Privacy Policy

Last updated: 18 August 2026

1. Who we are

Evision Infoserve ("Evision Infoserve", "we", "us", "our") is a website design, development and SEO studio based in Greater Noida, Uttar Pradesh, India. We operate the website evisioninfoserve.com and the services offered through it.

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), Evision Infoserve is the Data Fiduciary responsible for the personal data described in this policy. Where you are a client and we handle data inside your own systems, we act as a Data Processor on your instructions — see section 8.

Contact: Gaur City Mall, Greater Noida West, Greater Noida, Uttar Pradesh 201009, India · info@evisioninfoserve.com · +91 93112 21517

2. Scope of this policy

This policy applies to personal data we collect when you:

• browse evisioninfoserve.com or any of its pages;
• submit an enquiry, quote request, callback request or contact form;
• download a free resource, guide or checklist (a "lead magnet");
• take our free Website Health Scorecard quiz;
• subscribe to our newsletter;
• book a call with us, including through our automated voice assistant; or
• engage us as a client for design, development, SEO or related services.

It does not apply to third-party websites we link to, or to how our clients handle data on their own properties.

3. Data we collect

3.1 Information you give us

Every field below is collected only because you typed it into a form or told it to us:

3.2 Information collected automatically

When you submit a form, our server records a small amount of technical information alongside it:

• IP address and browser user-agent string — used to rate-limit submissions and score them for spam, so genuine enquiries reach us;
• the page you submitted from — so we know which enquiry relates to which service;
• standard web-server logs — requested URL, timestamp, response status and referring page.

3.3 Sensitive personal data

We do not ask for — and do not want — financial account details, passwords, government identifiers, health information or any other sensitive category of data through our website forms. Please do not include them in a form message. Payment for our services is settled directly through your bank or a payment provider: we never store your full card or bank credentials.

4. Why we use your data

We use personal data only for the purposes it was given for:

We do not use your data for automated decision-making that produces legal effects, and we do not profile you for advertising.

5. Consent and lawful basis

Under the DPDP Act we process your personal data on the basis of:

• Your consent — given freely and specifically when you submit a form, tick a consent box or subscribe. You may withdraw it at any time (see section 11); withdrawal does not affect processing already carried out.
• Certain legitimate uses permitted by the Act — for example using the details you voluntarily provided for the very purpose you provided them, complying with a legal obligation, or responding to a court or regulatory order.

If we ever want to use your data for a genuinely new purpose, we will ask you first.

6. Cookies and local storage

We keep this minimal:

• We set no advertising or analytics cookies. There is no third-party tracking cookie on this website.
• Browser local storage holds small interface preferences — for example remembering that you dismissed the offer banner or already saw the enquiry pop-up, so we do not show it again. This stays in your browser and is never sent to us.
• Administrator sign-in to our internal dashboard uses a session token held in that administrator's own browser. This applies to Evision Infoserve staff, not to site visitors.

You can clear local storage and cookies at any time through your browser settings. Doing so will not stop you using the website; you may just see a banner or pop-up again.

Because we run no advertising trackers, there is no consent banner to accept or reject. If we ever introduce analytics or marketing tags, we will update this policy and ask for your consent before those tags load.

7. Who we share your data with

We do not sell, rent or trade your personal data. We share it only with service providers who help us operate, and only to the extent each one needs:

Each provider is bound to use the data only for the service it provides to us. We may also disclose data where we are legally required to — for example in response to a valid order from a court, regulator or law-enforcement authority — or where necessary to establish or defend a legal claim. If our business is ever restructured or transferred, data may pass to the successor entity under the same commitments set out in this policy.

8. Client project data

Delivering our services often means we are given access to systems that belong to you — your website admin or CMS, hosting panel, Google Search Console, Google Analytics, Google Business Profile, advertising accounts or social profiles. When we work inside those systems:

• we act on your instructions, as a Data Processor, and use the access only for the agreed work;
• we treat any personal data belonging to your customers as confidential and do not copy it out for our own purposes;
• we ask for the lowest level of access that does the job, and prefer named user accounts over shared passwords;
• you should revoke our access when the engagement ends — we will also remove ourselves on request.

Where our work involves personal data of your users, you remain the Data Fiduciary for it and are responsible for having a lawful basis to collect it.

9. How long we keep your data

• Enquiries that do not convert — up to 24 months, so we can pick up the conversation if you return, then deleted or anonymised.
• Newsletter and marketing contacts — until you unsubscribe or ask us to remove you.
• Client records, contracts and project files — for the duration of the engagement, then as long as needed for support, warranty and legal claims.
• Invoices and accounting records — for the period required under Indian tax and company law, currently at least eight years.
• Spam and abuse logs — kept briefly, then purged.

When a retention period ends we delete the data or strip it of anything that identifies you.

10. How we protect your data

• The website is served over HTTPS/TLS, so what you type into a form is encrypted in transit.
• Our internal dashboard is password-protected, with passwords stored only as salted PBKDF2 hashes — never in readable form.
• Access to enquiry and client data is limited to the Evision Infoserve team members who need it.
• Forms are rate-limited and spam-scored to reduce abuse.

No system is perfectly secure and we cannot guarantee absolute security. If a personal data breach occurs that affects you, we will notify you and the Data Protection Board of India as the DPDP Act requires.

11. Your rights

As a Data Principal under the DPDP Act, you have the right to:

• Access — ask what personal data of yours we hold and how we have used and shared it.
• Correction and completion — have inaccurate or incomplete data corrected or updated.
• Erasure — ask us to delete your data, where we are not required to keep it by law.
• Withdraw consent — at any time, as easily as you gave it. Marketing emails carry a one-click unsubscribe link.
• Grievance redressal — raise a complaint with our Grievance Officer and receive a response (see section 16).
• Nominate — name another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, email info@evisioninfoserve.com from the address you contacted us with, or call +91 93112 21517. We respond within 30 days and will not charge you for a reasonable request. We may ask you to confirm your identity first, so that nobody else can access your data.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Children's data

Our website and services are meant for businesses and are not directed at children. We do not knowingly collect personal data of anyone under 18 without verifiable parental or guardian consent, and we do not carry out tracking, behavioural monitoring or targeted advertising aimed at children. If you believe a child has given us personal data, contact us and we will delete it.

Where we build student or educational projects, we deal with the student's institution or guardian as the point of contact.

13. Transfers outside India

Our website and enquiry database are hosted in India. Some of the service providers listed in section 7 — for example email, calendar or voice-assistant tools — may process data on servers outside India. Where that happens we use providers offering appropriate contractual and technical safeguards, and we transfer only what the service requires. We do not transfer personal data to any country restricted by the Government of India for this purpose.

14. Third-party links

Our website, blog articles and portfolio link to sites we do not control — client websites, tools we recommend, social profiles and reference material. Following such a link takes you outside this privacy policy. We are not responsible for the content or the privacy practices of those websites; please read their own policies.

15. Changes to this policy

We may update this policy as our services, tools or the law change. The "Last updated" date at the top of this page always reflects the current version. If a change materially affects how we use your personal data we will make it prominent on the website and, where we hold your email address and the change requires it, notify you directly. Continuing to use the website after an update means you accept the current version.

16. Grievance Officer & contact

If you have a question, a request about your data, or a complaint about how we have handled it, contact our Grievance Officer. We acknowledge every grievance and aim to resolve it within 30 days.

Related: Terms and Conditions · Refund Policy