Draft for legal review. Highlighted items must be confirmed by RUSH before publishing.
Legal · Privacy
Privacy Policy
Last updated: 20 October 2026
This notice explains how RUSH Technology Ventures Private Limited ("RUSH", "we", "us") collects, uses, shares and protects personal data when you use the Samvrik website, contact us, or deal with us in the course of business. It also explains your rights and how to use them.
1. Who is responsible
RUSH decides why and how your personal data is used in the situations this notice covers. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary. Under the EU and UK GDPR we are the controller.
When a customer uses the Samvrik platform, the customer decides how the data in it is used. In that case the customer is the Data Fiduciary or controller, and RUSH, if it operates the platform, acts on the customer's instructions as a Data Processor under a written agreement. Questions about that data should go to the customer first.
2. What we collect
Information you give us
- Contact and scoping requests: your name, work email, company, role, phone number if you give it, and what you tell us about your needs.
- Business dealings: details of people at customers, partners and suppliers that we need to run the relationship, such as names, roles and contact details.
- Events and newsletters: your details if you register for an event or sign up for updates.
Information collected automatically
- Technical data: your IP address, browser type, device, pages visited and the date and time, recorded by our hosting provider in server logs to keep the site secure and working.
- Cookies and similar technologies: see our Cookie Notice. Non-essential cookies are only used if you allow them.
Information from others
We may receive business contact details from colleagues who introduce you, from event organisers, or from public professional sources such as company websites and professional networks.
We do not ask for sensitive personal data through this website. Please don't send it to us unless we ask for it for a specific reason.
3. Why we use it
| Purpose | Data used | Basis |
|---|---|---|
| Reply to your enquiry and prepare a scoping call | Contact and request details | Your consent; for GDPR, our legitimate interest in responding, or steps before a contract |
| Run and secure the website | Technical data, strictly necessary cookies | Legitimate uses under the DPDP Act; for GDPR, legitimate interests |
| Understand and improve the website | Performance cookies | Your consent |
| Send updates you asked for | Name, email | Your consent, which you can withdraw at any time |
| Manage customer and partner relationships | Business contact details | Performance of a contract; legitimate interests |
| Meet legal duties and protect our rights | Any relevant data | Legal obligation; legitimate uses under the DPDP Act |
4. Who we share it with
- Service providers who help us run the website, email and our business, under contracts that require them to protect the data and use it only on our instructions. See website service providers.
- Professional advisers such as lawyers, auditors and insurers, where needed.
- Authorities where the law requires it, or to protect rights, safety and property.
- A buyer or successor if all or part of our business is reorganised or sold, under the same protections.
We do not sell your personal data. We do not share it for cross-context behavioural advertising.
5. International transfers
Some of our service providers process data outside India. Under the DPDP Act, personal data may be transferred abroad except to countries the Government of India restricts by notification. For data from the EU or UK, we use recognised safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.
- Enquiries that do not lead to a relationship: up to [To confirm: period, e.g. 24 months] after our last contact.
- Customer and partner records: for the relationship, then as long as tax and company law require.
- Server logs: [To confirm: period, e.g. 30 days, per hosting settings].
7. How we protect it
We use reasonable security safeguards, including access by role, encryption in transit, and logging. No system is perfectly secure. If a personal data breach happens, we will inform affected people and the authorities as the law requires, including the Data Protection Board of India. See Security.
8. Your rights
Depending on where you are, you can ask us to:
- tell you what personal data we hold about you and how we use it,
- correct, complete or update it,
- erase it, where we no longer need it or you withdraw consent,
- stop using it for a purpose you agreed to (withdraw consent), as easily as you gave it,
- nominate another person to act for you in case of death or incapacity (India),
- object to or restrict some uses, or receive a copy in a portable format (EU and UK).
To make a request, email [To confirm: privacy contact email, e.g. privacy@rush.tech]. We may need to confirm your identity. We will not treat you unfairly for using your rights. See regional privacy policys for the rights in your country.
9. Grievance Officer
If you have a concern about how we handle your personal data, contact our Grievance Officer:
[To confirm: Grievance Officer name and designation]
RUSH Technology Ventures Private Limited
[To confirm: registered office address]
Email: [To confirm: privacy contact email, e.g. privacy@rush.tech]
We will respond within the time set by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India. In the EU or UK, you may complain to your local data protection authority.
10. Children
This website is meant for business users. It is not directed at anyone under 18, and we do not knowingly collect their personal data.
11. Changes to this notice
We may update this notice. The date at the top shows when it last changed. If a change is significant, we will say so on this page.