This policy covers ayuvam.comand the personal data Ayuvam (“we”, “us”) handles when you contact us or engage us for work. Our products have their own policies — Presently is covered at presently.ayuvam.com/privacy.
1. Who is responsible
Ayuvam is the data controller for the information described here. Reach us at hello@ayuvam.com for any question about this policy, or to exercise any of the rights in section 7.
2. What we collect
| What | Why | Kept for |
|---|---|---|
| Name, email and message you submit through the contact form | To reply to you and, if it becomes a project, to run it | 24 months from last contact |
| Business contact details of client staff | To deliver the engagement we were hired for | Duration of the engagement plus 7 years (tax and contract records) |
| Material you send us for a project — footage, copy, assets, credentials | To do the work | Deleted or returned on request; archived 12 months after delivery by default |
| Aggregate, non-identifying page analytics | To see which pages are read | Retained in aggregate only |
We do not run advertising trackers, we do not build behavioural profiles, and we never sell personal data.
3. Legal basis
- Contract — handling your data to deliver an engagement you have signed up for.
- Legitimate interests — replying to an enquiry you sent us, keeping our site secure, and keeping records of work done.
- Legal obligation — tax and accounting records we are required to keep.
4. Client material and confidentiality
Material you give us for a project is yours. We use it only to do the work, we do not use it to train machine-learning models, and we do not show it publicly — in a case study, a portfolio or a pitch — without your written permission. Where we have not obtained that permission, a project appears on this site by sector only, with no client name or marks.
If you send us credentials or access to your systems, we hold them only for as long as the engagement needs them and ask you to revoke them at handover.
5. Who else processes your data
We use a small number of vendors to run the business. Each is bound by a data processing agreement and handles data only on our instructions.
| Vendor | Purpose | Region |
|---|---|---|
| Vercel | Website hosting and delivery | US / global edge |
| Resend | Transactional and contact-form email | US |
| Neon | Database hosting for our products | US / EU |
| Paddle | Payments and invoicing for our products | UK / EU / US |
Where a vendor processes data outside your region, transfers rely on Standard Contractual Clauses or an equivalent safeguard.
6. Cookies
This site sets no advertising or cross-site tracking cookies. See the cookie policy for the full list.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. Email us and we will respond within 30 days. You also have the right to complain to your local data protection authority.
8. Security
Encryption in transit, access limited to the people working on your project, and multi-factor authentication on every account that touches client material. Our full practices are set out on the security page.
9. Children
This site and our services are for businesses. We do not knowingly collect data from anyone under 16.
10. Changes
If we change this policy materially we will update the date at the top and, where we hold your contact details in connection with a live engagement, tell you directly.