This policy explains what personal data Rirote Global (“we”, “us”) collects through riroteglobal.com, why we collect it, and the choices you have. We collect as little as we can: the site has no analytics, no advertising trackers, and sets no cookies of its own.
Who we are
Rirote Global is a sole proprietorship based in Jaipur, Rajasthan, India. We decide how the personal data described here is used, which makes us the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), and the controller where the EU or UK GDPR applies.
You can reach us about anything in this policy at info@riroteglobal.com.
What we collect
When you contact us
If you use the contact form, we receive your name, your email address, your company (optional), the service you are interested in and your message. If you email us directly, including ERPTick early-access requests, we receive your email address and whatever you choose to write.
Please don’t send sensitive information, such as financial, health or identity documents, through the form or by email unless we have agreed a secure way to do so.
When you visit the site
Cloudflare hosts the site. To deliver pages and protect the site from abuse, it processes technical data such as your IP address, browser and device type, the pages you request and when you request them. Cloudflare also runs an automated bot check that may set security cookies. These cookies are strictly necessary for keeping the site available and are not used for tracking or advertising.
The invoice tool
Clients and invoices you enter in our invoice tool are stored only in your own browser’s local storage. That data never reaches us, and clearing your browser data deletes it. The tool loads its fonts from Google Fonts, so Google receives your IP address when you open it.
How we use your data
- To reply to your enquiry, and to discuss, quote for and deliver the work you ask about.
- To keep a record of our conversations with you.
- To keep the website secure and running.
We do not sell, rent or trade personal data. We do not send you marketing emails unless you ask us to.
Under the DPDP Act, we use the details you send us because you provided them voluntarily so that we can respond to you. You can withdraw that consent at any time (see Your rights).
Who we share it with
We rely on a small number of service providers. They process data on our behalf under their own privacy and security terms, and only to provide their service.
| Provider | What it does for us | Data involved |
|---|---|---|
| Web3Forms | Delivers contact form submissions to our inbox | Everything you enter in the form |
| Cloudflare | Hosts the site, protects it from abuse, forwards email sent to our address | Technical visit data; emails you send us |
| Stores our email (Gmail); serves fonts for the invoice tool | Emails you send us; your IP address |
These providers may store or process data outside India. We may also disclose data if the law requires it, for example in response to a valid order from a court or government authority.
How long we keep it
We keep enquiries and our replies for 24 months after our last contact with you, then delete them. If an enquiry becomes a project, we keep the related records for as long as the work and our legal obligations, such as tax and accounting rules, require.
Cloudflare keeps its technical logs for a short period under its own policies.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete, update or erase it;
- withdraw your consent at any time (this does not affect anything we did before you withdrew it);
- nominate another person to exercise these rights for you if you die or become unable to; and
- raise a grievance with us about how we handle your data.
To use any of these rights, email info@riroteglobal.com. We may need to confirm your identity first. We reply within 30 days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Visitors in the EU and UK
If the EU or UK GDPR applies to you, we rely on these legal bases:
- Steps you ask us to take before a contract: replying to your enquiry and preparing a quote.
- Our legitimate interests: keeping records of our conversations and keeping the website secure.
You also have the right to access, correct or erase your data, to restrict or object to how we use it, and to receive it in a portable format. You can complain to your local data protection authority. Where our providers transfer your data outside the EU or UK, they rely on recognised safeguards such as Standard Contractual Clauses.
Security
The whole site is served over an encrypted (HTTPS) connection, and only the people who need your enquiry to do their work can see it. No method of sending or storing data is completely secure, but we take reasonable steps to protect it.
Children
This site is meant for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us their details, contact us and we will delete them.
Changes to this policy
When we change this policy, we update the “Last updated” date at the top of this page. If a change significantly affects how we use your data, we will say so clearly on this page.
Contact
Rirote Global, Jaipur, Rajasthan, India
Email: info@riroteglobal.com