Privacy Policy

1. Scope and controller

This Privacy Policy applies to the website at vaayumenergy.com (the "Site") operated by Vaayum Energy Private Limited ("Vaayum Energy", "we", "us", or "our"). We are the data controller for personal data collected through the Site.

If you have questions about this policy or wish to exercise your rights, please use the contact form at /contact.

2. Data we collect

We collect two categories of personal data through the Site:

Contact form data

When you submit an enquiry through our contact form we collect the following fields:

• Full name (required) — to address you correctly.
• Email address (required) — to respond to your enquiry.
• Phone number (optional) — if you prefer a call-back.
• Message (required) — the content of your enquiry.

Server and access logs

Our hosting infrastructure automatically records standard HTTP access logs, which may include your IP address, browser type, operating system, referring URL, pages visited, and the date and time of each request. These logs are used solely for security monitoring and operational diagnosis.

3. Lawful basis

• Contact form data — processed on the basis of yourconsent, given when you voluntarily submit the form. You may withdraw consent at any time by contacting us via /contact.
• Server logs — processed on the basis of ourlegitimate interest in maintaining the security and integrity of the Site and our infrastructure.

4. How we use your data

We use the personal data we collect for the following purposes:

• Responding to your enquiry — to read, assess, and reply to messages you send through the contact form.
• Legal compliance — to meet our obligations under applicable Indian law, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and any rules or regulations framed thereunder.
• Security and fraud prevention — to detect and respond to malicious activity, abuse, or unauthorised access.

No automated decision-making or profiling. We do not subject your personal data to automated processing that produces legal or similarly significant effects about you.

5. reCAPTCHA

The contact form uses Google reCAPTCHA v3 to protect against spam and automated abuse. reCAPTCHA operates by collecting hardware and software information — such as device and application data — and sending it to Google for analysis. Your use of reCAPTCHA is subject to Google'sPrivacy Policy and Terms of Service. The information collected by reCAPTCHA is used by Google to improve its spam detection services and is governed by Google's own privacy practices.

6. Analytics

We do not currently have any analytics service active on this Site.Should we introduce analytics in the future, we will update this policy accordingly. For reference, the following describes our approach to the tools we may consider:

• Plausible Analytics — a privacy-first, cookieless analytics service that collects no personal data and sets no cookies. No consent banner would be required.
• Google Analytics — if used, it would be configured with IP anonymisation enabled. You may opt out of Google Analytics tracking via theGoogle Analytics Opt-out Browser Add-on.

7. Sharing and disclosure

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Service providers — third-party vendors who assist us in operating the Site (e.g. hosting providers, email delivery services). These parties are contractually bound to process data only on our instructions and to maintain appropriate security.
• Legal requirements — when disclosure is required by applicable law, court order, or government authority, or is necessary to protect the rights, property, or safety of Vaayum Energy, our users, or the public.
• Business transfer — in the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any such change in controller.

8. Data retention

• Contact form data — retained for a reasonable period necessary to follow up on your enquiry and to meet our legal obligations, after which it is securely deleted.
• Server logs — subject to a rolling purge policy; logs older than a defined operational window are automatically deleted.
• Deletion requests — if you request deletion of your personal data, we will action it promptly, subject to any legal retention obligations.

9. Security

All data transmitted between your browser and the Site is encrypted usingHTTPS/TLS. We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and other applicable law, you have the following rights in respect of your personal data:

• Right of access — to obtain a summary of the personal data we hold about you and the processing activities undertaken with it.
• Right of correction — to have inaccurate or incomplete personal data corrected or completed.
• Right of erasure — to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected.
• Right to withdraw consent — where processing is based on consent, to withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Grievance redressal — to lodge a grievance with us regarding our handling of your personal data. We will respond within the period prescribed under DPDPA 2023.

To exercise any of these rights, please submit your request using the contact form at /contact. We may need to verify your identity before processing your request.

11. Children's privacy

This Site is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us via /contact and we will delete it promptly.

12. Third-party links

The Site may contain links to third-party websites. These links are provided for convenience and information only. We have no control over the content, privacy practices, or security of those sites and accept no responsibility for them. We encourage you to review the privacy policy of any third-party site you visit.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Last updated" date at the top of this page will always indicate when the most recent revision was made. Your continued use of the Site after any changes constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact us

If you have questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please reach out through our contact form. We are committed to resolving any issues promptly and transparently.