Last updated: March 2026
This Privacy Notice describes how GV Mantra Technologies Pvt Ltd collects, uses and protects personal data when you interact with us — whether through our website, as a client, or as a business contact. We take your privacy seriously and handle all personal data responsibly and transparently.
Who We Are
GV Mantra Technologies Pvt Ltd is a Salesforce consulting firm headquartered in Gurgaon, Haryana, India. We specialise in Salesforce implementations, Managed Services and Staff Augmentation, serving clients in the United Kingdom, Europe and North America.
For the purposes of this notice, GV Mantra acts as a Data Controller for personal data we collect directly (such as client contact details and website enquiries), and as a Data Processor when we work with data on behalf of our clients within their own Salesforce environments. We comply with UK GDPR, EU GDPR, India DPDP Act 2023 and applicable US privacy laws.
Data We Collect and How We Use It
The table below summarises what personal data we collect, why we collect it and how long we keep it.
| Data Type | What We Collect | Why We Collect It | Legal Basis | Retention |
|---|---|---|---|---|
| Website Enquiries | Name, email, company, message | To respond to your enquiry | Legitimate interests | 12 months |
| Job Applications | CV, contact details, compensation | To evaluate your application | Legitimate interests | 6 months |
| Blog Subscriptions | Email address | To send blog updates | Consent | Until unsubscribed |
| Website Analytics | Pages visited, location, browser | To improve our website | Consent | 26 months (GA4) |
| Client Engagement | Business contact details | To deliver our services | Contract | 3 years post-engagement |
| Financial Records | Invoice and contract data | Legal and tax compliance | Legal obligation | 7 years |
We do not use your personal data for marketing without your explicit consent. We do not sell your data. We do not use your data for automated decision-making or profiling.
How We Store and Protect Your Data
Personal data is stored on secure, enterprise-grade cloud platforms — Salesforce CRM for client contact records and Microsoft 365 for email and project correspondence. Both platforms are GDPR-compliant with encryption at rest and in transit.
All GV Mantra systems are protected by multi-factor authentication (MFA), role-based access controls and full disk encryption on all devices. Access is revoked immediately upon any employee or contractor departure.
Cookies and Tracking
Our website uses cookies and similar tracking technologies. We only activate non-essential cookies (including Google Analytics) after you have given explicit consent via our cookie banner.
| Cookie Type | Purpose |
|---|---|
| Essential cookies | Required for the site to function. Always active. |
| Analytics cookies (Google Analytics 4) | Help us understand website usage. Only active after consent. |
| reCAPTCHA | Used on contact and application forms to prevent spam. Subject to Google's Privacy Policy. |
International Data Transfers
GV Mantra is based in India. Our cloud platforms may process data on infrastructure located in the UK, EU or US. Both Salesforce and Microsoft operate under Standard Contractual Clauses (SCCs) providing appropriate safeguards for UK and EU personal data. If you require a Data Processing Agreement (DPA), contact us at hello@gvmantra.com.
Your Data Protection Rights
Depending on your location you have the following rights over your personal data. Contact us at privacy@gvmantra.com and we will respond within 30 days.
| Right | What It Means | Applies To |
|---|---|---|
| Right of Access | Request a copy of the personal data we hold about you. | UK · EU · India |
| Right to Erasure | Request deletion of your data where there is no legitimate reason to retain it. | UK · EU · India |
| Right to Rectification | Ask us to correct inaccurate or incomplete personal data. | UK · EU · India |
| Right to Object | Object to processing based on our legitimate interests or for direct marketing. | UK · EU |
| Right to Restrict Processing | Ask us to limit how we use your data in certain circumstances. | UK · EU |
| Right to Data Portability | Request your data in a portable, machine-readable format. | UK · EU |
| Right to Withdraw Consent | Withdraw consent at any time where processing is based on consent — such as blog subscriptions or analytics cookies. | UK · EU · India · US |
UK residents: if you are not satisfied with our response you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Third Parties
We do not sell or share your personal data with third parties for commercial purposes. The only sub-processors we use are Salesforce Inc., Microsoft Corporation, Resend Inc. (email delivery) and Google LLC (Analytics and reCAPTCHA) — all operating under robust data protection agreements.
Contact Us
For any questions relating to your personal data contact our Data Privacy Lead:
Vikram Middha — Co-Founder & Technical Lead
Email: privacy@gvmantra.com
GV Mantra Technologies Pvt Ltd, Unit 541, Tower B3, Spaze I-Tech Park, Sector 49, Gurgaon, Haryana - 122018
Updates to This Notice
This privacy notice is reviewed annually. Any material changes will be communicated to active clients by email. The date at the top of this page always reflects the current version.