We collect only what we need to reply to you and serve you well, and we never sell it. This page explains what we collect, why, who we share it with and the rights you have under Indian and EU data protection law.
This website, www.vittree.com, is operated by Vittree Business Solutions Private Limited and Vittree Corporate Consultancy LLP (together, "Vittree", "we", "us"), both with their registered office at 3rd Floor, EAK Towers, Main Avenue, Panampilly Nagar, Kochi, Kerala 682036, India. We also have a branch in Bangalore, and provide client support for Europe from Belgium and for the Gulf from Dubai (UAE).
For the personal data described in this policy, Vittree is the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors in the European Union, the "controller" under the EU General Data Protection Regulation (GDPR).
This policy explains how we handle personal data when you visit our website, send us an enquiry or call-back request, or contact us by email, phone or WhatsApp.
If you become a client, the personal and business information you share for the engagement is also governed by your engagement letter and the confidentiality obligations it sets out.
Information you give us. When you use our contact or call-back forms, or write to us, we collect what you choose to share: your name, company, email address, phone number, the service you are interested in, your preferred way of being contacted and your message.
Information collected automatically. Like most websites, ours receives basic technical information when you visit:
What we do not do. We do not currently use analytics, advertising or tracking cookies, and we do not build profiles of visitors. The "Ask Vittree" assistant runs inside your browser; the questions you type into it are not sent to us or stored. If we add analytics or connect the assistant to an online service, we will update this policy first.
We process your personal data on the basis of your consent, which you give by sending us an enquiry, and for the legitimate uses and legal obligations allowed under the DPDP Act. For EU visitors, our legal bases under the GDPR are your consent, taking steps at your request before entering into a contract, our legitimate interest in responding to business enquiries, and compliance with legal obligations.
We will not send you marketing messages unless you have asked us to, and you can opt out at any time.
Some of the providers above are located outside India, mainly in the United States, and our own team includes people in Belgium and the UAE. Your data may therefore be processed outside India. We transfer personal data only as permitted under the DPDP Act, and for EU personal data we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
We keep enquiries that do not lead to an engagement for up to 24 months, so we can follow up and refer back to earlier conversations, and then delete them. If you become a client, we keep engagement records for as long as the law requires us to retain books, working papers and compliance records, and then delete or anonymise them.
You can ask us to delete your enquiry sooner. See Your rights.
Our website is served over an encrypted (HTTPS) connection. Access to enquiries and client information is limited to staff who need it, and client work is carried out under confidentiality obligations. No method of transmission or storage is completely secure, but we take reasonable safeguards to protect your data against loss and misuse.
Under the DPDP Act, you can ask us for a summary of the personal data we hold about you and how we use it; ask us to correct, complete, update or erase it; withdraw your consent at any time (this will not affect anything we did before you withdrew it); nominate someone to exercise your rights on your behalf; and raise a grievance with us. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
If you are in the European Union, you also have the right to access, rectify or erase your data, to restrict or object to processing, and to data portability. You can complain to your local data protection authority; in Belgium this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
To exercise any of these rights, contact us using the details below. We may need to confirm your identity before acting on a request.
Our website and services are meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, please contact us and we will delete them.
For questions, requests or complaints about your personal data, contact our Grievance Officer:
We will acknowledge your request and respond within the time required by law.
We may update this policy from time to time, for example when we add new services or tools to our website. The date at the top of this page shows when it was last changed. If we make significant changes, we will make them clear on this page.
Write to us at info@vittree.com with "Privacy" in the subject line, or call +91 95260 50011.
Contact us