Your information.
Handled with care.

01Who is responsible for this notice

This website is operated by Voro Ventures Private Limited, trading through its digital agency Voro.work. This notice covers information we handle for our own website enquiries, business communications, client administration and service relationships. “Personal information” means information relating to an identifiable individual.

When we access personal data controlled by a client to build a website, operate a store or provide support, the client’s notice and lawful instructions also apply. The processing arrangement should be set out in the Scope or a separate data-processing agreement. This notice does not authorise us or a client to process information unlawfully.

We apply relevant Indian privacy and information-technology requirements as they come into force. We do not represent that every provision of the Digital Personal Data Protection Act, 2023 and its rules is already operative. Applicable mandatory rights prevail over this notice or a service contract.

02Information you provide

• Enquiries: name, email, optional phone and company, service choice, budget range, message and any follow-up you send.
• Consent and records: the enquiry reference, consent/submission timestamp, communication history and notification status. Where you accept a proposal, we may retain the accepted version and approval record.
• Client administration: contact roles, business and billing addresses, GST or other necessary tax information, invoices, payment references, service instructions, feedback and support requests.
• Project materials: content, business records and limited account permissions you choose to supply for an agreed task. Access to customer, employee or other third-party data must be lawfully authorised and limited to the project need.

The public enquiry form is not intended to collect passwords, card details, Aadhaar/PAN copies, medical information, biometrics or other sensitive datasets. Do not include them. If a project genuinely requires sensitive information, agree a lawful purpose, appropriate consent or other lawful authority, secure transfer method, access limits and processing terms before sharing it.

03Technical information and essential cookies

Our website and hosting services may process IP addresses, request times, URLs, browser or device headers, error information and security events to deliver pages, troubleshoot and protect the service. The enquiry database does not contain a dedicated raw-IP or browser-fingerprint field. A temporary hash-based request counter is used for submission rate limiting; the host may separately hold access and security logs.

The website currently uses essential session and security cookies, including ci_session and csrf_cookie_name, to protect form submissions and preserve form messages. Their expiry depends on session and security configuration. Blocking them may prevent the form from working; you can still contact us by email or phone.

This website does not currently load advertising pixels or analytics cookies. If we introduce non-essential tracking, we will update the notice and provide any information and consent choices required before it operates. A link to an external platform is not itself permission for us to add tracking.

04Why we use information and on what basis

We use information to respond to enquiries, assess fit, prepare proposals, deliver an agreed service, administer accounts, issue invoices, receive payments, provide support, protect systems, investigate complaints and meet legal obligations. We may also preserve relevant records to establish or defend legal claims.

Where consent is required, we request it for the stated purpose. The enquiry checkbox authorises the use of those submitted details to handle your request; it is not blanket permission for unrelated marketing or the sale of data. Other processing may be based on an applicable contractual, statutory or other legally permitted ground, only where that ground is actually available.

You may decline optional fields or withdraw consent by contacting us. We will explain if a specific service cannot continue without information reasonably necessary for it. Withdrawal does not make earlier lawful processing unlawful and does not remove records we must retain by law.

05Communications, WhatsApp and marketing

We may reply using the contact details and channel relevant to your enquiry or service. An enquiry does not automatically subscribe you to a newsletter or promotional broadcast. Any separate marketing subscription will have the required choice or permission and a practical way to opt out. Service, billing, security and legal communications may still be necessary.

If you contact us on WhatsApp or another external platform, that provider processes information under its own terms and privacy notice. We receive the account and message details you choose to share through that channel. We do not routinely record calls through this website. If a call or meeting is to be recorded, we will give notice and obtain any permission required.

06Who may receive information

Access is limited to authorised people who reasonably need the information for the stated task. Depending on the engagement, recipients may include:

• our staff and contracted specialists working under confidentiality and appropriate data obligations;
• hosting, email, security, file-sharing and other technical providers needed to operate the website or agreed service;
• payment, accounting and professional-advisory providers for the information necessary for their role;
• a client-controlled platform or integration you instruct us to configure;
• public authorities, courts or regulators where disclosure is lawfully required, or a professional adviser where reasonably necessary for a legal claim;
• a lawful successor in a business reorganisation, subject to confidentiality, applicable notice and legal safeguards.

We do not sell your personal information or give it to unrelated advertisers for their own marketing. Where a third party acts on our behalf, we seek appropriate limits on access and use. Where disclosure requires your prior permission, we obtain it unless a lawful exception applies.

07Processing locations and international providers

We operate from India. Hosting, email, messaging, cloud or project-tool providers may process or store information in India or other countries, depending on the service and configuration. We do not promise that every provider or backup is located only in India.

Any transfer is subject to restrictions and safeguards required by the law applicable to that information. Where sensitive personal data rules require an equivalent level of protection and a permitted transfer basis, those conditions must be met. If you require a particular country, approved provider or data-residency arrangement, agree it in writing before supplying the data. An engagement is not an exemption from applicable transfer restrictions.

08Data we handle for a client

If we handle your customer or employee data as a service provider, we use it only for the agreed task and documented instructions, subject to legal duties. The client is responsible for its collection notices, permissions and instructions; we remain responsible for our own processing and security obligations. A client warranty does not remove our legal duties.

The project agreement should identify permitted subprocessors and systems, confidentiality, security measures, incident cooperation, data location, retention and return or deletion. We will not reuse client-controlled personal data for our own unrelated marketing or train our own general-purpose AI model on it without separate express permission and a lawful basis.

Confidential or personal client data must not be sent to a public AI service merely because AI is used for other tasks. An external AI integration involving such data requires documented approval and appropriate terms, settings and safeguards. Where you ask about data held only on behalf of a client, we may direct the request to that client and assist it as required.

09Security and incident handling

We use technical and organisational precautions appropriate to the information and service. The website uses HTTPS, protected form tokens, submission checks, restricted application storage and server access controls. Security also depends on hosting, provider controls, authorised users and the access settings agreed for each project.

No method of transmission or storage is completely secure. This does not excuse a failure to maintain reasonable safeguards. Report a suspected exposure or compromised access promptly to hello@vorohq.com, with “Security incident” in the subject. Do not email the exposed credentials themselves.

We will assess an incident, take reasonable containment and mitigation steps, preserve necessary evidence and provide notices to affected clients, individuals or authorities where required by applicable law or an agreed processing arrangement. We do not contract out of a mandatory notification duty.

10Retention, deletion and backups

We keep information only while reasonably needed for the purpose for which it was obtained, a continuing service relationship, security, a legal retention obligation or a genuine dispute. Relevant factors include the status of an enquiry, the end of an engagement, statutory accounting requirements, security-log duties and applicable claim periods. Retention is not unlimited merely because you once contacted us.

Enquiry records are held in a private database and may also appear in follow-up email. Deletion is assessed across the systems we control; the website does not promise automatic deletion on a fixed date. We can explain the applicable retention reason when handling a request.

Project working files are not permanent storage unless a storage or backup service is agreed. Where client-controlled data is returned or removed at closure, legal records may be retained separately. Copies in a protected backup may remain until the normal rotation or technically practical removal, with access restricted; if restored, applicable deletion instructions should be reapplied. A legally required preservation hold may postpone deletion of the relevant records.

11Your choices and privacy requests

You can contact us to ask what personal information we handle about you, request access or correction, ask for deletion where permitted, withdraw consent for a stated use, stop optional marketing or raise a processing concern. Additional statutory rights, including rights under the DPDP framework when applicable, are available to the extent the relevant provisions are in force and apply to the processing.

Email hello@vorohq.com with “Privacy request” in the subject and enough context to locate the record. We may request proportionate identity verification to avoid disclosing or deleting another person’s information. Do not send a full identity document unless we explain why it is necessary and provide a secure method.

We will explain any lawful reason for refusing or limiting a request, such as another person’s rights, a legal retention duty or information held only for a client that controls it. We do not make the contractual court clause a condition for contacting an applicable regulator or exercising a mandatory privacy remedy.

12Children and sensitive information

Our services and enquiry form are intended for adult business contacts, not children under 18. We do not knowingly seek children’s personal information through this website. If you believe a child has submitted information, tell us so we can assess removal and any required safeguarding steps.

A project involving children’s data, health, financial, biometric or other sensitive information needs a separate assessment and appropriate legal authority, security and contractual arrangements before access. This notice is not consent on behalf of a child, parent, employee or customer.

13External services and payments

Google Maps, WhatsApp, client platforms and other external services have their own privacy practices. Follow their notices when using them. An external link does not mean that Voro controls that provider or guarantees its handling of information.

The current website does not accept card payments or collect full card numbers, CVV or UPI PINs. Invoices or payment instructions may refer you to a bank or payment provider. We may retain payment references and accounting records; payment credentials are handled by the provider. Verify a request to change payment instructions using a known contact channel.

14Privacy questions and grievances

Address privacy enquiries and grievances to Company Management, Voro Ventures Private Limited, at hello@vorohq.com. Mark the subject “Privacy grievance” and include the affected service or enquiry reference. We acknowledge complaints within 48 hours and aim to resolve them within one month, or within a shorter period required by applicable law.

Correspondence address: 22, 2nd Floor, Shankar Vihar, Nr. Nirman Vihar Metro Station, Delhi-110092.
Phone / IVR: +91 11 6929 6665.
Other offices: 603-604, Tower B, Bhutani Alphathum, Sector 90, Noida, Uttar Pradesh-201305; and 4550, Charkhewalan, Chawri Bazar, Delhi-110006.

Provide enough detail to investigate, but do not include another person’s unnecessary sensitive information. If a complaint is unresolved, you may approach the authority or forum available under the law then applicable. Nothing here removes that right or requires you to surrender it.

15Changes to this notice

The effective date and version appear at the top of this page. We may update this notice for changes in services, processing or law. For a material new purpose, we will provide the further notice or consent mechanism required before using information for that purpose. Posting a new notice alone is not consent to an unrelated use of data already collected.

For commercial project terms, also read the Terms & Conditions, Delivery Policy and Refund and Cancellation Policy. A service contract does not override non-excludable privacy obligations.

16Indian law and exclusive Delhi jurisdiction

Indian law governs this policy and the contractual relationship. Subject to mandatory law, the courts of competent jurisdiction situated in the National Capital Territory of Delhi, India, shall have exclusive jurisdiction over all disputes, claims and proceedings arising out of or relating to this policy, our website or our services, including their formation, interpretation, performance, breach or termination. The parties agree to exclude the jurisdiction of other courts to the extent legally permitted.

This clause selects Delhi courts that otherwise have jurisdiction; it does not create jurisdiction where none exists. It does not exclude a consumer commission, statutory authority, tribunal or other forum whose jurisdiction cannot lawfully be excluded, or prevent a person from exercising a non-waivable statutory remedy. Any separate arbitration agreement must be expressly agreed in a signed writing; these policies do not impose compulsory arbitration.