Privacy Policy & GDPR Notice

Who We Are

This website is operated by Udvas Bhattacharya, trading as UDVARA, a luxury corporate wellness brand currently in the process of formal registration in the Republic of Estonia. Until registration is complete, Udvas Bhattacharya acts as the sole data controller for all personal information collected through this website.

Contact for all data and privacy matters: info@udvara.com

What Data We Collect

We collect only the minimum data necessary to respond to your enquiry. When you submit a form through this website, we collect:

• · Your name
• · Your email address
• · The subject or nature of your enquiry

We do not collect payment information, identification documents, or any sensitive personal data. We do not use cookies, tracking pixels, or third-party analytics scripts. No data is collected passively through your visit to this site.

How We Use Your Data

Your data is used for one purpose only: to respond to your enquiry. We do not use your information for marketing, profiling, automated decision-making, or any purpose beyond the direct correspondence you have initiated.

We do not sell, share, or transfer your personal data to third parties, except as required by law or as strictly necessary to deliver a service you have specifically requested.

Legal Basis for Processing

Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal basis:

• ·Legitimate interest — where you have initiated contact and reasonably expect a response from us.
• ·Consent — by submitting a form on this website, you consent to us using your information to respond to your enquiry.

Where Your Data Is Stored

Enquiry submissions are stored in Google Sheets, a service provided by Google LLC. Google acts as a data processor on our behalf under their standard data processing terms. Google Sheets data is stored on servers operated by Google, which may be located within or outside the European Economic Area.

Where data is transferred outside the EEA, we rely on Google's Standard Contractual Clauses as the legal mechanism for such transfer. You can review Google's data processing terms at policies.google.com/privacy.

How Long We Keep Your Data

We retain enquiry data for a maximum of 24 months from the date of submission, unless an ongoing business relationship requires a longer retention period. After this period, data is deleted from our records.

You may request deletion of your data at any time by contacting us at info@udvara.com. We will action deletion requests within 30 days.

Cookies

This website does not use cookies. We do not place any tracking, analytics, functional, or marketing cookies on your device. No consent banner is required because no cookies are set.

If this changes in the future, this policy will be updated and an appropriate consent mechanism will be implemented before any cookies are placed.

Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights. To exercise any of them, contact us at info@udvara.com. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Estonia, this is the Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee. If you are located in Germany, Austria, or Switzerland, you may also contact your local DPA.

Changes to This Policy

This policy may be updated periodically to reflect changes in our practices, services, or applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of this website after any changes constitutes acceptance of the updated policy.