LEGAL
Privacy policy
Last updated
This policy explains what personal data INNVOQ LABS LLP collects through innvoq.com, why, and the choices you have. We've written it to be read, not skimmed past.
Who we are
innvoq.com is operated by INNVOQ LABS LLP ("Innvoq", "we", "us"), a limited liability partnership registered in India. Our registered office is at WeWork 247 Park, Vikhroli, Mumbai, Maharashtra 400079, India. For personal data collected through this website, we are the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the EU and UK General Data Protection Regulation where those laws apply to you.
This policy covers this website only. Our products, including Legalyard, have their own privacy notices, which apply when you use them.
What we collect
What you send us
When you use the contact form, we collect your name, email address, organisation (if you give one), the topic you choose and your message. If you email us, we receive your email address and what you write.
Technical data
Like most websites, our servers record basic request data such as IP address, browser type, the page requested and the time. To limit abuse of the contact form, we keep your IP address in server memory for up to one hour; it isn't written to disk.
Your choices on this site
A cookie named innvoq_consent records your privacy choices, and your theme setting (light, dark or system) is stored in your browser's local storage.
Analytics, only if you opt in
If you allow analytics, a privacy-friendly analytics service counts visits and pages viewed. It sets no cookies, doesn't store your IP address and doesn't build a profile of you.
We don't ask for sensitive personal data. Please don't include it in messages, such as health, financial or identity document details.
How we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Replying to your enquiry | Contact form details and your emails | Your consent, given when you submit the form (DPDP Act); our legitimate interest in responding (GDPR) |
| Confirming we received it | Your name, email address and topic | As above |
| Keeping the site secure | Technical data and IP address | Legitimate uses for security and fraud prevention (DPDP Act); legitimate interests (GDPR) |
| Understanding what's useful | Aggregate analytics | Your consent, which you can withdraw at any time |
| Meeting legal obligations | Any of the above, as required | Legal obligation |
We don't sell personal data, use it for advertising, or make automated decisions about you that have legal or similarly significant effects. We don't use messages sent through this website to train AI models.
Where it's processed
Our email is hosted in Zoho's India data centre. Some service providers may process data in other countries. When personal data is transferred across borders, we do so only where the law permits it and, for transfers from the EU or UK, with appropriate safeguards such as standard contractual clauses.
How long we keep it
- Contact form messages and related emails: up to 24 months after our last exchange, unless we need them longer for an ongoing relationship or a legal reason.
- Server logs: up to 90 days.
- Rate-limiting data: up to one hour, in memory only.
- The innvoq_consent cookie: 12 months, after which we ask again.
When we no longer need personal data, we delete it or make it anonymous.
How we protect it
The site is served over HTTPS, email is sent over encrypted connections, and access to personal data is limited to the people who need it to answer you. No system is completely secure, so if you believe your data has been put at risk, contact us straight away.
Your rights
Depending on where you live, you can:
- ask for a summary of the personal data we hold about you and how we've used it;
- ask us to correct, complete or update it;
- ask us to erase it, unless we must keep it by law;
- withdraw consent at any time, which doesn't affect what we did before;
- nominate someone to exercise your rights if you die or become unable to (DPDP Act);
- object to or restrict certain processing, and receive your data in a portable format (GDPR).
To use any of these rights, email labs@innvoq.com. We may need to confirm your identity first, and we'll respond within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India or, in the EU or UK, to your local data protection authority.
Grievances
Questions or complaints about how we handle personal data can be sent to our grievance contact at labs@innvoq.com. Please include "Privacy" in the subject line.
Children
This website isn't directed at people under 18, and we don't knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll also say so on the site.
Contact
INNVOQ LABS LLP · labs@innvoq.com