Privacy Policy

1. Who this covers

7 ORVIX (“we”, “us”, “our”) operates 7orvix.com. This policy explains what we collect through the website, why, and what you can ask us to do about it.

It covers visitors to the site, people who contact us or book a call, newsletter subscribers, and clients using the client portal. It does not cover data we process on behalf of a client inside a project we built — that is governed by the contract for that project.

2. What we collect

Only what a form actually asks for, plus the technical details that arrive with any web request.

When you use the contact form

• Name and email address (required)
• Phone number, company name, the service and budget range you pick, and your message
• Any files you attach — a brief, a wireframe, a screenshot
• Your IP address and browser user-agent string, recorded with the enquiry

When you book a discovery call

• Name, email, optional phone number, and anything you write in the notes field
• The date and time you chose
• Your IP address and user-agent string

When you subscribe to the newsletter

• Your email address, and nothing else

When you use the client portal

• Your account email and a hashed password — we never store the password itself
• Project files, messages, approvals and invoices connected to your account

Automatically

Standard server logs, and — only if you accept cookies — Google Analytics. If you decline, no analytics script is loaded at all. That is enforced in code, not a promise: the tag is not added to the page until consent is given.

3. What we use it for

• Replying to your enquiry and quoting your project
• Holding the discovery call you booked
• Delivering and supporting work you have engaged us for
• Sending the newsletter, if you asked for it
• Keeping the site secure and working — the IP and user-agent are kept mainly so we can identify abuse of a public form

We do not use your details to build a profile, and we do not sell or rent them to anyone.

4. Why we are allowed to

Under India’s Digital Personal Data Protection Act, 2023, we rely on the consent you give when you submit a form, and on the legitimate need to perform a contract once you become a client. For visitors in the EU or UK, the equivalent bases under the GDPR are consent and performance of a contract.

Consent can be withdrawn at any time — see section 8.

5. Cookies

The site sets a cookie to remember your consent choice, and the client portal sets a session cookie once you sign in. Neither is optional — the site cannot work without them.

Analytics cookies are optional and off until you accept. You can change your mind by clearing this site’s data in your browser, which brings the consent banner back.

6. Who else sees it

We use a small number of service providers to run the site. They only ever see what they need to do their job:

• Our hosting and database provider — stores enquiries, bookings and portal data
• Cloudinary — stores files you attach to an enquiry
• Our email provider — sends the notification and reply emails
• Google Analytics — only after you accept cookies

Some of these operate servers outside India. Where that happens, your data is transferred under the provider’s standard contractual protections.

We will also disclose information where the law requires it. We will not hand it over otherwise.

7. How long we keep it

• Enquiries and bookings — kept while the conversation is live, and for up to 24 months afterwards in case you come back
• Client project data — kept for the life of the engagement and then as long as our contract and tax obligations require
• Newsletter — until you unsubscribe

Ask us to delete something sooner and we will, unless we are legally required to keep it.

8. What you can ask for

• A copy of what we hold about you
• A correction, if something is wrong
• Deletion — we action this within 30 days
• Withdrawal of consent, including unsubscribing from the newsletter
• A complaint, if you think we have handled your data badly

Email admin@7orvix.com and say what you want. We will not ask you to justify the request.

9. How we protect it

Traffic to the site is encrypted in transit. Portal passwords are hashed, never stored as text. Public forms are rate-limited and file uploads are checked by type and content, not just by filename. Access to the admin panel is restricted by role.

No system is perfectly secure, and we would rather say so than claim otherwise. If a breach ever affects your data, we will tell you and the relevant authority.

10. Children

This is a business site and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us something, tell us and we will delete it.

11. Changes

If this policy changes materially we will update the date at the top of this page. Continuing to use the site after that means you accept the revised policy.

12. Contact and grievances

For anything in this policy, including a data request or a complaint:

• Email — admin@7orvix.com
• Phone — +91 93996 40546

NEEDS CONFIRMING — the DPDP Act expects a named Grievance Officer and a registered business address on this page. Add both, and replace “our hosting and database provider” and “our email provider” in section 6 with the actual company names, once you are ready to state them publicly.