Privacy Policy

#Who we are

Procuriva is a procurement outsourcing firm operating through two companies. Procuriva FZE LLC, a free zone company in Ajman, United Arab Emirates, registered office Amber Gem Tower, Mezzanine Floor, Sheikh Khalifa Bin Zayed Street, Al Rashidiya 3, Ajman, United Arab Emirates, is the entity you contract with. Procuriva Private Limited, Prestige Cube Building, 26 Hosur Road, Chikku Lakshmaiah Layout, Adugodi, Koramangala, Bengaluru, Karnataka 560030, India, is our delivery centre and performs the work. Both are referred to below as Procuriva, "we" or "us".

For personal data collected through this website we are the controller. For personal data we process on behalf of a client during an engagement we are a processor, and that relationship is governed by the Data Processing Addendum rather than by this policy.

#What we collect

This website is deliberately thin on data collection. There is no analytics package, no advertising pixel and no third-party tracking script on any page.

• Enquiry form: your name, work email address, company name and the message you write. Nothing on the form is required beyond what is needed to reply to you.
• Email correspondence: anything you choose to send us once a conversation starts.
• Server logs: IP address, browser user agent, requested URL and timestamp, generated automatically by our hosting provider and used to keep the site available and secure.

#Why we hold it, and on what basis

We do not sell personal data, we do not share it with advertisers, and we do not use it to build a profile of you. We do not send marketing email to anyone who has not asked for it.

#Who else sees it

Only the people and services needed to answer you. Our current sub-processors are published in full on the sub-processors page and that list is the authoritative one; today it is a single provider, Amazon Web Services, whose Simple Email Service carries enquiry emails.

We disclose personal data to a public authority only where we are legally required to, and we will tell you when we are permitted to do so.

#Where it is processed

Our team works from the United Arab Emirates and India, so personal data you send us is accessed from both. Where a transfer needs a safeguard, we rely on the UK International Data Transfer Agreement and the EU standard contractual clauses, and we will provide a copy on request.

#How long we keep it

• Enquiries that do not become a conversation: 12 months from your last message, then deleted.
• Enquiries that become a client relationship: for the life of the relationship and 7 years afterwards, to meet accounting and tax obligations.
• Server logs: 90 days.

#Your rights

Depending on where you live you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, or withdraw consent you have given. These rights arise under the UK and EU GDPR, PIPEDA in Canada, the Australian Privacy Principles, and the Saudi Personal Data Protection Law, among others.

To exercise any of them, email legal@procuriva.com. We will respond within one month. We do not charge for this, and we will not ask you to justify the request.

If you are unhappy with our response you can complain to your local supervisory authority — in the UK, the Information Commissioner's Office; in the EU, the authority for your country of residence.

#Security

How we protect data is set out in detail on the security page, including access control, segregation of duties and our current certification status. We state that status as it is rather than displaying badges we do not hold.

#Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects people who have already contacted us, we will tell them directly rather than relying on them to re-read the page.