Privacy Policy

YUGVEDA AI SOLUTION LIMITED (“we”, “us”) is the data controller for the personal data described in this notice. We are registered in England and Wales, company number 16719970, with our registered office at Suite Ra01, 195-197 Wood Street, London, England, E17 3NU.

For anything in this notice, including any request about your data, contact us at sagar@yugveda-ai.com or +44 7888 870952.

Registered with the Information Commissioner’s Office under reference ZC207202.

We collect the information described below. We do not run our own analytics or advertising tags.

Enquiry form

Your name, email address, enquiry type and message. A phone number if you choose to add one — that field is optional and the form works without it.

Booking a call

The booking window is run by Calendly. Whatever you enter there — typically name, email address and your answers to Calendly’s questions — goes to Calendly directly, not through this website.

Trustpilot reviews

The review collector is provided by Trustpilot. When it loads, your browser connects directly to Trustpilot. Any review you submit is handled by Trustpilot under its own privacy policy.

Contacting us directly

If you email, call or message us on WhatsApp, we hold that correspondence and whatever it contains.

Server logs

Our host keeps standard technical logs, which include IP addresses. We use these only to keep the site running and secure.

We do not use analytics, advertising or social media tracking on this site. We do not buy contact lists, and we do not carry out profiling or automated decision-making.

Answering your enquiry

To reply, ask follow-up questions and, if it goes that way, scope and quote the work. Lawful basis: taking steps at your request before entering into a contract (Article 6(1)(b)), and our legitimate interest in responding to business enquiries (Article 6(1)(f)).

Arranging and holding calls

To schedule a call you have asked for. Lawful basis: Article 6(1)(b) and 6(1)(f), as above.

Keeping the site secure and working

Server logs, and blocking abuse of the enquiry form. Lawful basis: our legitimate interest in the security and availability of our own systems (Article 6(1)(f)).

Meeting our legal obligations

Where the law requires us to keep records. Lawful basis: legal obligation (Article 6(1)(c)).

We will not add you to a marketing list off the back of an enquiry. If we ever send marketing, it will be because you asked for it, and every message will carry an unsubscribe link.

Your enquiry reaches us through a small number of service providers. Each is bound by its own contract to process the data only on our instructions. We do not sell personal data, and we do not share it with anyone for their own marketing.

Microsoft 365 (Exchange Online)

Delivers your enquiry to us as an email. The message content sits in our mailbox. Location: United Kingdom

Twilio

Sends us a WhatsApp notification containing your name, email address and message so we see new enquiries quickly. Location: United States

Calendly

Runs the booking window. If you book a call, the name, email address and any answers you give go to Calendly, not through this site. Location: United States

Vercel

Hosts the site, runs the enquiry form and keeps standard server logs, which include IP addresses. Location: Vercel. The pages and static files are served from Vercel’s global content delivery network, so the copy you load comes from a location near you. The enquiry form is different: it runs in Vercel’s London (UK West) region, so what you submit is processed in the United Kingdom.

The fonts this site uses are served from our own domain, not from Google — your browser makes no request to a font provider when the page loads.

We use Trustpilot to invite customers to share their experience. The review widget loads from Trustpilot’s servers, which receive technical connection information such as your IP address. Reviews are submitted directly to Trustpilot, not through our enquiry form. Read Trustpilot’s privacy policy for how it handles your information.

Where the site is hosted: Vercel. The pages and static files are served from Vercel’s global content delivery network, so the copy you load comes from a location near you. The enquiry form is different: it runs in Vercel’s London (UK West) region, so what you submit is processed in the United Kingdom. Because the form runs in the UK, submitting an enquiry is not in itself an international transfer.

Twilio and Calendly are based in the United States, so using them involves an international transfer. Both provide the UK International Data Transfer Addendum to the EU Standard Contractual Clauses as part of their standard data processing terms, and that is the safeguard those transfers rely on.

Our mailbox runs on Microsoft 365 (Exchange Online), and that tenant stores mailbox data in the United Kingdom. So your enquiry is not routinely transferred abroad by reaching us. Microsoft’s standard data protection terms also include the Standard Contractual Clauses and the UK Addendum, which cover any support or engineering access from outside the UK.

Enquiry submissions and related correspondence: 24 months from our last meaningful contact with you, after which we delete them.

If your enquiry becomes a project, the data moves under the retention terms of that engagement’s contract. Records we are required by law to keep — tax and accounting records, for example — are kept for the period the law sets. You can ask us to delete your data sooner at any point, and we will unless we are legally required to keep it.

We describe only what is actually in place. We do not hold ISO 27001, SOC 2 or Cyber Essentials certification and we do not claim to.

• —The whole site is served over HTTPS, with HSTS set so browsers refuse to fall back to an unencrypted connection.
• —The site sends a restrictive set of security headers: framing denied, MIME sniffing off, referrer information limited, and camera, microphone and location access blocked outright.
• —Enquiries are validated on the server before anything is sent onwards, and we do not print the contents of your enquiry to our application logs.
• —This website has no database and no admin login. Your enquiry lands in our mailbox and as a notification on our phone — there is no store of enquiry data on the site itself to breach.
• —Credentials for email and messaging are held as environment variables in the hosting platform, never in the codebase.

If a breach happens that puts your rights at risk, we will report it to the ICO within 72 hours and tell you where the law requires it.

Under UK GDPR you can ask us to do any of the following. Email sagar@yugveda-ai.com and we will respond within one month, which is the statutory deadline. There is no charge.

• —Access — get a copy of the personal data we hold about you.
• —Rectification — have anything inaccurate corrected.
• —Erasure — have your data deleted, where we have no overriding reason to keep it.
• —Restriction — have us pause using your data while a question about it is resolved.
• —Objection — object to processing we base on legitimate interests.
• —Portability — receive the data you gave us in a machine-readable format.
• —Withdraw consent — where we relied on your consent, withdraw it at any time. That does not affect anything done before you withdrew it.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

What this site stores in your browser, and what the booking window stores, is set out in the Cookie Policy.

This site sells business services and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, email sagar@yugveda-ai.com and we will delete it.

We update this notice when what we do changes — a new service provider, a new purpose, a change in how long we keep things. The date at the top shows when it last changed substantively. If a change materially affects you, we will tell you directly where we can.