Privacy notice
Preview draftHow the public Falcon Veritas website handles enquiry, chat and optional analytics information, and the facts still needed for a complete service notice.
Owner and legal verification required before publication
This draft leaves material facts and commitments unresolved. It is not an operative notice, policy or agreement, and it does not claim regulatory or accessibility compliance.
- Confirm controller and processor roles for each service and audience.
- Approve lawful bases and retention periods for every processing purpose.
- Map indirect data sources, recipients, processing regions and transfer safeguards.
- Confirm the request workflow and applicability of statutory response periods.
Who is responsible
Falcon Veritas Intelligence India Pvt Limited operates the public website. The owner-supplied business display address is Manyata Embassy Business Park, Outer Ring Road, Nagavara, Bengaluru, Karnataka 560045, India. This display address is not represented as the company's complete registered particulars.
No Data Protection Officer has been formally designated. Privacy enquiries and individual-rights requests may be sent to privacy@falconveritas.com. That mailbox is a contact route; it is not a promise of a separate response service level.
This preview describes public website interactions. Personal data uploaded to or generated within a customer FVI service needs a service-specific controller/processor description and the executed customer agreement; that detail is not completed here.
Purposes, data and retention
The categories below are visible in the current marketing implementation. The lawful basis and retention schedule for each purpose remain owner/legal decisions and are intentionally left unasserted.
| Purpose | Information involved | Lawful basis | Retention |
|---|---|---|---|
| Respond to contact and demo requests | Details a visitor chooses to submit, such as name, business email, company, role, country, phone, message, interests and requested meeting details. | Needs owner/legal confirmation for each use. | Per-category schedule not verified; confirm before publication. |
| Provide public chat responses | Chat messages and related session or request information. Do not enter credentials or confidential customer information. | Needs owner/legal confirmation, including the AI service context. | Provider and stored-record retention are not verified. |
| Optional CTA and page analytics | After opt-in: pages visited, where a visit came from, campaign tags, marketing button activity, a temporary session reference, a broad region hint, and an optional enquiry reference. A request may also include an IP address and browser type. | Consent choice is recorded; the lawful basis for each downstream use still needs confirmation. | Temporary browser information ends with the session or when cleared. The server-side retention period has not been confirmed; no fixed period is stated. |
| Deliver and protect the site | Records needed to deliver the site and protect it from misuse may include request and diagnostic information; the exact fields have not been mapped. | Needs owner/legal confirmation after provider and log review. | Not yet mapped by data category. |
Where information comes from
For contact, demo and chat interactions, information is provided directly by the person using the public site. CTA analytics are generated from page and button activity after optional analytics is accepted.
Any personal data obtained indirectly, including its source, categories and collection timing, has not been confirmed for this notice. The owner/legal reviewer must add those details before relying on this text for Article 14 information.
Recipients and international transfers
The public site and FVI services use cloud-hosted services for website delivery, enquiries and optional analytics, along with an external font service. FVI's current customer service is hosted in the United Kingdom (owner-confirmed). This does not mean every website request, log, font request, support access, public-chat interaction or other service stays in the UK. The service providers, their roles, the information they receive, where it is handled, how long it is kept and any onward sharing are still being verified. The subprocessor register lists names seen in the site and clearly marks open details.
US, EU, India and Singapore cells are planned only and are not described here as currently available locations.
No transfer mechanism, adequacy decision, transfer-impact assessment or Standard Contractual Clause is represented here as executed or applicable. Confirm the actual data flows and contractual safeguards before publication; do not infer a transfer mechanism from a provider's name or location.
Your rights and how to make a request
Where the GDPR applies, rights may include access, rectification, erasure, restriction, portability, objection to certain processing, and withdrawal of consent where consent is the basis. The right that applies depends on the circumstances and the lawful basis. You may write to privacy@falconveritas.com and describe the request; avoid sending passwords or unnecessary sensitive information.
Under GDPR Article 12(3), a controller generally communicates action on an applicable request without undue delay and within one month. For complex or numerous requests, the period may be extended by up to two further months, with notice and reasons provided within the first month. This describes the statutory rule, not a shorter FVI service-level commitment; the request-handling process still requires owner/legal confirmation.
You may complain to a competent supervisory authority. For EU/EEA contacts, consult the European Data Protection Board member-authority directory. In the UK, the Information Commissioner's Office provides a complaint route. Which authority is competent depends on the person's circumstances and applicable law.
Automated decisions and profiling
Optional analytics can measure page and CTA activity after a visitor chooses to accept it. The scope and providers of public chat processing require further review. This preview does not establish whether profiling or solely automated decisions with legal or similarly significant effects occur in any service; that assessment must be completed before a final notice is issued.
Reference material
- GDPR, Regulation (EU) 2016/679Official text, including Articles 12–14 and 77.
- European Data Protection Board membersOfficial directory of EU/EEA supervisory authorities.
- UK Information Commissioner's OfficeUK complaint information.
Privacy enquiries: privacy@falconveritas.com