Privacy Policy

1. Introduction

Visva Business Solutions (OPC) Private Limited, operating through the website https://visva.co/ under the business name VisVa (hereinafter referred to as "VisVa," "we," "us," or "our"), respects the privacy of individuals who visit our website, communicate with us, submit enquiries, request information about our services, enter into a business relationship with us, or otherwise interact with our business.

This Privacy Policy explains the manner in which we may collect, receive, use, store, disclose, retain, and otherwise process personal information in connection with our website, business communications, service enquiries, client relationships, and related administrative activities.

Our objective is to explain our privacy practices in a manner that is sufficiently detailed, transparent, and understandable for website visitors, prospective clients, existing clients, business representatives, and other individuals whose information we may process.

This Privacy Policy should be read together with our Terms and Conditions, Service and Cancellation Policy, Disclaimer, and Cookie Policy, as applicable. Each document addresses a different aspect of our business and should be interpreted in conjunction with the others where relevant.

Nothing in this Privacy Policy is intended to remove, restrict, or waive any privacy right that cannot lawfully be excluded under applicable law. Where a mandatory legal requirement provides an individual with a greater level of protection than a provision of this Policy, the mandatory requirement will prevail to the extent of the inconsistency.

By accessing or using our website, communicating with us, or providing information to us, you acknowledge that you have had an opportunity to review this Privacy Policy. Such acknowledgement does not constitute a waiver of any rights or protections available to you under applicable privacy or data protection law.

If you do not agree with the manner in which this Policy describes our information practices, you should discontinue use of the website and refrain from submitting personal information through it, except where the processing is otherwise permitted or required by law.

2. Identity of the Business and Contact Information

For the purposes of this Privacy Policy, VisVa refers to the business operated by Visva Business Solutions (OPC) Private Limited.

Our business contact information is as follows:

Business Name: Visva Business Solutions (OPC) Private Limited
Operating Name: VisVa
Website: https://visva.co/
Email: support@visva.co
Telephone: +1 (888) 973-3308
Business Address: Industrial Shed No. F-135, Phase 8-B, Industrial Area, Mohali, Punjab 140308, India.

For privacy-related enquiries, requests concerning personal information, questions about this Policy, or complaints relating to our handling of personal information, you may contact us using the email address stated above.

Please include sufficient information in your communication to allow us to understand the nature of your request. You should not include passwords, payment card numbers, government identification numbers, or other highly sensitive information in an ordinary email unless we have specifically established a suitable and secure method for receiving such information.

VisVa operates as an independent business services provider. References to printer management, office printing, business equipment, software, manufacturers, products, or related technologies are intended to describe the subject matter of our services and do not, by themselves, establish an affiliation, authorization, sponsorship, or endorsement by any printer manufacturer or technology company.

3. Scope and Application of This Policy

This Privacy Policy applies to personal information processed in connection with:

1. Visits to and interactions with the VisVa website.
2. Enquiries submitted through website forms, email, telephone, or other communication channels made available by us.
3. Requests for information concerning our business printer management and related business services.
4. Communications with prospective clients, existing clients, and authorized representatives of business customers.
5. Preparation, discussion, administration, and performance of service engagements.
6. Business records, correspondence, quotations, invoices, service documentation, and related administrative activities.
7. Website security, troubleshooting, performance, and maintenance activities.
8. Compliance with applicable legal, regulatory, accounting, and recordkeeping obligations.

This Policy applies to personal information relating to identifiable individuals. In a business-to-business context, that information may include a person's name, professional email address, business telephone number, job title, employer, business correspondence, or other information associated with that individual.

Information that relates solely to a business entity and does not identify, or cannot reasonably be linked to, an individual may fall outside the definition of personal information under certain laws. Nevertheless, we may handle business information with appropriate care and in accordance with our contractual and legal obligations.

This Policy does not automatically govern websites, applications, payment services, software platforms, or third-party services operated by independent organizations. Those organizations may maintain their own privacy policies and terms.

4. Nature of Our Business

VisVa provides business-oriented printer management and related services intended for small businesses, offices, and professional organizations.

Individuals may visit our website to learn about our business, understand our service offerings, request further information, communicate with our team, or discuss a potential business engagement.

The information required to respond to a particular enquiry will depend on the nature of the request. For example, an individual asking about business printer management may provide a name, business email address, telephone number, organization name, general description of the business requirement, and relevant correspondence.

We seek to collect information that is reasonably relevant to the purpose for which it is requested. Visitors should avoid submitting information that is unrelated to their enquiry or that they are not authorized to disclose.

Our website and services should not be treated as a general-purpose consumer technical support service, a manufacturer-operated support portal, or an official manufacturer website unless a separate, expressly documented arrangement establishes otherwise.

We do not intend to solicit unnecessary personal information about household members, employees, customers, or other third parties who are not relevant to a business enquiry. Where you provide information about another individual, you should ensure that you have an appropriate basis and authority to do so.

5. Types of Personal Information We May Collect

The categories of information we collect depend on how you interact with us, the information you choose to provide, the technical operation of the website, and the legal obligations applicable to the relevant activity.

5.1 Identification and Contact Information

When you contact us or request information about our services, we may collect information such as:

• Your name.
• Business or professional email address.
• Telephone or mobile number.
• Business name or organization name.
• Professional title or role.
• Country, state, city, or general business location.
• Preferred method of communication.
• Other contact details that you voluntarily provide.

We use such information primarily to identify the person making the enquiry, communicate with that person, understand the nature of the request, and maintain appropriate business records.

5.2 Business and Service Enquiry Information

If you submit an enquiry about our services, we may collect information concerning your business requirements, including:

• The general nature of your enquiry.
• The type of business or office involved.
• The number or general category of printers or printing devices relevant to the enquiry, if provided.
• A description of the business printing or printer management requirement.
• Relevant operational constraints or service expectations.
• The preferred timing for a discussion or proposed engagement.
• Information provided in correspondence or supporting documents.

You should not provide printer access credentials, administrator passwords, network passwords, confidential employee records, or unrelated sensitive information through a general enquiry form.

Where technical information is necessary for a legitimate service purpose, we will seek to limit the information requested to what is reasonably relevant to that purpose.

5.3 Communication Records

We may retain information contained in communications exchanged with us, including emails, enquiry submissions, telephone-related business records, meeting notes, and records of requests or responses.

Depending on the communication channel, these records may include the date and time of contact, the sender or recipient, the subject of the communication, the content of the enquiry, and any subsequent correspondence.

Such information may be used to respond to requests, understand the history of a business relationship, prevent misunderstandings, maintain service records, address complaints, and comply with applicable legal obligations.

5.4 Contractual and Transactional Information

Where a prospective client enters into a business engagement with us, we may collect information reasonably necessary to discuss, establish, administer, and document that engagement.

This may include the identity and contact details of authorized representatives, the agreed service scope, quotations, contractual terms, invoices, billing records, payment status, relevant correspondence, and records of service-related decisions.

Payment card information or bank account information should be collected only where a relevant payment process requires it and through an appropriate mechanism. The specific information handled by VisVa will depend on the payment methods and service providers actually used.

We will not represent that payment information is processed by a particular payment provider unless that provider is in fact used for the relevant transaction.

5.5 Technical and Device Information

When you access our website, certain technical information may be processed automatically by the website, its hosting infrastructure, security systems, or other technical service providers.

Depending on the configuration of those systems, this information may include:

• Internet Protocol (IP) address.
• Browser type and version.
• Operating system or device type.
• Language and regional settings.
• Date and time of a request.
• Pages or resources requested.
• Referring page or website, where available.
• Basic diagnostic information.
• Security events and server error records.

Technical information may be used to deliver website content, diagnose errors, protect the website, investigate suspicious activity, maintain service availability, and understand general website usage where appropriate.

The precise information collected depends on the technical services and configurations in use at the relevant time.

5.6 Cookies and Similar Technologies

Our website may use cookies or similar technologies, subject to the tools enabled on the website and applicable law.

Cookies are small files or identifiers that may be stored on a device by a website or associated service. Similar technologies may perform functions such as remembering preferences, supporting security, measuring website performance, or understanding how visitors interact with website content.

Where applicable, information collected through these technologies may include a cookie identifier, device or browser information, page interaction information, or technical usage information.

The categories, purposes, providers, retention periods, and consent requirements for cookies are addressed in greater detail in our Cookie Policy.

We will not intentionally describe a particular analytics, advertising, or tracking technology as being in use unless it is actually deployed on the relevant website.

5.7 Information Provided Voluntarily

You may voluntarily provide additional information when communicating with us. Such information may include feedback, questions, explanations of a business requirement, or supporting details relevant to an enquiry.

You should exercise appropriate care when deciding what to submit. Do not provide information that is unnecessary for your request, and do not submit another person's personal information without an appropriate legal basis or authorization.

5.8 Information We Do Not Intentionally Seek

Unless specifically necessary for a lawful and clearly explained purpose, we do not intend to request sensitive personal information through ordinary website enquiries.

This includes information such as government identification documents, account passwords, financial account credentials, detailed health information, biometric information, or other categories of sensitive information protected by applicable law.

If you believe that you have accidentally submitted sensitive information, contact us so that we can assess the circumstances and determine what action is appropriate and legally required.

6. How We Collect Personal Information

We may collect personal information through several different methods.

6.1 Directly From You

We may receive information directly from you when you:

• Complete and submit a website enquiry form.
• Send us an email.
• Call our business telephone number.
• Request information about our services.
• Communicate with us about a proposed engagement.
• Enter into or administer a service agreement.
• Provide information in response to a reasonable business request.
• Submit a complaint, privacy request, or other communication.

The information you provide is generally collected for the purpose associated with the relevant interaction.

6.2 Automatically Through Website Operations

Certain information may be generated or recorded automatically when your browser communicates with our website.

For example, web servers may create technical logs that record requests, timestamps, response status, and security-related information. Such records can be necessary for diagnosing technical problems and investigating potential misuse.

Other automatic collection may occur if analytics, security, performance, or similar tools are enabled. The existence and scope of such collection depend on the actual website configuration.

6.3 From Service Providers

We may receive information from a third-party provider where that provider supports a relevant business or technical activity and is lawfully permitted to provide the information.

Examples may include website hosting providers, form-processing services, email services, customer relationship management systems, payment providers, or security services, where those services are actually used.

The information received will depend on the provider's function, the applicable agreement, and the relevant settings.

6.4 From Business Representatives

Where a business representative contacts us on behalf of an organization, we may receive contact details and business-related information from that representative.

Where reasonably necessary, we may use that information to respond to the enquiry, communicate with the organization, or administer the relevant business relationship.

6.5 Information From Publicly Available Sources

In limited circumstances, we may review publicly available professional or business information where reasonably relevant to a legitimate business purpose, such as understanding an organization that has contacted us or verifying basic business contact information.

We do not intend to collect unrelated personal information merely because it is publicly accessible. Any such processing remains subject to applicable law and the purpose for which the information is obtained.

7. Purposes for Which We Use Personal Information

We may process personal information for the following purposes, where relevant and lawful.

7.1 Responding to Enquiries

We use contact details and enquiry information to respond to questions, acknowledge requests, provide information about our services, and communicate with individuals who have contacted us.

7.2 Evaluating Business Requirements

Where an individual asks about our services, we may use the information supplied to understand the general nature of the business requirement and determine whether our services may be relevant.

This does not mean that every enquiry will result in an offer, engagement, or acceptance of the proposed work.

7.3 Preparing and Administering Service Engagements

Where appropriate, we may use information to prepare quotations, clarify service requirements, document agreed terms, coordinate communications, maintain records, and administer an engagement.

The scope of any actual service engagement is governed by the applicable written agreement and related terms, rather than by this Privacy Policy.

7.4 Communicating About Existing Matters

We may use contact information to respond to follow-up questions, communicate changes relevant to an enquiry or engagement, address complaints, clarify documentation, or provide other communications reasonably connected with an existing business relationship.

7.5 Operating and Maintaining the Website

Technical information may be used to deliver website content, identify errors, diagnose performance problems, maintain compatibility, and support the ordinary operation of the website.

7.6 Security and Abuse Prevention

We may process relevant technical information and communication records to investigate suspicious activity, prevent unauthorized access, protect the website, enforce applicable terms, and respond to potential misuse.

7.7 Legal and Regulatory Compliance

We may process information where reasonably necessary to comply with applicable legal obligations, maintain required business records, respond to lawful requests, establish or defend legal claims, or cooperate with competent authorities where legally required.

7.8 Internal Administration

We may use information for legitimate business administration, recordkeeping, quality assurance, complaint management, service planning, and the maintenance of accurate business documentation.

7.9 Website Measurement and Improvement

Where analytics or similar tools are enabled and their use is lawful, we may use information about website interactions to understand general usage patterns, assess technical performance, and improve website structure or content.

Where reasonably practicable, we seek to use aggregated or otherwise less identifying information for general performance analysis.

7.10 Marketing and Business Communications

We may use business contact information to send communications concerning our services where permitted by applicable law and, where required, based on consent or another valid legal basis.

We do not intend this Policy to constitute blanket permission to send unsolicited marketing communications. Any applicable consent requirements, opt-out rights, and restrictions under electronic marketing laws continue to apply.

You may ask us to stop sending non-essential marketing communications by contacting us or using an unsubscribe mechanism where one is provided. This does not necessarily prevent us from sending non-marketing communications required to administer an existing engagement, respond to your request, or meet a legal obligation.

8. Legal Bases for Processing

Depending on the applicable jurisdiction and circumstances, we process personal information on one or more lawful bases.

These bases may include the following.

8.1 Consent

Where consent is required, we will seek it before carrying out the relevant processing. Consent may be relevant to certain cookies, optional tracking technologies, marketing activities, or other processing activities governed by consent requirements.

Where permitted by law, you may withdraw consent. Withdrawal does not ordinarily invalidate processing that occurred lawfully before the withdrawal, and certain processing may continue where another valid legal basis applies.

8.2 Steps Requested Before Entering Into a Contract

We may process relevant information when necessary to respond to a request for a quotation, discuss proposed services, assess a prospective engagement, or take steps requested by an individual before entering into a contract.

8.3 Performance of a Contract

Where applicable, we may process information that is necessary to perform a contract with you or to administer an agreed business engagement.

8.4 Legal Obligations

We may process information where necessary to comply with legal, regulatory, accounting, recordkeeping, or other mandatory obligations.

8.5 Legitimate Business Interests

Where recognized by applicable law, we may process information for legitimate business interests, provided that the relevant processing is lawful and does not override rights or interests that require greater protection.

Such interests may include website security, prevention of misuse, maintenance of business records, response to enquiries, and administration of business relationships.

8.6 Other Lawful Bases

Depending on the applicable legal framework, another lawful basis may apply, including the establishment, exercise, or defence of legal claims or compliance with a lawful request from a competent authority.

The legal basis applicable to a particular activity depends on the facts, the information involved, the purpose of processing, and the law governing the activity.

9. Disclosure of Personal Information

We do not treat personal information as information that may be disclosed without a legitimate purpose. Any disclosure must be considered in light of the purpose for which the information was collected, the recipient's role, applicable contractual restrictions, and applicable law.

We may disclose personal information in the circumstances described below.

9.1 Website Hosting and Technical Providers

Information may be processed by providers responsible for website hosting, server infrastructure, technical maintenance, security, data storage, or related operational functions.

Such providers may process technical logs, website submissions, or other information to the extent necessary to perform their services.

9.2 Communication and Email Providers

If we use external email, telephony, messaging, or communication systems, relevant information may be processed by those providers to deliver communications, maintain service functionality, or preserve business records.

9.3 Form and Customer Management Providers

Where website forms or customer management tools are used, information submitted through those systems may be processed by the providers operating them.

The specific information shared will depend on the configuration of the relevant tool and the purpose for which it is used.

9.4 Professional Advisers

We may disclose relevant information to lawyers, accountants, auditors, insurers, or other professional advisers where reasonably necessary for legitimate business administration, professional advice, compliance, or legal proceedings.

9.5 Payment and Transaction Providers

Where a payment provider is used in connection with a business transaction, information necessary to process, reconcile, document, or investigate the transaction may be shared with that provider.

The payment provider may independently process information under its own terms, privacy policy, and legal obligations.

9.6 Government Authorities and Legal Proceedings

We may disclose information where required or permitted by applicable law, a valid legal process, a binding order, or a lawful request from a competent authority.

We may also disclose relevant information where reasonably necessary to establish, exercise, or defend legal claims or to protect the rights, property, or safety of our business or others, subject to applicable law.

9.7 Business Restructuring

If our business undergoes a merger, restructuring, reorganization, sale, transfer of assets, insolvency proceeding, or similar transaction, relevant information may be disclosed to appropriate parties as part of the transaction, subject to applicable confidentiality and data protection requirements.

9.8 With Your Direction or Authorization

We may disclose information where you have specifically requested or authorized the disclosure, provided that the disclosure is lawful and consistent with the scope of that authorization.

9.9 No Unrelated Disclosure as a General Practice

We do not intend to disclose personal information indiscriminately or to make it publicly available without a lawful basis. The categories described in this Section identify circumstances in which disclosure may occur; they do not mean that every category of recipient is necessarily engaged or receives information in every case.

The actual recipients of personal information depend on the services and systems used by VisVa at the relevant time.

10. Sale, Sharing, and Targeted Advertising

The terms "sale," "sharing," and "targeted advertising" may have specific meanings under certain privacy laws. These definitions may extend beyond an ordinary exchange of information for money.

VisVa will assess the applicability of these concepts based on its actual information practices, the technologies deployed on the website, the recipients of information, and the law applicable to the individual concerned.

We do not intend to sell personal information for monetary consideration as a general business practice. However, whether a particular disclosure constitutes a "sale," "sharing," or targeted advertising under a specific law depends on the facts and the statutory definition.

If analytics, advertising pixels, cross-site tracking technologies, or similar tools are enabled, they may transmit information to the providers operating those tools. Depending on the configuration and applicable law, that activity may trigger additional notice, consent, opt-out, or other obligations.

Where a law provides an individual with a right to opt out of a legally defined sale, sharing, or targeted advertising activity, we will provide the applicable mechanism where required.

We will not represent that the website is free of advertising or analytics tracking unless its actual configuration supports that statement. Visitors may consult our Cookie Policy for further information about the relevant technologies.

11. Cookies and Similar Technologies

Cookies and similar technologies may support the operation, security, functionality, and measurement of a website.

Depending on the tools actually enabled, these technologies may include:

Strictly necessary technologies: Technologies required for essential website functions, security, session management, or delivery of a requested service.

Functional technologies: Technologies used to remember preferences or provide additional website functionality, where applicable.

Analytics technologies: Technologies used to measure traffic, understand general usage patterns, or assess website performance.

Advertising or measurement technologies: Technologies that may be used to measure advertising effectiveness, attribute visits or enquiries, or deliver advertising-related functionality, where enabled.

These categories are descriptive and do not confirm that every category is active on our website.

Where applicable law requires consent before non-essential cookies or similar technologies are placed or accessed, we will seek consent through an appropriate mechanism. Where consent is required, you should be able to make the choices provided by that mechanism.

You may also be able to manage cookies through your browser settings. Disabling certain cookies may affect the availability or functionality of some website features.

Browser-based cookie controls do not necessarily prevent all forms of data collection or transmission. Additional controls may be required for certain technologies.

For further information concerning the cookies and technologies used on the website, please review our Cookie Policy at https://visva.co/cookie-policy/.

12. Third-Party Websites and Services

Our website may contain links to external websites, platforms, applications, or services operated by third parties.

A link is provided for informational, operational, or business purposes and does not, by itself, mean that VisVa owns, controls, endorses, or assumes responsibility for the privacy practices of the linked service.

When you follow a third-party link, submit information through an external form, use an external payment page, or interact with an independently operated service, your information may be processed under that provider's own privacy policy and terms.

We encourage visitors to review the privacy documentation of any third-party service before submitting personal information or completing a transaction.

We cannot guarantee the security, accuracy, availability, or privacy practices of websites that we do not control. Nevertheless, where a third party processes information on our behalf, our relationship with that provider may be subject to contractual, security, and data protection requirements, as applicable.

13. Data Processors and Service Providers

We may engage third-party organizations to perform technical, administrative, communication, security, hosting, or other functions that support our business.

Where a provider processes personal information on our behalf, we will seek to establish arrangements appropriate to the nature of the information, the services being performed, and applicable law.

Depending on the circumstances, such arrangements may address:

• The purposes and duration of processing.
• The categories of information involved.
• The permitted processing activities.
• Confidentiality obligations.
• Appropriate security measures.
• Restrictions on unauthorized use or disclosure.
• Assistance with privacy requests where required.
• Retention, return, or deletion of information when appropriate.
• Requirements relating to subcontractors or further processing.

A provider may also act as an independent controller or equivalent decision-maker for certain activities, particularly where it determines its own purposes or is independently required to process information under law.

The legal status of a provider depends on its actual role and is not determined solely by its commercial label.

We do not claim that every provider is contractually engaged in every category listed above. The relevant arrangements depend on the providers actually used.

14. International Data Transfers

VisVa is operated by Visva Business Solutions (OPC) Private Limited in India and may receive enquiries from individuals and organizations located in other countries, including the United States and Canada.

Depending on the location of our infrastructure, service providers, communication systems, and business operations, personal information may be processed or stored in India or another country.

Where personal information is transferred across national borders, the destination country may have privacy laws that differ from those applicable in the country from which the information originated.

We will handle international transfers in accordance with applicable legal requirements. Depending on the relevant jurisdiction and circumstances, this may involve obtaining consent, providing required notices, relying on a legally permitted transfer mechanism, implementing contractual safeguards, or taking other steps required by law.

An international transfer does not, by itself, mean that personal information is unprotected. However, the legal protections and available remedies may differ depending on the relevant jurisdictions and the circumstances of the transfer.

If a specific privacy law requires us to provide additional information concerning international transfers, we will provide that information as required.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements and legitimate recordkeeping needs.

The appropriate retention period depends on the type of information, the purpose of processing, the nature of the business relationship, security considerations, and applicable law.

Examples include the following.

15.1 Website Enquiries

Information relating to an enquiry may be retained for a reasonable period to respond to the enquiry, manage follow-up communications, maintain business records, address disputes, or comply with legal obligations.

If an enquiry does not result in a business relationship, we may retain limited information for a period appropriate to the purpose and applicable law before deleting or otherwise disposing of it.

15.2 Client and Contract Records

Information relating to an actual business engagement may need to be retained for the duration of the engagement and for an appropriate period afterwards.

Retention may be necessary to document agreed terms, administer the relationship, reconcile payments, address complaints, establish the history of services, comply with accounting requirements, or establish or defend legal claims.

15.3 Financial and Accounting Records

Financial and accounting records may be retained for the period required by applicable tax, accounting, commercial, and other laws.

15.4 Technical and Security Logs

Technical logs may be retained for a period appropriate to website operation, troubleshooting, security monitoring, and investigation of suspicious activity.

The retention period may depend on the logging configuration, the seriousness of an incident, and applicable legal requirements.

15.5 Privacy Requests and Compliance Records

We may retain records of privacy requests, consent choices, objections, complaints, and actions taken in response to those requests to demonstrate compliance, avoid repeated processing, and maintain appropriate administrative records.

15.6 Deletion and Disposal

When information is no longer required for its relevant purpose and no lawful retention requirement or other valid reason for continued retention applies, we will take reasonable steps to delete, anonymize, or otherwise dispose of it.

Deletion may not be immediate in every system. Information may remain temporarily in backups, archived records, security logs, or systems maintained by service providers until it is removed in accordance with their ordinary procedures.

Where continued retention is required by law, necessary for legal claims, or otherwise lawfully justified, the information may be retained for the applicable period.

We do not specify a universal retention period for all information because different categories of information may have different operational and legal requirements.

16. Information Security

We recognize that personal information should be handled with appropriate care and that security measures are an important component of responsible information management.

We seek to use reasonable administrative, technical, and organizational measures appropriate to the nature of the information and the risks associated with its processing.

Depending on the systems and services involved, these measures may include access restrictions, account security controls, software updates, secure communications, hosting safeguards, backups, technical monitoring, and procedures intended to reduce unauthorized access or disclosure.

The particular measures used will depend on the relevant system, service provider, and operational requirements.

No method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Accordingly, we cannot promise absolute security or guarantee that unauthorized access, loss, alteration, or disclosure will never occur.

You are responsible for taking reasonable precautions when communicating online, including using appropriate device security and avoiding the transmission of unnecessary sensitive information through ordinary email or public forms.

If we become aware of a personal information incident that triggers a notification obligation under applicable law, we will take the steps required by that law, which may include investigating the incident, mitigating relevant risks, and notifying affected individuals or authorities where legally required.

17. Data Breaches and Security Incidents

A security incident may include unauthorized access to information, accidental disclosure, loss of information, compromise of an account, or another event affecting the confidentiality, integrity, or availability of personal information.

If a relevant incident occurs, we will assess the nature and scope of the incident, the categories of information involved, the potential consequences for affected individuals, and the legal obligations applicable to the circumstances.

Where appropriate, we may take measures to contain the incident, restrict further access, restore affected systems, investigate the cause, and reduce the likelihood of recurrence.

Where applicable law requires notification to a regulator, affected individual, or other party, we will provide the notification within the timeframe and in the manner required by that law.

The absence of a statement describing a specific incident in this Policy should not be interpreted as a guarantee that an incident cannot occur.

18. Your Privacy Rights

Depending on your location, the nature of the information, the purpose of processing, and the applicable law, you may have rights concerning your personal information.

These rights are not identical in every jurisdiction. Some rights apply only to certain categories of information or processing, and certain exceptions may permit or require us to retain or process information despite a request.

Where applicable, your rights may include the following.

18.1 Right to Request Access

You may have the right to request confirmation of whether we process personal information about you and to obtain access to information covered by the relevant law.

We may need to verify your identity and clarify the scope of your request before providing a response.

18.2 Right to Request Correction

You may have the right to request correction of inaccurate or incomplete personal information.

Where appropriate, we may ask you to identify the information that requires correction and provide sufficient details to help us update the relevant records.

18.3 Right to Request Deletion

You may have the right to request deletion of personal information in certain circumstances.

Deletion rights may be subject to exceptions, including where retention is necessary to comply with legal obligations, complete a requested transaction, maintain required records, protect security, resolve disputes, or establish or defend legal claims.

18.4 Right to Withdraw Consent

Where processing relies on consent, you may have the right to withdraw that consent.

Withdrawal does not necessarily affect the lawfulness of processing carried out before withdrawal. It also does not prevent processing that is lawfully based on another applicable ground.

18.5 Right to Object or Restrict Processing

Depending on applicable law, you may have the right to object to certain processing activities or request that processing be restricted in specified circumstances.

We will evaluate the request in light of the applicable law, the purpose of processing, and any lawful grounds for continuing the relevant activity.

18.6 Right to Data Portability

Where applicable law provides a right to data portability, you may be entitled to receive certain personal information in a structured, commonly used, and machine-readable format or request its transmission to another organization, subject to the conditions imposed by that law.

This right does not necessarily apply to every type of record or every category of processing.

18.7 Rights Relating to Marketing

You may request that we stop sending non-essential marketing communications, subject to applicable law.

Where an unsubscribe mechanism is provided, you may use it to exercise the relevant opt-out. You may also contact us directly using the contact information in this Policy.

18.8 Rights Relating to Certain Automated Decisions

Where applicable law provides rights concerning decisions made solely through automated processing that produce legal or similarly significant effects, you may be entitled to additional information or safeguards.

We do not intend this Policy to suggest that such decision-making is necessarily part of our current service model. Any rights under applicable law remain available where the relevant circumstances arise.

18.9 Right to Lodge a Complaint

Depending on the applicable law, you may have the right to lodge a complaint with a competent privacy regulator or data protection authority.

Where appropriate, you may also contact us first so that we have an opportunity to understand and address your concern. Doing so does not remove any right to contact a regulator where the law permits it.

19. How to Submit a Privacy Request

To submit a privacy request, email support@visva.co.

Please use a subject line such as "Privacy Request" and provide enough information for us to understand the request.

Your request should identify the relevant communication, enquiry, or business relationship where reasonably possible. You should not include passwords, payment card details, government identification numbers, or other sensitive information in an ordinary email unless we have specifically provided a suitable secure method for doing so.

For your protection, we may need to verify your identity before providing access to information, making a correction, deleting information, or acting on another request.

The verification process will be proportionate to the nature and sensitivity of the request. We may request additional information where reasonably necessary to confirm that the request comes from the relevant individual or an authorized representative.

If a representative submits a request on your behalf, we may ask for evidence of their authority where permitted by law.

We will respond within the timeframe required by applicable law. If additional time is permitted and reasonably necessary, we will provide any required notice explaining the extension.

If we cannot fulfil all or part of a request, we will explain the decision to the extent required by law. This may occur where an applicable exception permits continued processing, where the request cannot be verified, or where the requested action would unlawfully affect another person's rights.

Where applicable law provides a right to appeal a decision concerning a privacy request, we will provide the relevant appeal process and comply with the applicable requirements.

We will not charge a fee for a privacy request where applicable law prohibits such a fee. Where a law permits a reasonable fee for a manifestly unfounded, excessive, or repetitive request, any fee will be assessed in accordance with that law.

20. Privacy Rights for United States Residents

Certain United States states have enacted comprehensive privacy laws that provide individuals with specific rights concerning personal information.

Depending on the state in which you reside, the nature of our activities, the information involved, and whether the relevant law applies to our business, you may have rights that include:

• The right to know whether personal information is being processed.
• The right to access specified personal information.
• The right to obtain information about relevant processing activities.
• The right to request correction of inaccurate personal information.
• The right to request deletion of certain personal information.
• The right to receive a portable copy of certain information.
• The right to opt out of certain sales, sharing, or targeted advertising activities.
• The right to opt out of certain profiling activities where the law provides that right.
• The right to appeal certain decisions concerning privacy requests.
• The right not to be discriminated against for exercising applicable privacy rights.

The exact scope of these rights, the exemptions available, and the obligations imposed on businesses vary by state.

A state privacy law may apply only if specified thresholds, business criteria, processing conditions, or other requirements are met. The fact that our website can be accessed from a particular state does not, by itself, establish that every provision of that state's privacy law applies to VisVa.

Where a particular state law applies to our processing, we will comply with the applicable requirements and provide any additional notices or mechanisms required by that law.

20.1 Opt-Out Rights

Where required by applicable law, you may request to opt out of a legally defined sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling activities.

The relevant definitions and requirements differ between jurisdictions. We will assess opt-out obligations based on the actual processing involved and the law that applies.

20.2 Authorized Agents

Where permitted by applicable law, an individual may appoint an authorized agent to submit a privacy request on their behalf.

We may require appropriate verification of the individual's identity and the agent's authority, consistent with applicable legal requirements.

20.3 Appeals

Where a state law provides a right to appeal a refusal to act on a privacy request, you may submit an appeal by replying to our response or emailing support@visva.co with the subject line "Privacy Request Appeal."

We will review the appeal and respond in accordance with the applicable law. If the law provides a right to contact a regulator following an unsuccessful appeal, that right remains available.

20.4 Notice of Financial Incentives

We do not intend this Privacy Policy to establish a financial incentive program in exchange for personal information. If we introduce a program that is subject to specific financial incentive disclosure requirements, we will provide the disclosures required by applicable law before the relevant program begins.

21. Privacy Information for Canadian Residents

We may receive enquiries from individuals and businesses located in Canada.

Where applicable, personal information relating to Canadian residents may be subject to federal, provincial, or territorial privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) or other applicable legislation.

The law applicable to a particular activity depends on the nature of the organization, the activity, the location of the relevant parties, and other legal factors.

Subject to the applicable legal framework, Canadian residents may have rights to request access to personal information, request correction of inaccurate information, ask questions about its handling, and make a complaint concerning privacy practices.

We will assess and respond to such requests in accordance with the law applicable to the relevant processing.

21.1 Accountability and Purpose

We seek to collect and use personal information for identified and appropriate purposes. Where consent is required, we will seek consent in accordance with applicable law.

The form of consent required may depend on the sensitivity of the information, the reasonable expectations of the individual, and the purpose of processing.

21.2 Access and Correction

Where applicable law provides access or correction rights, you may submit a request using the contact details in this Policy.

We may need to verify your identity and identify the records concerned before acting on the request.

21.3 Complaints

If you have a concern about how we handle personal information, you may contact us at support@visva.co.

We will review the concern and respond as appropriate. Where applicable law permits or requires a complaint to be submitted to a privacy regulator, you may also contact the competent authority.

21.4 Cross-Border Processing

Because VisVa is operated in India, personal information received from Canadian residents may be processed outside Canada, depending on the systems and service providers used.

Where applicable Canadian law requires additional transparency, safeguards, consent, or other measures for cross-border processing, we will comply with those requirements.

22. Privacy Information for India

Visva Business Solutions (OPC) Private Limited operates in India. Personal information processed in connection with our business may therefore be subject to applicable Indian laws and regulations, including the Digital Personal Data Protection Act, 2023, and applicable rules or notifications to the extent they are in force and apply to the relevant processing.

The application of a particular legal requirement depends on the applicable statutory provisions, commencement dates, rules, exemptions, and circumstances of processing.

Where required by applicable Indian law, we will provide the relevant notice, obtain consent where necessary, identify the applicable purpose, facilitate the exercise of statutory rights, and comply with obligations concerning the handling and security of personal data.

Where consent is the applicable basis for processing, an individual may withdraw consent through an appropriate channel, subject to the legal consequences and any other lawful basis for processing.

Withdrawal of consent does not necessarily require the deletion of all information where another legal obligation or lawful ground requires or permits continued retention.

Where an individual has a right under applicable Indian law to request access to information, correction, completion, updating, erasure, grievance redressal, or another statutory remedy, we will provide the applicable process to the extent required by law.

We will address privacy-related complaints and requests through the contact details stated in this Policy and comply with applicable response obligations.

Nothing in this Section is intended to imply that every statutory provision is already applicable to every activity. The relevant requirements will be determined by the law in force and applicable to the particular processing.

23. Children's Privacy

Our website and business services are intended for business users, organizations, professional offices, and individuals acting in a business capacity. They are not designed to solicit personal information from children.

We do not knowingly seek to collect children's personal information for the purpose of providing a general consumer service through this website.

If you believe that a child has submitted personal information to us in circumstances where the collection was not appropriate, please contact us at support@visva.co.

We will review the circumstances and take reasonable steps consistent with applicable law, which may include deleting the information where appropriate and legally permissible.

The age at which a person is treated as a child, the consent requirements that apply, and any exceptions depend on the relevant jurisdiction and the circumstances of processing.

24. Email and Other Electronic Communications

When you contact us by email or another electronic channel, we may process the content of the communication, the contact details associated with it, and technical information generated by the communication system.

We use such information to respond to enquiries, maintain business correspondence, administer service matters, and address related issues.

Electronic communications may be stored by the systems through which they are sent or received. Depending on the provider and configuration, records may also exist in archives, backups, spam filters, security logs, or administrative systems.

You should be aware that ordinary email is not necessarily a suitable method for transmitting highly sensitive information. Please avoid including passwords, financial account credentials, or unnecessary personal details in routine correspondence.

If you receive a message that appears to be from VisVa but you suspect it is fraudulent, do not provide sensitive information in response. Contact us through the contact details published on our official website to verify the communication.

25. Telephone Communications

If you call our published business telephone number or request that we contact you by telephone, we may process the telephone number you provide and information necessary to respond to your request.

Depending on the telephone systems used, limited technical or administrative records may be generated, such as call time, duration, routing information, or service logs.

This Policy does not represent that VisVa records or transcribes every telephone conversation. If call recording or transcription is introduced or used in a particular context, applicable notice, consent, and legal requirements must be assessed and followed.

You may ask us about the handling of telephone-related information by contacting support@visva.co.

26. Business Contacts and Representatives

In business-to-business dealings, we may process information about owners, employees, managers, contractors, purchasing personnel, or other representatives of an organization.

The information may include professional contact details, job title, organization, business correspondence, and records of decisions or instructions relating to an enquiry or service engagement.

We use this information for relevant business communications, service administration, documentation, and other purposes described in this Policy.

If you provide information about an employee, colleague, client, or other individual, you should ensure that you are authorized to provide it and that the disclosure is appropriate for the purpose.

Where applicable law requires a particular notice or consent, the relevant legal requirement remains applicable.

27. Confidential and Third-Party Information

Please do not submit confidential business records, customer lists, employee records, or personal information belonging to another person unless the information is relevant to your request and you have an appropriate legal basis or authorization to provide it.

If you provide information relating to another person, you are responsible for ensuring that the disclosure is lawful and consistent with any confidentiality obligations applicable to you.

We may limit, decline to use, or delete information that is unnecessary for the relevant purpose, subject to legal and contractual obligations.

Where we are required to process information about third parties in connection with an engagement, the relevant scope, responsibilities, security arrangements, and legal requirements should be considered separately as appropriate.

28. Automated Processing and Profiling

Certain website or technical systems may perform automated operations, such as filtering spam, detecting suspicious traffic, identifying technical errors, or applying security rules.

Where these operations involve personal information, they may be used for website security, operational reliability, or other legitimate purposes, subject to applicable law.

This Policy does not represent that VisVa uses automated decision-making to determine every enquiry's eligibility, pricing, service availability, or contractual outcome.

If we introduce processing that is subject to specific legal notice, explanation, objection, or human-review requirements, we will address those requirements as applicable.

29. Do Not Track and Similar Signals

Some browsers offer privacy settings or signals intended to communicate preferences about online tracking.

The effect of these signals depends on the signal, the technology involved, and applicable law. There is no single technical standard that guarantees every website or third-party service will interpret every signal in the same way.

Where a particular signal is recognized by applicable law and the relevant requirements apply to our processing, we will handle it in accordance with those requirements.

You may also manage available cookie or tracking choices through the consent controls provided on the website, where applicable, and through your browser or device settings.

30. Complaints and Grievance Redressal

We take privacy-related enquiries and complaints seriously.

If you believe that we have collected, used, disclosed, or retained your personal information in a manner inconsistent with this Policy or applicable law, you may contact us at:

Email: support@visva.co
Subject: Privacy Complaint

Please describe the issue and provide sufficient details for us to identify the relevant interaction. Do not include unnecessary sensitive information.

We will review the complaint, consider the circumstances, and take appropriate action where warranted. Depending on the issue, this may involve clarifying our practices, correcting information, restricting certain processing, deleting information where appropriate, or taking another legally permitted step.

We will respond within the timeframe required by applicable law. If we need further information to understand or verify the complaint, we may contact you for clarification.

Where a privacy law provides a right to complain to a regulator, data protection authority, or other competent body, this Policy does not remove that right.

31. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in our business, website functionality, information practices, technology, service providers, or applicable legal requirements.

When a revision is made, we will update the "Last Updated" date displayed at the beginning of the Policy.

Where a material change requires additional notice or consent under applicable law, we will take the steps required by that law. Depending on the circumstances, this may include displaying a notice on the website, communicating with affected individuals, or requesting renewed consent.

A revised Policy will apply from its stated effective date, subject to any mandatory legal requirements concerning prior notice, consent, or retrospective application.

We encourage visitors to review this page periodically so that they remain informed about our current privacy practices.

32. Relationship with Other Policies

This Privacy Policy should be read alongside the following documents published on our website, where available:

• Terms and Conditions: https://visva.co/terms-and-conditions/
• Service and Cancellation Policy: https://visva.co/service-and-cancellation-policy/
• Disclaimer: https://visva.co/disclaimer/
• Cookie Policy: https://visva.co/cookie-policy/

The Privacy Policy addresses personal information and related privacy matters. The Cookie Policy addresses cookies and similar technologies in greater detail. The Terms and Conditions address general website and business terms, while the Service and Cancellation Policy addresses the relevant service and cancellation arrangements.

Each document governs its respective subject matter. Nothing in another policy should be interpreted as authorizing the processing of personal information in a manner prohibited by applicable law.

If a provision appears inconsistent with a mandatory privacy or data protection requirement, the applicable legal requirement will prevail to the extent necessary.

33. Limitation of Scope

This Privacy Policy describes our intended approach to personal information processed in connection with the website and business activities covered by this document. It is not a guarantee that every electronic transmission, third-party service, or internet-based system is entirely secure or free from technical errors.

The Policy does not replace the privacy policy of a third-party provider acting independently, nor does it establish the terms governing services that are not offered by VisVa.

Nothing in this document is intended to exclude a legal obligation, diminish a statutory right, or limit a remedy that cannot lawfully be excluded.

Where a particular processing activity requires a separate notice, contractual provision, consent mechanism, or additional disclosure under applicable law, this general Policy may need to be supplemented by that additional documentation.

34. Contact Us

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, need clarification about our handling of personal information, or want to submit a privacy-related complaint, please contact us using the following details:

Visva Business Solutions (OPC) Private Limited
Operating Name: VisVa
Website: https://visva.co/
Email: support@visva.co
Telephone: +1 (888) 973-3308
Business Address: Industrial Shed No. F-135, Phase 8-B, Industrial Area, Mohali, Punjab 140308, India.

Please use the email subject "Privacy Request" or "Privacy Complaint," as applicable, to help us identify the nature of your communication.

We will review your communication and respond in accordance with our operational capabilities and the legal requirements applicable to the request.