LEGAL COMPLIANCE • UPDATED OCTOBER 2024
Privacy Policy & Data Ethics
Viva La Design (operated as VLD Studio / Viva La Design Private Limited, "we", "our", or "us") is dedicated to upholding the highest standards of data privacy, operational transparency, and financial compliance for our hospitality clients and website visitors worldwide.
1. Information We Collect
To facilitate our bespoke digital architecture services, project proposals, and direct booking engine development, we collect the following categories of information:
- Direct Contact Data: Name, professional email address, telephone number, company/property name, and project scope submitted through our consultation forms.
- Commercial & Billing Information: Company tax identification numbers (GST/VAT), billing address, and authorized contact details necessary for issuing service agreements and tax invoices.
- Payment Processing Information: When making payments for retained services, project deposits, or design retainers, transaction data is transmitted directly to our Reserve Bank of India (RBI) authorized payment gateway partner, Cashfree Payments India Pvt. Ltd. ("Cashfree"). We do not store, log, or have access to raw card numbers, CVVs, or net banking passwords on our local servers.
- Technical & Analytics Telemetry: Anonymized browser version, device orientation, IP address, and session timings collected exclusively to ensure sub-second rendering speeds and responsive layouts.
2. Payment Gateway Security & Data Handling
All online financial transactions initiated on our platform are secured under strict PCI-DSS Level 1 compliance protocols. In accordance with payment aggregator regulations:
- Data is encrypted in transit via TLS 1.3 cryptographic protocols with 256-bit encryption.
- Tokens generated by Cashfree are utilized solely to reconcile milestone payments and confirm invoice settlement.
- Under no circumstances is financial or personal information monetized, rented, or traded to advertising networks or unauthorized third parties.
3. Client Data Rights & Compliance
Clients and website visitors possess unequivocal rights to access, inspect, rectify, or request the deletion of their stored contact data under applicable privacy laws (including the Digital Personal Data Protection Act and GDPR). To exercise these rights, submit a written inquiry to our compliance officer.
4. Official Merchant & Grievance Contact
For inquiries regarding this policy, invoice queries, or data protection:
