How we handle your data.

Who we are

Innovlink (“Innovlink”, “we”) operates this website and the Vigilance360 platform. Under India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for personal data collected through this website.

This notice covers the website only. Personal data processed inside Vigilance360 on behalf of a customer is governed by that customer’s agreement with us.

What we collect and why

When you fill in a form on this website (the contact form, a brochure request, the chat assistant, a readiness check or a vendor risk snapshot request) we collect what you enter. The contact form asks for your work email, industry, the products you are interested in and, if you choose, a message. A brochure request asks for your work email and the product. The chat assistant, readiness checks and snapshot requests also ask for your name, company and job title. A readiness check also records your answers and score, a snapshot request the vendor domain you give us, and the chat assistant the conversation. We also record which page the form was on and when it was sent.

We use this for one purpose: to reply to your request and, where you have agreed, to contact you about Innovlink products. We do not sell personal data and we do not use it for advertising.

If you email us directly, we keep that correspondence for the same purpose.

Consent, and how to withdraw it

On the contact form and the brochure request, sending the form is your consent for us to use your details to reply to that request, as the notice beside the form says. On the chat assistant, readiness checks and snapshot requests you give consent by ticking a box, which is never pre-ticked.

You can withdraw consent at any time, and doing so is as easy as giving it: email privacy@innovlink.co with the subject “Withdraw consent”. We will stop contacting you and delete your details, unless we need to keep them to meet a legal obligation.

Cookies and tracking

This website sets no advertising or analytics cookies and runs no third-party trackers. If that changes, we will ask for your consent first and update this notice.

After you request a brochure or fill in another form, your browser remembers the details you gave (your work email and, where a form asked for them, your name, company and job title) so you are not asked again. This stays on your own device; clear your browser’s site data to remove it. The chat assistant keeps the conversation in your browser until you close the tab.

To keep automated spam out of our forms we may use Cloudflare Turnstile, which checks that a person is filling in the form. It does not track you across other websites.

How long we keep it

Form and enquiry data is kept for 24 months from your last contact with us, then deleted. If you become a customer, your details are kept under the customer agreement instead.

Who sees it and where it goes

Form submissions are emailed to our sales team and kept in one lead list we control, so no request is lost in an inbox. We use service providers to run the website and send email (website hosting, and Amazon Web Services for email delivery, in the Mumbai region). They process data only on our instructions and under written terms.

Some processing by our hosting provider may take place outside India. We do not transfer personal data to any country restricted by the Government of India.

We do not share personal data with anyone else unless the law requires it.

Your rights

You can ask us what personal data we hold about you. You can also ask us to correct, update or erase it, and you can nominate another person to exercise these rights for you.

Write to privacy@innovlink.co with the subject “Privacy request”. We reply within 30 days. We may ask you to confirm your identity first.

Complaints

If you are not satisfied with how we handled a request, write to our grievance contact at privacy@innovlink.co. If we cannot resolve it, you may complain to the Data Protection Board of India.

Security and breaches

Form data travels over an encrypted connection and is held in access-controlled mailboxes. If a breach affects your personal data, we will inform you and the Data Protection Board of India as the law requires.

Children

This website is for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this notice

If this notice changes, the date at the top changes with it. Significant changes will be noted here.