Under the DPDPA, you have the following rights in respect of your personal data:
- Right to Access — to obtain a summary of the personal data we hold about you and how it is processed.
- Right to Correction — to have inaccurate or incomplete personal data corrected.
- Right to Erasure — to request deletion of your personal data, subject to any legal retention requirements.
- Right to Grievance Redressal — to raise a grievance with us regarding our handling of your personal data (see Section 9).
- Right to Nominate — to nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
We will respond to rights requests within 15 working days of receipt, well within the maximum 90-day timeline permitted under the DPDP Rules, 2025.
9. Grievance Redressal — How to Contact Us
If you have a question, concern, or grievance about how we handle your personal data, please contact our designated Grievance/Privacy Officer:
Grievance Officer / Privacy Officer: Vikas Upade
Designation: Founder, SVU-CyberResilience
Email: privacy@svucyberresilience.com
We will acknowledge your grievance within 72 hours and aim to resolve it within 15 working days, and in any case within the 90-day timeline required under DPDP Rule 14(3).
If you are not satisfied with our response, you have the right to escalate your grievance to the Data Protection Board of India at www.dpb.gov.in.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will indicate when this policy was last revised. Material changes will be highlighted on this page.
11. Contact Us
For any questions about this Privacy Policy or our data practices, please contact:
SVU-CyberResilience
Kandivali (West), Mumbai, Maharashtra, India
Email: privacy@svucyberresilience.com
General enquiries: contact@svucyberresilience.com
This policy is prepared to meet the notice and transparency requirements of Section 5 and Section 6 of the Digital Personal Data Protection Act, 2023, and the DPDP Rules, 2025.