Privacy Policy

Scope of this Policy

This Policy covers the Site and our pre-engagement interactions with prospective clients — contact form submissions, email correspondence, scheduling calls, and proposal discussions.

It does not cover personal data we process on behalf of clients during a paid services engagement (governed by the relevant data processing agreement and the client's own privacy notice), nor our consumer products such as VaruFit and Serckl, each of which has its own product-specific privacy notice.

Information we collect

• Information you provide: name, email, phone, company, role, and any other details you share when you fill out a contact form, email us, schedule a call, or correspond with us.
• Information collected automatically: IP address, approximate location, device and browser type, referring URL, pages visited, and session timestamps captured through server logs and analytics.
• Information from third parties: data received when you book a call through a scheduling provider, contact us through social platforms, or are referred to us through a mutual contact.

How we use information

• Respond to inquiries and provide information about our products and services.
• Prepare proposals, scope projects, and negotiate engagements with prospective clients.
• Operate, secure, debug, and improve the Site.
• Send transactional communications related to your inquiry. We do not send marketing emails without a separate opt-in.
• Comply with legal obligations, enforce our agreements, and protect against fraud or misuse.

Legal bases for processing

Where the GDPR (European Union or United Kingdom) or comparable laws apply, we rely on the following legal bases: your consent (for optional communications and non-essential cookies), the performance of a contract or pre-contractual steps at your request, our legitimate interests in running our business and improving our services, and compliance with legal obligations.

Under India's Digital Personal Data Protection Act, 2023, we process personal data based on your consent or where processing is for a legitimate use permitted by the Act.

Cookies and analytics

The Site uses a small number of cookies and similar technologies to operate the Site and to measure aggregate traffic. We may use privacy-respecting analytics tools that rely on server logs and aggregated data.

You can disable non-essential cookies through your browser settings; some parts of the Site may not function properly without them.

How we share information

We do not sell or rent your personal information. We share it only with:

• Service providers that help us operate the Site and our business (hosting, email, analytics, scheduling), each under contractual confidentiality and data-protection obligations.
• Professional advisors such as lawyers, accountants, and auditors, where necessary.
• Authorities and other parties when required by law, to enforce our rights, or to protect the safety of our users or the public.
• A successor entity in connection with a merger, acquisition, financing, or reorganization, with reasonable notice where required by law.

International data transfers

Aurtrio is based in India, and the providers we use may be located in India, the European Union, the United Kingdom, the United States, or elsewhere. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or the protections offered by the laws of the receiving country.

Data retention

We keep personal information only as long as necessary for the purposes set out in this Policy, to comply with legal, tax, and audit requirements, and to resolve disputes. When data is no longer needed, we delete or anonymize it.

Security

We use reasonable technical and organizational measures to protect personal information, including transport encryption (HTTPS), access controls, and minimum-necessary data collection. No system is perfectly secure; you share information at your own risk.

Your privacy rights

Depending on where you live, you may have the following rights, subject to applicable law:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion or erasure — ask us to delete your information, subject to legal exceptions.
• Restriction or objection — limit or object to certain processing.
• Portability — receive your information in a portable, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Complaint — lodge a complaint with your local data protection authority.

To exercise any right, email us at hello@aurtrio.com. We respond within the timeframe required by applicable law, and you will not be discriminated against for exercising your rights.

Children's privacy

The Site is intended for users aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-party links

The Site may link to third-party websites and services that we do not control. Their data practices are governed by their own privacy policies, which we encourage you to review.

Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. Continued use of the Site after changes take effect indicates acceptance of the updated Policy.

Grievance Officer (India)

In accordance with India's Information Technology Rules, 2011 and the Digital Personal Data Protection Act, 2023, the Grievance Officer can be contacted at:

• Name: Lidhish Chinnapparaj
• Designation: Designated Partner, Aurtrio LLP
• Email: lidhish@aurtrio.com (subject line: "Grievance — Privacy")
• Address: Aurtrio LLP, 64/a, Tharayil Kuttikavil, Choppankavu, Kadalundinagaram, Tirurangadi, Malappuram, Kerala 673314, India

We aim to acknowledge complaints within 48 hours and resolve them within the timeframe required by applicable law.

Contact

For questions about this Policy or our privacy practices, email hello@aurtrio.com or write to us at the registered office address listed above.