Short version: we collect only what we need to answer your enquiry and run our services, we never sell personal data, and you can ask us to delete what we hold about you at any time.
1. Introduction
Creaveel Technologies Private Limited (“Creaveel”, “we”, “us”) is a company incorporated in India with its registered office at Jaydeep Emphasis, Wagle Industrial Estate, Thane 400604, Maharashtra. We provide information technology and software services, including computer programming, technology consultancy and related solutions.
This policy describes how we handle personal information when you visit our website, contact us, or engage us for services. It applies to us as a data fiduciary / controller. Where we handle personal data on a client's behalf as part of a services engagement, we act as a processor and section 5 applies.
2. Information we collect
2.1 Provided by you
- Identity and contact data — name, email address, phone number, company name and designation.
- Enquiry content — the project brief, requirements or questions you send through our form or by email.
- Contractual and billing data — purchase orders, invoicing details, GST registration information and payment records for clients.
- Application data — CV, work history and references if you apply for a position with us.
2.2 Collected automatically
- IP address, device and browser information, operating system and referring URL.
- Pages visited, time of visit and interaction events, in aggregate form.
- Web server logs retained for security monitoring and troubleshooting.
2.3 What we ask you not to send
Please do not send us identity document numbers, banking passwords, card details, health information or system credentials through the enquiry form. If credentials are needed during an engagement, we will share a secure channel for them.
3. Purposes of processing
- Responding to enquiries and preparing proposals or estimates.
- Delivering, supporting and improving contracted services.
- Invoicing, accounting, tax compliance and statutory record keeping.
- Protecting our systems, preventing abuse and investigating security incidents.
- Sending operational notices such as maintenance windows and incident reports.
- Sending occasional company updates where you have opted in — every such message carries an unsubscribe link.
- Assessing job applications and maintaining a talent record with your consent.
4. Legal bases
Depending on the applicable law, we rely on: your consent (marketing, optional cookies, talent pool); performance of a contract (delivering services); legal obligation (tax, accounting, statutory records); and legitimate interests (network security, fraud prevention, internal administration), balanced against your rights and freedoms.
5. Client data processed on instruction
During an engagement we may access personal data held in a client's systems — for example, in a database we are migrating or an application we are debugging. In those cases:
- We process such data only on the client's documented instructions.
- Access is restricted to the engineers who need it, and is logged.
- We prefer anonymised or masked data in development and test environments.
- Personnel are bound by confidentiality obligations that survive the engagement.
- On completion, data is returned or deleted according to the services agreement.
6. Cookies and similar technologies
This site is built to operate without advertising or third-party tracking cookies. Any storage used is strictly functional — for example, remembering a preference during your visit. If analytics are introduced in future, we will present a consent notice before setting non-essential cookies, and configure anonymisation where available. You may block or delete cookies in your browser without losing access to any part of the site.
7. Disclosure to third parties
We do not sell or rent personal information. We disclose it only:
- To vendors who host our website, email, storage and accounting systems, under contracts that restrict their use of the data.
- To professional advisers — auditors, lawyers, insurers — where necessary and confidential.
- Where required by law, regulation, court order or a lawful authority request.
- To an acquirer in connection with a merger or restructuring, with equivalent protections applying.
8. Retention
- Enquiries that do not convert — up to 24 months from last contact.
- Client records — for the term of the engagement and thereafter for the statutory retention period applicable to contract and tax records.
- Access and security logs — generally 90 days, longer where an investigation requires it.
- Recruitment records — 12 months, or longer with your consent.
At the end of the applicable period, data is securely deleted or irreversibly anonymised.
9. Security
We maintain safeguards proportionate to the risk, including encryption in transit, role-based access control, multi-factor authentication for administrative systems, hardened server configuration, patch management, code review for changes touching personal data, and periodic access recertification.
No system can be guaranteed absolutely secure. In the event of a personal data breach that is likely to cause harm, we will notify affected persons and the relevant authority as required by law and without undue delay.
10. Your rights
Subject to applicable law you may request access to, correction of, or erasure of your personal data; withdraw consent; object to or restrict processing; obtain a portable copy; and nominate a representative to act on your behalf. To exercise a right, write to contact@creaveeltech.site. We respond within 30 days and may need to verify your identity first. You may also complain to the competent data protection authority if you are dissatisfied with our response.
11. Children and minors
Our website and services are directed at businesses. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we hold such information, contact us and it will be deleted promptly.
12. Cross-border transfers
Our systems are primarily hosted in India. Some service providers may store or process data in other jurisdictions. Where that occurs, we apply contractual safeguards and restrict transfers to jurisdictions permitted under applicable law, so that the protection travelling with your data remains comparable.
13. Updates and grievance redressal
We may revise this policy as our services, technology or the applicable law change. The effective date above indicates the current version, and material changes will be highlighted on this page.
For any privacy question, request or complaint:
- Email: contact@creaveeltech.site
- Post: Grievance Officer, Creaveel Technologies Private Limited, Jaydeep Emphasis, Wagle Industrial Estate, Thane 400604, Maharashtra, India
Read alongside our Terms of Use and Disclaimer.