Data Controller
Chirvex is the data controller for personal information collected through chirvex.in. As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring its lawful, fair, and transparent handling in accordance with the GDPR.
Controller details
- Name: Chirvex
- Email: chirvex@gmail.com
- Address: Chirala, Andhra Pradesh 523157, India
- Website: www.chirvex.in
Data We Collect
Information you provide directly
When you submit the contact form on chirvex.in, we collect the following fields:
- Full name (required)
- Email address (required)
- Phone number (optional)
- Service of interest (optional)
- Message content (required)
Data collected automatically — analytics only, with consent
If you accept analytics cookies, Google Analytics 4 collects anonymized usage data including:
- IP address (anonymized — the final octet is removed before storage)
- Browser type and version
- Device type and operating system
- Pages visited and session duration
- Geographic region (country/city level — not precise location)
- Referring website or traffic source
We do not collect payment card details, government identification, health data, or any special-category personal data defined under GDPR Article 9.
How We Use Your Data
We use your personal data only for the specific purposes listed below:
Responding to enquiries
To reply to contact form submissions and answer your questions about our services promptly.
Providing consultations and proposals
To prepare and deliver free consultations, project scopes, and service proposals tailored to your requirements.
Service communication
To send project updates, deliverables, invoices, and other service-related communications once an engagement begins.
Improving our website
To understand how visitors interact with chirvex.in so we can improve content, usability, and performance — only with your explicit analytics consent.
We do not send unsolicited marketing emails. We do not use your data for automated decision-making or profiling.
Legal Basis for Processing
Under GDPR Article 6, we rely on the following lawful bases when processing your personal data:
Processing contact form submissions to respond to your enquiry and provide the services you have requested from Chirvex.
Website analytics to understand visitor behaviour and improve our services and content. We have assessed that these interests do not override your fundamental rights and freedoms.
Placing analytics cookies via Google Analytics 4. This applies only when you click "Accept All" in the cookie banner. You can withdraw this consent at any time with no adverse effect.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. The retention periods below apply:
| Data type | Retention period | Basis |
|---|---|---|
| Contact form enquiries | 24 months from submission | Contractual necessity |
| Project correspondence | Duration of engagement + 24 months | Contractual necessity |
| Analytics data (GA4) | 24 months (Google Analytics default) | Consent |
| Cookie consent preference | 12 months (localStorage) | Legitimate interests |
After the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be attributed to any individual.
Data Sharing
We share your personal data with the following third-party processors only to the extent strictly necessary for the purposes described in this policy:
Formsubmit.co
An email delivery service that securely forwards contact form submissions to our team inbox over HTTPS. Data is not retained by Formsubmit.co beyond the point of delivery.
Formsubmit.co Privacy PolicyGoogle LLC — Google Analytics 4
Website analytics platform used to understand visitor behaviour anonymously. Data is shared only with your explicit consent. Google LLC is certified under the EU–US Data Privacy Framework, providing adequate safeguards for international data transfers.
Google Privacy PolicyWe do not sell, rent, trade, or share your personal data with any third party for advertising, retargeting, or commercial purposes — ever.
Your Rights Under the GDPR
As a data subject under the General Data Protection Regulation (GDPR) and the UK GDPR, you have the rights listed below. To exercise any of them, email chirvex@gmail.com. We will acknowledge your request within 5 business days and respond fully within 30 calendar days.
Right of Access (Art. 15)
Request a copy of all personal data we hold about you, along with information on how it is used and with whom it is shared.
Right to Rectification (Art. 16)
Ask us to correct any inaccurate or incomplete personal data we hold about you, without undue delay.
Right to Erasure (Art. 17)
Request deletion of your personal data — the "right to be forgotten" — where there is no compelling reason for continued processing.
Right to Restrict Processing (Art. 18)
Ask us to limit how we use your data while you contest its accuracy, object to processing, or await verification of our legitimate grounds.
Right to Data Portability (Art. 20)
Receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and transfer it to another controller.
Right to Object (Art. 21)
Object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent (Art. 7(3))
Withdraw your consent for analytics cookies at any time without penalty. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Supervisory authority complaints: If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your national data protection authority — for example, the Information Commissioner's Office (ICO) in the UK, or the Data Protection Commission (DPC) in Ireland.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction:
- HTTPS / TLS 1.2+ encryption for all data in transit between your browser and our servers
- Contact form data transmitted securely to our team inbox via Formsubmit.co over HTTPS
- Restricted internal access — only team members who need to respond to enquiries can access form submissions
- Third-party processors (Google Analytics, Formsubmit.co) maintain their own security certifications and data protection measures
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at chirvex@gmail.com.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or applicable law. When material changes are made, we will update the "Last updated" date at the top of this page. For significant changes that materially affect how we use your personal data, we will take reasonable steps to notify affected users. We encourage you to review this policy periodically. Continued use of chirvex.in after an update is published constitutes acceptance of the revised policy.
Questions or Data Requests?
For any privacy-related enquiries, data access requests, erasure requests, or concerns about how we handle your personal data, please contact us. We acknowledge requests within 5 business days and respond fully within 30 calendar days.
Chirvex · Chirala, Andhra Pradesh 523157, India · Data Controller