Privacy Policy

Who is responsible for your information

VSquare Digital is the data controller for personal information collected through this website and for information you share with us during pre-contract discussions. Where we process personal data on behalf of a client as part of a delivery engagement, we act as a processor and the client’s own privacy notice governs that processing.

What we collect

• Contact details you submit — name, work email, phone number, company and country — when you send an enquiry, subscribe to the newsletter or apply for a role.
• The content of your enquiry, including any project detail or indicative budget you choose to share.
• Technical data your browser sends with each request: IP address, user agent, referring page and the pages you view. This is used to keep the site available and to detect abuse.
• Cookie identifiers, only where you have allowed a category beyond strictly necessary. See the Cookie Policy for the full list.

Why we process it

• To respond to your enquiry and to conduct pre-contract discussions — our legitimate interest in answering people who contact us, and steps taken at your request before entering a contract.
• To send the newsletter — your consent, withdrawable at any time from the unsubscribe link in every message.
• To assess job applications — steps taken at your request before entering an employment contract.
• To keep the service secure, prevent spam and diagnose faults — our legitimate interest in operating a safe, working website.
• To meet accounting, tax and regulatory obligations — compliance with a legal obligation.

Who we share it with

We share personal information only with the service providers needed to run the site and respond to you: our hosting and content delivery provider, our email delivery provider, and our internal customer relationship system. Each is bound by a written processing agreement that restricts them to acting on our instructions. We disclose information to a public authority only where we are legally required to, and we will tell you unless the law prevents us.

International transfers

We operate from India, the United Arab Emirates, Singapore, the United Kingdom and Kenya, so your information may be accessed by our teams in those countries. Where information leaves a jurisdiction that restricts transfers, we rely on an adequacy decision where one exists, and otherwise on standard contractual clauses combined with technical measures such as encryption in transit and at rest.

How long we keep it

• Enquiries that do not become engagements: 24 months from the last contact, then deleted.
• Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not re-add you.
• Job applications: 12 months, unless you ask us to keep you on file for longer.
• Client engagement records: for the term of the contract and the retention period it specifies, and thereafter as required for tax and limitation periods.
• Server and security logs: 90 days.

Your rights

Subject to the law that applies to you, you can ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to processing based on legitimate interests, and ask for your information in a portable format. Where processing rests on consent, you can withdraw it at any time without affecting what we did before you withdrew.

We respond to requests within 30 days. There is no charge unless a request is manifestly unfounded or excessive. If you are not satisfied with our response, you may complain to your local supervisory authority.

How we protect it

Transport is encrypted with TLS. Access to enquiry data is limited to the people who need it and is logged. We operate an information security management system certified to ISO/IEC 27001:2022 and test the site against the OWASP Application Security Verification Standard before each significant release. No system is perfect; if a breach is likely to result in a risk to your rights, we will notify you and the relevant authority within the statutory deadline.

Children

This site is aimed at business audiences and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top of the page. Where a change materially affects how we use information you have already given us, we will contact you directly before it takes effect.