Privacy Policy
1. Controller
The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) and UK GDPR is:
Vymavix Solutions – Sole proprietorship (India)
Flat 1201, A Wing, Balaji Siddhi
Near Babji Petrol Pump, Ambegaon BK
Pune 411046, Maharashtra
India
Proprietor: Anuradha Bachu
Email: [email protected]
2. Overview
We only process personal data where necessary to run this website, to answer your enquiries or — with your consent — for statistical analysis. This website uses no advertising or marketing cookies. Analytics tools are only loaded after your explicit consent.
3. Hosting, delivery and protection (Cloudflare)
This website is hosted and delivered via the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Pages and content delivery network). When you visit the site, Cloudflare processes technically necessary data such as your IP address, date and time of access, page requested, referrer URL, browser type and operating system, to deliver the site securely and quickly and to defend against attacks and automated traffic (bot protection).
To protect against abusive bots, Cloudflare may set a strictly necessary cookie (__cf_bm, 30 minutes). The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR); storing it on your device does not require consent as it is strictly necessary.
Cloudflare is certified under the EU-US Data Privacy Framework (and UK Extension); transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). A data processing agreement is in place. More: cloudflare.com/privacypolicy.
4. Fonts
All fonts on this website are hosted locally on our own server. No connection is made to Google or any other font provider.
5. Consent management
We store your cookie-banner choice in your browser's local storage (localStorage, key vx-consent) so we don't have to ask on every visit. This is strictly necessary (Art. 6(1)(c) and (f) GDPR). You can change or withdraw your choice at any time via the "Cookie settings" link in the footer of every page.
6. Google Analytics 4 (only with consent)
If you have consented, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (e.g. _ga, _ga_*, up to 2 years) to analyse use of the website statistically — such as pages viewed, time on page, approximate location (country/city), device type and browser. Google Analytics 4 does not store full IP addresses. Google signals and advertising features are disabled; data is not used for advertising. Event data retention is limited to 2 months.
The legal basis is your consent (Art. 6(1)(a) GDPR; Regulation 6 PECR in the UK). Without consent, Google Analytics is not loaded. You can withdraw consent at any time with effect for the future via "Cookie settings". Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). A data processing agreement is in place. More: policies.google.com/privacy.
7. Contact form and email
If you contact us via the contact form or by email, we process the data you provide (name, email address, company, message) plus technical details (page used, country derived from your IP address) to answer your enquiry. Form submissions are processed by a Cloudflare Worker (Cloudflare, Inc.) over an encrypted connection and delivered to us by email; they are not stored in a database. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to entering into a contract, and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Emails to addresses at vymavix.com are forwarded via Cloudflare Email Routing (Cloudflare, Inc.) to a mailbox hosted by Google (Gmail; Google Ireland Limited / Google LLC). Both providers are certified under the EU-US Data Privacy Framework. We delete your enquiry once it has been fully dealt with, unless statutory retention obligations apply.
7a. Spam protection (Cloudflare Turnstile)
To protect the contact form against automated abuse (spam bots) we use Cloudflare Turnstile. Turnstile only loads once you start using the form and checks technical characteristics of your browser and your IP address to confirm the request comes from a human. It sets no tracking cookies and does not use the data for advertising. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR); the access to your device is strictly necessary for this. The provider is Cloudflare, Inc. (see section 3). More: cloudflare.com/turnstile-privacy-policy.
8. Retention
We keep personal data only as long as necessary for the relevant purpose or as required by statutory retention periods (e.g. commercial and tax law).
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent at any time (Art. 7(3)). Where we process data based on legitimate interests, you may object at any time (Art. 21 GDPR). Just contact [email protected].
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — in particular in the member state of your residence, place of work or place of the alleged infringement — or, in the UK, with the Information Commissioner's Office (ico.org.uk).
10. Automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.