This policy explains how we handle the information you share while purchasing a plan, answering assessment questions, and receiving your business performance report.
This Privacy Policy (“Policy”) sets out in detail the manner in which Ameerang Enterprise Private Limited, a company duly incorporated under the laws of India and operating under the brand name BizVitals (hereinafter referred to as the “Company”, “we”, “us”, or “our”), collects, receives, records, organizes, stores, uses, processes, discloses, transfers, and protects information in connection with its platform, products, assessments, reports, tools, and related services (collectively referred to as the “Services”).
This Policy is intended to provide a comprehensive and transparent explanation of the Company’s data practices in accordance with applicable laws, including but not limited to the Information Technology Act, 2000 and rules made thereunder, and any other applicable data protection regulations.
By accessing, browsing, or using the Services in any manner whatsoever, or by submitting any information through the platform, the user (“User”, “you”, or “your”) expressly acknowledges that they have read, understood, and agreed to be bound by this Privacy Policy, and further provides informed, specific, and unambiguous consent to the collection and processing of information as described herein.
This Privacy Policy applies to all Users who access or interact with the Services, whether directly or indirectly, including but not limited to individuals accessing the platform independently, or those participating through an organization, consultant, facilitator, employer, partner, or any third-party administrator.
The scope of this Policy extends to all forms of data collection, whether conducted through the Company’s website, digital platforms, assessment interfaces, communication channels, integrations, or any other mode of interaction facilitated by the Company.
In circumstances where the Services are provided in conjunction with or on behalf of a third party, such as an organization or consultant, the roles and responsibilities with respect to data processing may vary. In such cases, the Company may act either as a data controller determining the purposes and means of processing, or as a data processor acting on documented instructions of such third party. This Policy shall apply in conjunction with any applicable agreements governing such relationships.
The Services offered under BizVitals are designed to enable structured assessment, evaluation, and analysis of business-related parameters through the collection of user-provided inputs, followed by the generation of outputs such as scores, classifications, reports, insights, and recommendations.
In the course of delivering these Services, the Company may collect information that pertains to business operations, financial indicators, strategic inputs, organizational structures, and performance metrics. While such information is primarily commercial in nature, it may, in certain instances, be associated with identifiable individuals and therefore fall within the ambit of personal data under applicable laws.
The Company does not intentionally solicit or collect sensitive personal data as defined under applicable law, unless such collection is explicitly required for a specific and disclosed purpose. Users are advised to exercise discretion while providing information and to avoid submitting data that is not necessary for the intended use of the Services.
The Company collects various categories of information in order to effectively provide and enhance its Services.
Personal identification information may include, but is not limited to, the User’s name, email address, phone number, business name, designation, and general geographic location. Such information may be collected at the time of registration, onboarding, assessment participation, or communication with the Company.
In addition, Users may provide business-related information, including but not limited to operational processes, revenue ranges, financial indicators, internal structures, decision-making frameworks, and other strategic or performance-related data. Such information is typically collected through assessment questionnaires, forms, or facilitated interactions.
Assessment-related data includes responses submitted by Users, selections made during assessments, time taken to complete assessments, progress indicators, and outputs generated by the system, including scores, classifications, and reports.
The Company may also collect technical and usage-related data automatically, including IP address, browser type, device characteristics, operating system, session logs, timestamps, navigation patterns, and interaction behavior. This data is used for system functionality, analytics, and security purposes.
The Company processes information on one or more lawful bases as recognized under applicable law. These include, without limitation, the User’s consent, the necessity of processing for performance of contractual obligations, the Company’s legitimate business interests, and compliance with legal or regulatory requirements.
Where consent forms the basis of processing, such consent shall be deemed to be free, informed, specific, and unambiguous, arising from the User’s voluntary provision of information and continued use of the Services after being presented with this Privacy Policy.
Users shall have the right to withdraw consent, subject to applicable legal and contractual limitations. However, such withdrawal may result in the inability of the Company to provide certain or all aspects of the Services.
The information collected by the Company is utilized for the purpose of operating, maintaining, and improving the Services, including but not limited to generating assessment outputs, delivering reports, enabling platform functionality, and facilitating User access.
The Company may also process information to conduct internal analysis, enhance the accuracy and effectiveness of its frameworks, develop new features, and create aggregated insights and benchmarks. Such processing shall be undertaken in a manner that does not reasonably identify individual Users.
Information may further be used to communicate with Users regarding service-related matters, including confirmations, updates, support responses, and administrative notifications. Where permitted by applicable law, the Company may also send promotional or informational communications relevant to the Services.
Additionally, the Company may process information to ensure system integrity, prevent fraud, detect misuse, enforce contractual obligations, and comply with applicable legal and regulatory requirements.
For the purposes of clarity and legal distinction, the Company classifies data into three categories: User Input Data, Processed Data, and Aggregated Data.
User Input Data refers to all information directly provided by the User, including assessment responses and business-related inputs. Users retain ownership of such data, subject to the rights granted to the Company under this Policy.
Processed Data refers to outputs generated by the platform, including scores, reports, classifications, and insights derived from User Input Data. Such data constitutes value-added output and may incorporate proprietary methodologies of the Company.
Aggregated Data refers to data that has been anonymized and combined in such a manner that it does not reasonably identify any individual or entity.
By using the Services, the User grants the Company a limited, non-exclusive, royalty-free, and worldwide license to use, process, store, and analyze User Input Data for the purposes set out in this Policy. The Company retains rights over Processed Data and Aggregated Data for purposes including service improvement, research, benchmarking, and business operations, subject to applicable confidentiality safeguards.
The Company does not sell personal data to third parties.
However, information may be shared in specific and controlled scenarios. Where a User participates in an assessment facilitated, administered, or sponsored by an organization, consultant, employer, or partner, the User acknowledges and agrees that relevant data, including assessment responses, outputs, and reports, may be shared with such entity as part of the intended service delivery.
The nature and extent of such sharing may vary depending on the configuration of the engagement, and the User is deemed to have been informed of such sharing at the time of participation.
The Company may also engage third-party service providers to perform functions such as hosting, analytics, communication, payment processing, and technical support. Such providers are bound by contractual obligations to maintain confidentiality and to process data only for specified purposes.
Information may be disclosed where required by applicable law, regulation, court order, or governmental authority, or where necessary to protect rights, investigate fraud, or ensure safety.
In the event of a corporate restructuring, merger, acquisition, or transfer of assets, information may be transferred as part of such transaction, subject to reasonable safeguards.
The Company shall not be liable for any misuse, unauthorized disclosure, or independent processing of data by any third party once such data has been shared in accordance with the User’s participation in the Services.
The Services may rely on third-party platforms, infrastructure providers, and tools, including but not limited to cloud hosting services, analytics providers, communication systems, and payment gateways.
While the Company undertakes reasonable diligence in selecting such providers, it does not exercise direct control over their systems and shall not be responsible for acts or omissions attributable to such third parties, except to the extent required under applicable law.
Users are encouraged to review the privacy policies of such third parties where applicable.
The Company uses cookies and similar technologies to ensure proper functioning of the platform, maintain session integrity, analyze usage patterns, and enhance user experience.
These technologies may collect information relating to user preferences, device characteristics, and interaction behavior. Users may manage or disable cookies through browser settings; however, doing so may affect the functionality of certain features of the Services.
The Company retains information for such period as may be necessary to fulfill the purposes outlined in this Policy, including service delivery, record maintenance, compliance with legal obligations, dispute resolution, and enforcement of agreements.
Retention periods may vary depending on the nature of the data and the context of its collection. Upon receipt of a valid deletion request, the Company shall take reasonable steps to delete or anonymize the relevant data, subject to legal and operational constraints.
Certain data may continue to be retained in backup or archival systems for a limited duration even after deletion, and may not be immediately accessible.
The Company implements reasonable administrative, technical, and organizational measures designed to protect data against unauthorized access, loss, misuse, alteration, or disclosure. Such measures are aligned with generally accepted industry practices appropriate to the scale and nature of the Services.
Despite these safeguards, no method of transmission or storage can be guaranteed to be completely secure, and the User acknowledges and accepts the inherent risks associated with digital data processing.
In the event of a data breach or security incident affecting personal data, the Company shall undertake reasonable measures to investigate the incident, mitigate potential harm, and, where required by applicable law, notify affected Users and relevant authorities within a reasonable timeframe.
Information collected may be processed, stored, or accessed in jurisdictions outside India, depending on the infrastructure and service providers engaged by the Company.
Where such transfers occur, the Company shall take reasonable steps to ensure that data is afforded a level of protection consistent with this Policy and applicable legal requirements.
Subject to applicable law, Users may request access to their personal data, correction of inaccuracies, or deletion of information. The Company may require verification of identity prior to processing such requests.
The Company reserves the right to refuse or limit requests where necessary to comply with legal obligations, protect legitimate interests, or prevent misuse.
Users may receive communications that are necessary for the provision of Services, including transactional and administrative messages. Promotional or marketing communications may be sent where permitted by law or where the User has provided consent.
Users may opt out of non-essential communications through available mechanisms; however, service-related communications may continue.
The Services are intended for individuals who are at least eighteen (18) years of age. The Company does not knowingly collect personal data from minors. If such data is identified, the Company reserves the right to delete it.
To the fullest extent permitted by applicable law, the Company shall not be liable for any indirect, incidental, consequential, or special damages arising out of or in connection with the collection, use, disclosure, or processing of information, including any reliance placed on assessment outputs or reports.
This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the courts located in [Ahmedabad, Gujarat].
In compliance with applicable laws, Users may contact the designated grievance officer for any concerns relating to this Privacy Policy or data processing practices.
Grievance Officer: [Insert Name]
Email: [Insert Email]
Address: [Insert Address]
The Company reserves the right to amend or update this Privacy Policy at its sole discretion. Any changes shall be effective upon being posted with a revised date. Continued use of the Services following such updates shall constitute acceptance of the revised Policy.
