Privacy Notice

Visitor information we handle on a customer's instructions is governed by that customer's notice and the Data Processing Addendum (section 12). Privacy contacts are info@zonovva.com and Tejas Sakore, Grievance Officer, Zonovva, at Flat 102, Chandrabhaga, Nanded Fata, Lagad Colony, Lagad Industries Road, Pune, Maharashtra 411068.

Our own account and support information

We handle contact information, customer and account-holder identity, business details, website and order information, billing and payment references, communications, approvals, support requests and necessary access and security information. For a minor's portfolio we also handle the adult account holder's authority and consent record. We do not routinely request government ID numbers or copies merely to make a portfolio.

The purposes are responding to an enquiry, assessing service fit, preparing and performing the accepted contract, configuring and supporting the website, issuing payment records, processing cancellations and refunds, preventing fraud, protecting systems, answering complaints and complying with applicable law. Marketing communications require an appropriate separate basis or permission and an easy opt-out; service and legal notices may still be necessary.

We collect information you provide, information generated by the service and our communications, and information from authorised providers where needed for the stated purpose. We request only what is reasonably necessary. Access credentials, where needed, are handled through controlled access, not public content. We do not store full payment-card numbers or CVV; payment collection uses the payment provider's mechanism.

Client website visitor information

For ordinary enquiries, standard forms on customer websites request only a name, an email or phone number and a short message. Each form states its purpose and links to the customer's privacy notice. The designated recipient, access, retention and any consent wording are recorded in the customer's instructions. Visitors should not include card details, government ID numbers, bank credentials, biometrics or detailed medical records; accidental sensitive submissions are restricted and handled on the customer's lawful instructions.

The customer decides why visitor data is collected and is responsible for its lawful purpose, notices and consent. We process data held under our control only for the agreed technical service and instructions. Special-category, regulated or high-risk collection is not included without a separate assessment and agreement.

Sharing and providers

Access is limited to authorised personnel and service providers needed for hosting, forms, communication, analytics, payments, support and security, under appropriate confidentiality and data arrangements. Providers a customer chooses also apply their own terms and notices. We may disclose information where lawfully required or necessary to establish or protect legal rights, using proportionate disclosure and safeguards.

Provider and processing details are kept in our operational records, and client-specific processing and location information is supplied where the law or the processing agreement requires it. Processing locations and any transfer safeguards depend on the actual services used; we make no India-only hosting promise.

Portfolio privacy and younger beneficiaries

Students, freelancers and founders may use a Starter portfolio at any age. The contracting account holder must have legal capacity; for a beneficiary under 18, a parent or legal guardian contracts, controls the account, approves the supplied content and authorises publication. We record the adult's authority and relevant consent using a proportionate method and any verification the law requires, and we do not accept an under-18 person's own acceptance as an adult contract.

Publish only appropriate, necessary portfolio details. We avoid a child's home address, exact date of birth, school timetable, government ID details or personal direct-contact details, and use a guardian-controlled contact route. Approved public content can be viewed and copied by others. Consent to publish does not authorise unrelated marketing, data sale or general AI training, and changes or withdrawal of authorisation are handled promptly through the guardian and privacy route.

Children's-data safeguards, guardian verification and restrictions on tracking or targeted advertising follow the law applicable at the time. A customer website collecting children's visitor data is not authorised merely because student portfolios are available; any such collection needs a separate lawful assessment and instructions.

Analytics, cookies and AI on customer websites

Analytics is set up on Professional and above only when access and appropriate notice and consent controls are available. The customer's notice must explain the actual tools and collection, and optional trackers follow the applicable consent rules and the customer's instructions. We do not add undisclosed advertising trackers as a standard benefit.

We do not sell identifiable customer or visitor data, combine different customers' visitor records for advertising, or use that information to train a general AI model as part of this subscription. AI assistants and AI visitor-data processing are not included; any future service will have its own disclosed scope, data assessment and approval before use.

Retention and your choices

Active service information is kept for the necessary service purpose. After a subscription ends, the export, production-deletion and backup deadlines in section 9 apply. Security, contract, billing and other mandatory records are kept separately for their applicable period. Prospect records without an ongoing purpose are reviewed and deleted or anonymised rather than kept permanently.

You may ask us about our processing, and request correction, an applicable access or export, deletion, withdrawal of optional consent, or complaint handling. We verify authority proportionately and explain any lawful retention limit or another provider's responsibility. A request about a customer's website normally goes to that customer, with our help where we act as processor. Statutory rights and deadlines apply when in force, and we respond within a reasonable period.

We protect information with reasonable access, confidentiality and security controls and provide legally required incident notifications and cooperation. Material changes to this notice are communicated appropriately, and a new incompatible purpose or consent-dependent activity is never authorised just by updating this page.

Enquiries. When you send the contact form or the popup, your enquiry is recorded in a private Google Sheet operated by Zonovva and is also handed to WhatsApp or your email client so you can send it to us directly. If you start typing in a form and leave without sending it, what you typed so far is recorded too, so that an enquiry which did not make it through can still be answered.

Website analytics. Like every Zonovva website, this site measures how it is used: the pages you view, the link, search or advert that brought you here, clicks, scroll depth and time on page, your device, browser and screen, your IP address and the approximate location derived from it (city level, never street level), a first-party visitor identifier (zv_id) and a one-way device hash. When you follow a link to another Zonovva website the identifier travels with the link, so the journey counts as one visit. Google Analytics 4, Google Tag Manager and Microsoft Clarity measure usage. The Meta Pixel and LinkedIn Insight Tag are marketing tags: they are not loaded once you choose “Analytics only” or opt out, and in the European Union, the EEA, the United Kingdom and Switzerland they load only after “Accept all”. The complete list, the purposes and the retention periods (enquiries up to 24 months from last contact, visit data up to 26 months) are in the Zonovva group privacy policy, which covers this site.

Your choice. Visitors in the European Union, the EEA, the United Kingdom and Switzerland are asked before anything is measured. Everywhere else measurement starts when the page loads, and the notice shown on your first visit lets you choose “Analytics only” or opt out in one tap; clear this site’s cookies to see the notice again. Opting out stops the visitor identifier, device hash and form capture on this device straight away.

Where it is processed. Google (Workspace, Sheets, Analytics, Tag Manager), Microsoft (Clarity) and Meta may store or process data outside India under their own contractual and security safeguards.

Write to info@zonovva.com or message +91 95522 38893 with enough detail for us to identify you safely. We acknowledge ordinary grievances within 48 hours with a tracking reference and aim to resolve them within one month, subject to any shorter statutory requirement.