1. Who we are
This website and our services are operated by Brivo Digital, owned by Basant Ahlawat, Electronic City, Bengaluru, Karnataka 560100, India. We are responsible for the personal data described in this policy. We process data in line with India's Digital Personal Data Protection Act, 2023 and other applicable laws.
2. Information we collect
- Contact details: name, email, phone number and business name that you give us through our contact form, email, phone or WhatsApp.
- Project information: business details, text, images, logos and other content you send us for your website.
- Account access: login credentials or delegated access for your domain, hosting, website admin and related accounts (see section 3).
- Billing information: billing name, address, tax details (if provided) and payment records. We do not collect or store card numbers.
- Communications: messages and emails exchanged with us about your project.
3. How we handle your login credentials
To build and manage your website, we may need access to accounts such as your domain registrar, hosting account, website admin panel (for example, WordPress), Google Search Console, Google Analytics, or your Google Business Profile where it needs to be linked to your website. We treat this access with particular care:
- Delegated access first: wherever a platform allows it, we ask you to add us as a separate user or manager instead of sharing your own password. You can remove this access at any time.
- Secure storage: any credentials you share are stored only in an encrypted password manager protected by two-factor authentication. They are never stored in plain text, spreadsheets or chat notes.
- Limited use: credentials are used only by Basant Ahlawat, and only to perform the work you have requested. We never use your accounts for any other purpose.
- No sharing: we never sell or share your credentials with anyone.
- Secure sharing: please don't send passwords by plain email. We'll suggest a secure method, such as a one-time secret link or adding us as a user.
- Deletion: when your project is handed over, or when your Website Care plan ends, we delete stored credentials within 7 days and remove our user accounts where possible. We recommend changing any passwords you shared once the project is complete.
- Incidents: if we ever suspect your credentials have been exposed, we will notify you without delay so you can change them.
4. How we use your information
- To reply to enquiries and prepare samples and quotes.
- To design, build, host, maintain and support your website.
- To send invoices, process payments and keep accounting records.
- To communicate with you about your project or plan.
- To meet legal, tax and regulatory obligations, and to prevent fraud.
We do not sell your personal data, and we do not send marketing messages without your consent.
5. When we share information
We only share data when needed to provide our services:
- Service providers: hosting, domain, email and backup providers that store or process data on our behalf.
- Payment providers: banks and payment partners that process your payments (see section 6).
- Legal requirements: authorities, where we are required to by law.
6. Payments
Payments are handled by regulated banks and payment service providers, including cross-border payment partners for international clients. Card and bank details are entered directly on their secure systems and are never seen or stored by Brivo Digital. These providers may collect information needed for payment processing, fraud prevention and regulatory compliance, under their own privacy policies.
7. How we protect data
- Encrypted password manager with two-factor authentication.
- Two-factor authentication on our email, hosting and business accounts.
- Encrypted (HTTPS) connections for our website and client websites.
- Access limited to the business owner; no third-party contractors are given your credentials.
- Regular software updates on our devices and the websites we manage.
8. How long we keep data
- Credentials: deleted within 7 days of project handover or plan cancellation.
- Enquiries that don't lead to a project: deleted within 12 months.
- Project files and communications: kept for up to 3 years after the project ends, for support purposes, unless you ask us to delete them sooner.
- Invoices and payment records: kept for the period required by Indian tax and accounting laws.
- Website backups (Website Care): kept for up to 30 days, then automatically deleted.
9. Your rights
You may ask us to access, correct, update or delete your personal data, or withdraw consent, at any time by emailing hello@brivodigital.com. We will respond within 30 days. Some data (such as invoices) may need to be kept to meet legal obligations. If you are unhappy with our response, you may contact the relevant data protection authority.
10. Cookies
This website does not use advertising or tracking cookies. It loads fonts from Google Fonts, which may receive your IP address as part of delivering the fonts. If we add analytics in the future, we will update this policy.
11. Your website's visitors
For websites we build or manage, you (the client) control the data collected from your own visitors, for example through contact forms. We process that data only on your instructions and only to host and maintain your website. You are responsible for publishing a privacy policy on your own website; we can help you set one up.
12. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. We will notify active clients of any significant changes.
13. Contact & grievance officer
Basant Ahlawat, Brivo Digital
Electronic City, Bengaluru, Karnataka 560100, India
Phone/WhatsApp: +91 83739 30545
Email: hello@brivodigital.com