Privacy Policy | Vibrantaa

1. Who we are

Vibrantaa is a web design and development agency based in Pune, India, serving clients primarily in Canada. This policy explains what personal information we collect through vibrantaa.com, why we collect it, and how you can control it. We handle personal information in line with India's Digital Personal Data Protection Act (DPDPA) and, for our Canadian clients and visitors, the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What we collect

Contact and enquiry details — name, email address, project type, and the message you write when you use our contact form, booking wizard, or email us directly.
Project and billing information — company details, addresses, and payment records for clients who engage us, as needed to deliver work and issue invoices.
Technical data — IP address, browser type, device type, pages visited, and referring URLs, collected automatically when you browse the site.

We do not knowingly collect personal information from anyone under 18, and we never buy or sell personal data.

3. How we use it

To respond to your enquiry — this is the only thing we do with contact-form details.
To scope, deliver, and invoice client projects.
To understand how the site is used so we can improve it.
To meet legal and accounting obligations.

We send marketing email only if you have asked for it, and every such email includes a working unsubscribe link.

4. Third-party services

We rely on a small number of service providers to run this site and our business:

Hosting and infrastructure — the servers that deliver this website.
Supabase — stores booking and client-dashboard data.
Google Fonts — typefaces are loaded from Google's servers, which receive your IP address as part of the request.
Payment processors — client invoices are settled through established payment providers; we never store full card numbers ourselves.

Each provider only receives the data it needs to perform its function, and each is bound by its own privacy commitments. Because our team is in India and many clients are in Canada, your information may be processed in either country.

5. Cookies

We keep cookies to a minimum. The site uses only the cookies and local storage needed for it to function (for example, remembering the state of the client dashboard if you log in). We do not run third-party advertising cookies or cross-site trackers.

6. How long we keep it

Enquiries we don't take forward are deleted within 12 months. Client project records are kept for as long as we work together and for up to 7 years afterwards, as required for tax and accounting. Technical logs are rotated automatically and are not kept longer than 90 days.

7. Security

Access to personal information is limited to team members who need it for their work. Credentials and client data are stored in access-controlled systems, transferred over encrypted connections (HTTPS), and handed over to clients through the secure client dashboard rather than by email wherever possible.

8. Your rights

You can, at any time:

Ask what personal information we hold about you.
Ask us to correct or delete it.
Withdraw consent to any processing based on consent.
Complain to your local data-protection authority — the Data Protection Board of India, or the Office of the Privacy Commissioner of Canada.

To exercise any of these, email us — we respond to privacy requests within 30 days.

9. Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top of this page and, for active clients, tell you directly. Continued use of the site after a change means you accept the updated policy.

10. Contact

Privacy questions and requests: hello@vibrantaa.com · Vibrantaa, Pune, India.