Privacy Policy

This Privacy Policy explains how Satani Ventures LLP ("Satani Ventures," "we," "our," or "us") collects, uses, discloses, and protects personal information in connection with the website operated by Satani Ventures, our consulting and engineering services, and our dealings with prospective clients, clients, and visitors.

We are committed to handling personal information lawfully, for stated purposes, and only for as long as those purposes require.

Our WhatsApp app, through which a business connects its own WhatsApp account, has a separate privacy policy.

Satani Ventures LLP is a limited liability partnership registered in India. For personal information we collect through this website and in the course of our own business, we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). Where the GDPR, the UK GDPR, or a similar law applies to a visitor or client contact, we are the controller for that information.

Our office is at PL-86, Angel Villa, Kholvad, Surat, Gujarat 394190.

2.1 When we act for a client

We also process personal information on behalf of clients, for example where we design, build, or operate a system that handles their customers' or users' information. In that case the client is the Data Fiduciary or controller, the client's instructions and the written engagement govern the processing, and Section 14 of this Policy sets out how we act in that role. This Policy does not replace the client's own privacy notice.

"Personal information" means any information about an identifiable individual, including a name, email address, telephone number, job title, IP address, or similar identifier.

"Services" means this website and the consulting, design, and engineering work we undertake for clients. Paid work is also governed by the contract for that engagement.

"Usage data" means information recorded automatically when the website is requested, such as IP address, browser type, referring address, pages requested, and the time of the request.

4.1 Information you give us

• Details submitted through the contact form: your name, email address, the type of work you are enquiring about, and the message you write.
• Information you later share in calls, emails, or proposals, including your role, your organisation, and the requirements of a project.
• Information needed to perform an engagement once a contract is in place, such as billing contacts and the material the project itself requires.

We do not ask you to create an account on this website, and we do not take payment through it.

4.2 Information collected automatically

• Usage data as defined above, generated by the systems that host and serve the website.
• We do not currently use analytics tools, advertising cookies, or similar tracking technologies on this website. If that changes, we will update this Policy and, where the law requires it, ask for consent before setting non-essential cookies.

4.3 Information from other sources

• Introductions from people who already know us, where someone refers you or your organisation.
• Publicly available business information, such as a company website or a professional profile, where we are preparing for a conversation you have asked for or continuing an existing business relationship.

We use personal information for these purposes:

• To read and answer enquiries, and to carry on the commercial conversation that follows.
• To prepare a scope, a proposal, or a contract.
• To perform an engagement and to administer it, including invoicing and ordinary project communication.
• To keep the website secure, to diagnose faults, and to understand, in aggregate, whether the site is operating.
• To meet legal, tax, and accounting duties, and to establish or defend a legal claim.
• To assess or carry out a merger, financing, or transfer of the business, subject to confidentiality.

We do not sell personal information. We do not use it to send unsolicited marketing. If we ever write to you about our work other than in reply to an enquiry or under a contract, we will do so only where the law allows, and you will be able to tell us to stop.

We do not use personal information collected through this website, including contact-form submissions and usage data, to train or evaluate a machine-learning model. Personal information we handle for a client is governed by the engagement, and we do not use it to train a model unless that client has authorised it in writing.

Where the DPDP Act applies, we process personal information on the basis of your consent, or on a legitimate use permitted by that Act, including use necessary for a purpose you have requested and use necessary to comply with law.

Where the GDPR, the UK GDPR, or a similar law applies, we rely on one or more of the following:

• Steps taken at your request before a contract, or performance of a contract with you or your organisation.
• Our legitimate interests in answering business enquiries, securing the website, and running an ordinary professional practice, weighed against your rights.
• A legal obligation.
• Consent, where we ask for it specifically. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal.

This website does not currently set analytics or marketing cookies. A browser may still store what it needs to load the page. You can control cookies through your browser. If we introduce non-essential cookies later, this section will describe them and how to refuse them.

We share personal information only with:

• Providers who host the website, deliver email, or supply tools we use to run the practice, and only so they can perform that work for us.
• Professional advisers such as lawyers and accountants, who are bound by duties of confidence.
• A client, where you are corresponding with us as part of that client's engagement and the information is needed for the work.
• Authorities, where the law, a court, or a regulator requires it, or where disclosure is needed to protect the rights, safety, or property of Satani Ventures, a client, or another person.
• A buyer or investor, and their advisers, in connection with an actual or proposed financing, restructuring, or sale of the business, under confidentiality obligations.

We require service providers who handle personal information for us to protect it and to use it only on our instructions.

Satani Ventures is established in India. The providers who host this website or deliver messages may process personal information in other countries. Where information leaves India, the United Kingdom, or the European Economic Area, we put in place the safeguards the applicable law requires, including contractual terms with the recipient where those are required.

We keep personal information only for as long as the purpose, or the law, requires. Indicative periods:

• Enquiries that do not become an engagement: 24 months from the last communication.
• Client and supplier records: for the life of the engagement and for eight years after it ends, or longer where tax or other law requires.
• Usage data held in host logs: up to 12 months, unless a longer period is needed to investigate a security incident.

When a period ends, we delete the information or reduce it so that it no longer identifies you.

We use access controls, encrypted transport, and limited access by the people who need the information for their work. No method of transmission or storage is perfectly secure, and we do not promise that it is. If you believe information you gave us has been compromised, contact us using the details in Section 17.

Depending on the law that applies to you, you may have the right to:

• Ask whether we hold personal information about you, and to receive a copy.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to erase it, subject to records we are required to keep.
• Withdraw consent, where consent was the basis of the processing.
• Object to processing based on legitimate interests, and to object to direct marketing.
• Ask for a restriction on processing in the circumstances the law provides.
• Receive information you provided to us in a commonly used format, where the law gives a right of portability.
• Raise a grievance with us and, if it is not resolved, with the Data Protection Board of India.
• Nominate another person to exercise your rights if you die or become unable to do so, where the DPDP Act provides that right.
• Complain to a supervisory authority in your country, where one exists.

We may need to confirm your identity before acting on a request. To make a request, use the contact details in Section 17.

Our work is directed at businesses and at adults who instruct us. Under the DPDP Act, a child is a person under 18. We do not knowingly collect personal information from children. If you believe we have done so, contact us and we will delete it.

Where Satani Ventures designs, builds, hosts, or supports a system for a client, and that system processes personal information, we do so as a processor on the client's documented instructions. The contract for the engagement, including any data-processing terms, sets the detail. In that role we will:

• Process the information only for the purposes the contract describes.
• Limit access to people who need it, and bind them to confidentiality.
• Apply technical and organisational measures appropriate to the risk, including access control, secure development, and a way to respond to an incident.
• Use subprocessors only as the contract permits, under written terms that require a comparable level of protection, and tell the client of material changes where the contract requires notice.
• Assist the client, as the contract requires, with requests from individuals, with assessments, and with notices to authorities.
• Tell the client without undue delay if we become aware of a breach affecting that client's personal information.
• At the end of the engagement, return or delete the information as the client instructs, except where the law requires us to keep it.

This website may link to sites we do not operate. Their collection and use of information is governed by their own policies.

We may update this Policy. The version on this page, with its "Last updated" date, is the current one. If a change is material and the law requires notice, we will give it.

For questions about this Policy, or to exercise a right, contact:

• Data Fiduciary: Satani Ventures LLP
• Grievance contact: Alish Satani
• Email: satanialish@gmail.com
• Postal address: PL-86, Angel Villa, Kholvad, Surat, Gujarat 394190

We will acknowledge a grievance and work to resolve it within the time the applicable law requires.