LEGAL . PRIVACY
Privacy Policy
Effective: 17 June 2026 . Primary jurisdiction: India . Aligned with GDPR (EU / UK)
This policy explains how Nuvora Impact Pvt. Ltd. collects, uses, and protects your personal data, whether you have visited nuvoraimpact.com, submitted an enquiry, or engaged us as a client. We may update it periodically; the effective date above reflects the most recent version.
01 Who We Are
Nuvora Impact Pvt. Ltd. (operating as Nuvora Consulting) is a social impact consultancy based in Bengaluru, India, operating across India and globally. We provide monitoring, evaluation and learning services, participatory research, CSR impact assessment, and capacity building to NGOs, social enterprises, and corporate CSR teams.
References to "we", "us", or "Nuvora" in this policy refer to the company and its authorised personnel.
Data queries and rights requests: connect@nuvoraimpact.com
02 Data We Collect
WHAT YOU PROVIDE DIRECTLY
Name, email address and organisation name via our contact and enquiry forms
Project briefs, requirements, and scope documents shared during onboarding
Billing and payment information for service agreements
Feedback, survey responses, and testimonials
Application materials if you apply to work with or for us
WHAT WE COLLECT AUTOMATICALLY
IP address, browser type, device type, and operating system
Pages visited, time on site, click behaviour, and referral source, via cookies and analytics tools
Geographic location at country or city level, derived from IP address
A note on sensitive data. We do not intentionally collect sensitive personal data, including health information, caste, religion, or full financial account details beyond what payment processing requires. If such data is shared with us incidentally, we handle it with additional care and delete it unless legally required to retain it.
03 How We Use Your Data
We process your data only for the purposes for which it was provided. These include:
Responding to enquiries and delivering agreed services
Drafting and managing client agreements and project documentation
Sending project updates, progress reports, and relevant client communications
Sending our newsletter, sector insights, or event invitations, only with your explicit consent
Improving website performance and user experience
Maintaining records required by law, including accounting and tax compliance
We will never use your data for purposes incompatible with those listed above without notifying you first and, where required, seeking your consent.
04 Sharing Your Data
We do not sell, rent, or trade your personal data. We share it only in three limited circumstances.
TRUSTED SERVICE PROIVDERS
We engage third-party providers for hosting, email, payment processing, and website analytics, all under strict data processing agreements. Examples include cloud storage providers and Google Workspace for communication.
LEGAL REQUIREMENTS
We may disclose personal data if required by law, court order, or governmental authority under the DPDP Act 2023, the Information Technology Act 2000, or equivalent legislation. Where legally permissible, we will notify you before doing so.
BUSINESS TRANSFERS
In the event of a merger, acquisition, or restructuring, personal data may transfer to a successor entity, subject to equivalent privacy protections and prior notice to affected individuals.
05 Cookies
We use cookies and similar tracking technologies on nuvoraimpact.com. These fall into three categories:
Essential cookies - required for the site to function. Cannot be disabled without affecting core features.
Analytics cookies - collect anonymised data on how visitors use our site via website analytics tools. These help us understand what's working and improve the experience over time.
Functional cookies - remember your preferences, such as language or region. Not used for advertising.
You can manage or disable non-essential cookies through your browser settings at any time.
06 How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose it was collected, or as required by applicable law. After these periods, data is securely deleted or anonymised.
DATA CATEGORY RETENTION PERIOD
Client contact data
Duration of engagement + 7 years
Project and deliverable records
7 years post-project completion
Website analytics data
26 months (anonymised)
Financial and billing records
8 years
Job applicants (unsuccessful)
6 months post-decision
Newsletter subscribers
Until unsubscribed or consent withdrawn
07 Your Rights
Depending on your location, you have the following rights regarding your personal data. We honour these for all individuals, regardless of jurisdiction.
ACCESS
Request a copy of the personal data we hold about you.
RESTRICTION
Ask us to limit how we use your data in certain circumstances.
OBJECT
Object to processing based on legitimate interests or for direct marketing.
ERASURE
Request deletion where data is no longer necessary or consent is withdrawn.
CORRECTION
Ask us to correct inaccurate or incomplete data without delay.
PORTABILITY
Receive your data in a structured, machine-readable format (GDPR users).
NOMINATE
Under India's DPDP Act 2023, nominate someone to exercise rights on your behalf.
WITHDRAW CONSENT
Withdraw consent at any time, without affecting prior lawful processing.
To exercise any right, email connect@nuvoraimpact.com. Please include your name, email address, and a description of your request. We respond within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Data Protection Board of India (meity.gov.in) or your national data protection authority.
08 Data Security
We apply industry-standard technical and organisational measures to protect your personal data, including encrypted data transfer (TLS/SSL), role-based access controls, and secure data processing agreements with all service providers. Staff with access to personal data are trained on data protection obligations.
In the event of a personal data breach likely to affect your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.
09 Children's Data
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we hold data about a child, please contact us at connect@nuvoraimpact.com and we will delete it promptly.
10 Contact Us
For data queries, rights requests, or any concern about our data practices, please get in touch:
NUVORA IMPACT PVT. LTD.
No. 420, #198 CMH Road, 2nd Floor
Indiranagar, Bangalore
Karnataka, India - 560 038
This policy is governed primarily by India's Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000, and is designed to be consistent with the GDPR (EU/UK), the UK Data Protection Act 2018, and the CCPA (California) where applicable.
Where evidence meets purpose
START HERE
© 2026 Nuvora Impact Private Limited. All rights reserved.