Aarvi Group (“Aarvi”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data submitted through aarvi.group, including enquiry, RFQ, quotation, career and strategic-partnership channels.
This policy is designed for compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules), as applicable. The Rules were notified in November 2025 and have a phased commencement schedule.
01Data Fiduciary and contact
For personal data processed through this website, Aarvi Group acts as the Data Fiduciary, where the DPDP Act applies.
02Personal data we collect
Depending on your interaction with us, we may collect:
- Name and designation
- Company or organisation
- Business email
- Phone number
- Business or project location
- Industry and enquiry type
- Quantity or project requirements
- Message and correspondence
- Documents or attachments voluntarily submitted through an enquiry or RFQ
- Website technical information such as IP address, browser or device information, access time, cookies and similar identifiers, where collected by our website, hosting, security or analytics providers
03Purposes of processing
We process personal data for specified and legitimate purposes, including:
- Responding to enquiries, RFQs and quotation requests.
- Evaluating biomass, alternative-fuel, biochar, carbon-removal and partnership enquiries.
- Communicating about requested products, services, projects or meetings.
- Processing documents and attachments voluntarily submitted by you.
- Maintaining business, accounting, tax, contractual, legal and regulatory records.
- Securing, maintaining and improving the website.
- Analytics and performance measurement where lawfully enabled.
- Business communications or marketing where permitted and, where required, based on consent.
The DPDP framework requires lawful, purpose-limited processing, data minimisation, accuracy, appropriate retention and reasonable security safeguards.
04Notice, consent and withdrawal
Where consent is required, Aarvi will seek it through a clear notice and appropriate consent mechanism.
You may withdraw consent by contacting info@aarvi.group or using the relevant mechanism provided with the service. Withdrawal does not affect processing already lawfully carried out and may affect services that depend on the relevant processing.
The DPDP Rules require clear, standalone and understandable notices describing the personal data collected, purpose of processing and means to withdraw consent and exercise rights.
05Sharing and Data Processors
We may disclose personal data where reasonably necessary to:
- Website hosting and infrastructure providers
- Email, CRM and communication providers
- Cloud storage and IT / cybersecurity providers
- Professional advisers
- Project or logistics service providers where required for a requested activity
- Government, regulatory, law-enforcement or judicial authorities where legally required
- Other parties where you have requested or authorised disclosure
Where third parties process personal data for Aarvi, we will seek appropriate contractual and security protections. We do not sell personal data. The DPDP framework places security responsibilities on Data Fiduciaries in relation to processing performed by Data Processors.
06Cookies
The website may use essential cookies and similar technologies for functionality and security. Analytics or other non-essential technologies may be used where lawfully enabled and, where required, after appropriate consent.
You can control cookies through your browser settings.
07Retention
Aarvi retains personal data only for as long as reasonably necessary for the relevant purpose, or longer where required by contract, tax, accounting, legal, regulatory or dispute-resolution obligations.
We will review data and delete, anonymise or otherwise dispose of it when the purpose is no longer served, subject to applicable retention requirements. The DPDP Rules also contain specific retention and processing-log requirements for certain categories and purposes.
08Security
We use reasonable technical and organisational safeguards appropriate to the data and risks, which may include access controls, authentication, encryption or masking where appropriate, backups, monitoring, logging and secure hosting.
The DPDP Rules identify safeguards including encryption or masking or similar controls, access controls, monitoring, backups, logs and contractual safeguards for Data Processors.
09Personal data breaches
If Aarvi becomes aware of a personal data breach, we will take appropriate containment, investigation, mitigation and remediation steps and provide notifications required by applicable law.
The DPDP Rules require affected Data Principals to be notified without delay and prescribe reporting to the Data Protection Board, including a detailed report within 72 hours or such longer period as the Board may permit.
10Your DPDP rights
Subject to applicable law, you may have rights to:
- Access information about your personal data and its processing.
- Correct or update inaccurate or incomplete personal data.
- Request erasure where applicable.
- Withdraw consent where processing is based on consent.
- Seek grievance redressal.
- Nominate another person to exercise rights in accordance with applicable law.
Send requests to info@aarvi.group with the subject “DPDP Rights Request”. We may verify your identity before acting on a request. The DPDP framework requires clear channels for rights requests and grievance redressal.
11Grievances
For privacy complaints, contact:
We will address grievances within the period prescribed by applicable law and the DPDP Rules.
12Children
The website is primarily intended for businesses, professionals and adults. We do not knowingly solicit children's personal data through ordinary business enquiry forms.
Where processing of a child's personal data applies, Aarvi will comply with requirements concerning verifiable parental consent and other statutory safeguards.
13International processing
Some technology providers may process data outside India. Where applicable, Aarvi will comply with Indian law, contractual requirements and government directions concerning such processing.
14Third-party websites
Links to third-party websites are provided for convenience. Their privacy practices are governed by their own policies, and Aarvi is not responsible for websites it does not control.
15Changes
Aarvi may update this Privacy Policy because of changes in services, technology, law or data practices. The latest version will be published on this page with a revised date.