This privacy statement aims to tell you about the personal data / personally identifiable information we collect from you, why we collect it, how we handle it, and what you can do on your own to control the data that we collect from you.  

Definitions 
Before we move ahead, we would like to inform you that throughout this document whenever we refer to the words “Vasutti”, “we”, “us”, “our”, or “ours”, we then refer to Vasutti Services Pvt. Ltd., who is the owner of this website.                                                                         

There are three ways by which we collect personal data / personally identifiable information from you.  One is via what is called as cookies, the second is through online forms on this website, that you may submit to us whenever you may want to contact us to know more about our products and services, and the third is through data that we collect for performing business analytics as a service for you. 
 
Cookies 

Cookies are small files that are stored on the device that you use to access our website, like your computer, or your mobile device.                                                                        
Who creates these cookies? It is your device’s web browser that creates these cookies.  And, who requests that these cookies are created? It is our website that requests your web browser to create these cookies. Why? This is done to smoothen your experience when you visit our website. What information is stored in these cookies? Only time related information is stored in these cookies: when was that particular web page accessed, and so on.  No other information related to your device or computer or you are stored in these cookies. Do we store this information anywhere else, like our own web server? No, we do not.                                                                         
You can always delete the cookies that are created by accessing the appropriate option on the web browser that you had used to access our website. 

The Online Form 

You use online forms when you want to know more about our products or services, or when you want to contact us.                           
The online form can be of two types: one is the ‘Contact Us’ form, and the other is the ‘Masterclass’ form.  The ‘Contact Us’ online form is a general-purpose form which you use to contact us for knowing more about our products and services.  The ‘Masterclass’ online form informs you about knowledge sharing events that we may conduct and allows you to register for those events.                                     

In the ‘Contact Us’ online form we request your name, your email address, your company’s name, your mobile number, the subject of the message, and the message itself.  Of these, the email address field is mandatory as that helps us to respond to your requests through emails.  The other fields are not mandatory to respond to you through the ‘Contact Us’ online form.  However, the efficiency of our response would be affected if some of those fields are not filled and consequently the time it takes for you to receive a proper response from us could increase.  As an example, if one were to want to know about our products and services in specific, and if the message field was left unfilled while sending the request on the ‘Contact Us’ online form, then we are likely to take more time to understand and respond to that request.                                     

In the ‘Masterclass’ online form we request your name, your email address, your company’s name, your mobile number, your designation, the subject of the message, and the message itself.  Of these, the email address field is mandatory as that helps us to send you an event invite through an email.  The other fields are not mandatory to respond to you through the ‘Masterclass’ online form.  However, having information of these optional fields would help us to conduct the ‘Masterclass’ event in a way that would better address your needs.  As an example, if one were to know your designation, then while conducting the ‘Masterclass’ event, we could provide some examples that could explain the knowledge that we share during such an event in a way that is relevant to your role in your company, which could make your experience during this event more interesting for yourself.                                    The personal data / personally identifiable information that you provide through the online forms is sent via an email to the email address info@Vasutti.in. A designated person from our team regularly reviews these emails and responds to your requests appropriately.                                                                         

This personal data / personally identifiable information is shared amongst our team on a case to case basis to further respond to your requests.  This information is stored either as emails in our team’s secure computers or mobile devices, or on physical notepads or filing records that they own, or in a common file that is in a secure shared folder on our Microsoft SharePoint portal.                                                                         

All of our team members, who are either our employees, or who are our consultants, or who are our partners or contractors, are under appropriate Non-Disclosure Agreements that holds them accountable for your personal data / personally identifiable information that have on their computers or devices or physical notepads or filing records that they own.  They are adequately warned about the consequences of sharing your personal data / personally identifiable information outside the scope of this privacy statement.                                                                                                            The secure shared folder on our Microsoft SharePoint portal is accessed by only those of our team members who require to respond to your requests. 

Data for Business Analytics 

One of the services we provide is business analytics.  As a part of rendering this service you may want us to study your data or that of the entity that you represent.  You may further want us to provide you an analytical report based on this study of the data you provide us.                                                                         
We would normally expect data to be transferred from your computing environment to our computing environment for us to do the analysis.                                                                         

We will require you to anonymize sensitive personal data / personally identifiable information if such sensitive data has no utility in the data analysis.  However, if such sensitive personal data / personally identifiable information has utility in the data analysis, then we would require you to pseudonymize such data with an algorithm that is at least as good as a SHA-256 algorithm. In case pseudonymization interferes with the data analysis, and defeats the purpose of the service, then we will require you to provide us the data in its non-anonymized, and non-pseudonymized form for the service to be rendered to you.                                                                        All data for business analytics will be transferred using standard transport encryption methods to our secure server.  At this point of time we would be using our Microsoft SharePoint environment for the transfer of the data.  You will be provided a secure login, then you will transfer the required data. Secure login access to the transferred data will be provided only to the concerned project members on our side.  Each of our project members could be our employee, a consultant contracted with us, or a partner to us. Each project member will sign Non-Disclosure Agreements (NDAs) with us to ensure that they in turn do not transfer collected data to anyone else.                                                                        Results of data analysis will be transferred back to you through a secure login in Microsoft SharePoint. Thereafter, you will have access to those results via a separate secure login.  

Your Rights on Your Personal Data / Personally Identifiable Information 
There may be occasions when you may want to modify or delete your personal data / personally identifiable information which is with us. You may also want to know what personal data / personally identifiable information of yours is stored with us. You can place a request to us at the email address info@Vasutti.in providing relevant details. We endeavor to fulfil your request in a reasonable time frame.                                                                         There may be occasions when we may not be able to delete your personal data / personally identifiable information with us, typically when we have a work contract with you, or when our interactions with you have generated transaction records like work reports, invoices, communication records, and so on. These records are securely stored with us either as computer records or physical filing records.      

Grievance Redressal 

In case you have a grievance or complaint in relation to the processing of your personal data / personally identifiable information, then it should be sent to us in writing to info@Vasutti.in.  Grievance/complaints shall be redressed within 15 calendar days. 

Effective Date 
This Privacy Statement is effective from 15-Sep-2020 and it supersedes all our existing privacy statements.                                                                          

Changes to this Privacy Statement 
We would be making changes to this Privacy Statement as appropriately required.  We will publish the changed privacy statement on this web page. We will not reduce your rights under this privacy statement without your explicit consent.  It would be a good idea for you to regularly check this privacy statement so that you are aware of the latest changes to this statement.