Privacy Policy

Last updated: 1 August 2026

Who we are

Vyapari Solutions ("Vyapari Solutions", "we", "us") provides cyber security, audit and management system certification services. For the purposes of the Digital Personal Data Protection Act, 2023 we act as a Data Fiduciary in respect of the data described here, and as a Data Processor when handling data on behalf of clients under a services agreement.

You can contact us at info@vyaparisolutions.com or at First Floor, A-90, Sector 4, Noida, Uttar Pradesh 201301.

Personal data we collect

We collect only what we need to respond to enquiries, deliver services and meet our legal obligations.

Contact data — name, work email, phone number, employer and job title, submitted through our enquiry form or given during a call
Engagement data — information you share during scoping, assessment and delivery, which may include technical, organisational and personnel information
Website data — pages viewed, referring source, approximate location derived from IP address, and device or browser type
Marketing data — subscription preferences and interaction with emails you have opted into
Recruitment data — where you apply for a role with us

Why we use it

Each purpose below is limited to what is necessary for that purpose, and we do not use enquiry data for unrelated marketing without your consent.

Responding to enquiries and preparing proposals — on the basis of your consent or steps taken at your request prior to a contract
Delivering contracted services, including assessment, reporting and auditor liaison — on the basis of contract performance
Complying with legal, accounting and regulatory obligations, including records retention
Improving our website and services through aggregated analytics
Sending compliance briefings where you have subscribed, with an unsubscribe link in every email

We do not sell personal data. We share it only where necessary, and always under written terms.

Certification bodies, licensed CPA firms and accreditation bodies, where an audit or certificate requires it and with your knowledge
Service providers acting on our documented instructions — including the hosts of our systems, our email relay, and tawk.to, which operates the live chat on this site and processes chat transcripts and anything you type into it
Professional advisers, insurers and auditors where necessary and proportionate
Authorities where disclosure is required by law, including reporting obligations under the CERT-In Directions

International transfers

We operate from India and serve clients globally, so personal data may be transferred across borders. Where data originates in the EU or UK, transfers are made under Standard Contractual Clauses supported by a transfer impact assessment and supplementary technical measures including encryption in transit and at rest, access minimisation and key control.

Retention

Enquiry data is retained for 24 months from the last interaction unless it becomes engagement data. Engagement records are retained for the duration of the contract and for seven years afterwards to meet professional, contractual and statutory obligations. Marketing preferences are retained until you unsubscribe. Data that has served its purpose is deleted or irreversibly anonymised.

How we protect it

We operate an ISO/IEC 27001 aligned information security management system. Controls include role-based access with least privilege, multi-factor authentication, encryption in transit and at rest, centralised logging, background-checked personnel under confidentiality agreements, and a tested incident response process. Client assessment data is handled inside your environment wherever the engagement permits.

Your rights

Depending on the law that applies to you, you may exercise the rights below by writing to us. We verify identity before acting, and respond within the statutory period — one month under the GDPR, and as prescribed under the DPDP Act.

Access a summary of the personal data we process about you
Correction, completion or updating of inaccurate or incomplete data
Erasure of data where the purpose has been served or consent is withdrawn
Withdrawal of consent, as easily as it was given
Nomination of another individual to exercise your rights (DPDP Act)
Restriction, objection and portability where the GDPR applies
Grievance redressal, and a complaint to the Data Protection Board of India or your supervisory authority

Cookies

This website sets no advertising cookies and runs no cross-site tracking. Our live chat widget, provided by tawk.to, sets cookies in your browser to keep a conversation attached to you between page loads and return visits; if you never open the chat, it still records a visitor identifier. Chat transcripts and the contact details you give in chat are processed by tawk.to on our behalf under their terms. Nothing else on this site stores preferences in your browser. If analytics or marketing cookies are added in future, we will request consent before setting them and update this page.

Changes to this policy

We review this policy at least annually and whenever our processing changes materially. The date at the top of this page reflects the most recent revision. Material changes affecting your rights will be notified directly where we hold your contact details.

Contact us

Questions about this page can be sent to info@vyaparisolutions.com or Vyapari Solutions, First Floor, A-90, Sector 4, Noida, Uttar Pradesh 201301.