Privacy Policy

neXavault – The Cyber Armour
A brand of John and Smith Solutions Private Limited

Last Updated: 20 August 2026

1. Introduction

John and Smith Solutions Private Limited ("John and Smith Solutions", "neXavault", "we", "us", "our"), operating under the brand name "neXavault – The Cyber Armour", is committed to protecting your privacy and handling your personal data responsibly, lawfully, and transparently.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit our website www.nexavault.co.in (the "Site"), and describes your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and its rules, as applicable in India.

For the purposes of the DPDP Act, John and Smith Solutions Private Limited acts as the Data Fiduciary in respect of personal data collected through the Site.

Data Fiduciary Details:

  • John and Smith Solutions Private Limited
  • CIN: U62013KL2025PTC099352
  • Registered Office: Lulu Twin Tower, Amenities Block, 3rd Floor, Cochin Smart City SEZ, Kakkanad, Kerala 682042
  • Email: office@johnandsmithglobal.com
  • Phone: +91 7736160707

By using the Site, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent to process personal data, you may give, manage, review, or withdraw that consent at any time as described in this Policy.

2. Personal Data We Collect

We collect personal data only to the extent necessary for the specified purposes set out in this Policy. Through the Site, we may collect:

a) Data you provide directly (Contact Form):

  • Name
  • Email address
  • Phone number (if provided)
  • Company name and job title (if provided)
  • Any message, query, or information you choose to include when submitting the contact form

b) Data collected automatically (Cookies and Analytics):

  • IP address
  • Browser type and version
  • Device and operating system information
  • Pages visited, time spent, referring/exit pages, and general usage patterns
  • Cookie identifiers and similar tracking technologies

We do not knowingly collect Sensitive Personal Data (such as data relating to health, sexual orientation, religious beliefs, biometric or genetic data) through the Site, and the Site is not designed to solicit such data.

3. Children's Data

The Site and its services are intended for business and professional use and are not directed at or intended for children (individuals under the age of 18). We do not knowingly collect personal data from children.

In the event we become aware that personal data of a child has been collected without verifiable consent of a parent or lawful guardian, as required under Section 9 of the DPDP Act, we will take steps to promptly delete such data. If you believe a child has provided us with personal data, please contact our Data Protection Officer using the details in Section 12.

4. How and Why We Use Your Personal Data (Purpose Limitation)

We process personal data strictly for the specific, clear, and lawful purposes for which it was collected, namely:

Data Collected Purpose
Contact form details (name, email, phone, message) To respond to your enquiries, provide requested information, and communicate with you regarding our services
Cookies and analytics data To operate and secure the Site, understand how visitors use the Site, and improve Site performance and user experience

We will not use your personal data for any purpose that is not disclosed to you at the time of collection, except where you provide fresh consent for that purpose, or where required by applicable law.

5. Legal Basis for Processing (Consent)

Under the DPDP Act, we process your personal data on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action (e.g., submitting the contact form, or accepting cookies via our cookie banner).

Our consent requests are presented in clear and plain language, independent of other terms, and give you the option to access this Privacy Policy in English at the time of seeking consent.

You have the right to withdraw your consent at any time, with the ease of withdrawal comparable to the ease with which consent was given. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal. To withdraw consent, contact us using the details in Section 12.

Where required, and once operationalised by the Central Government, you may also exercise consent-related choices through a registered Consent Manager in accordance with the DPDP Act.

6. Cookies

Our Site uses cookies and similar tracking technologies to distinguish you from other visitors, remember your preferences, and analyse Site usage. Cookies requiring your consent are only activated after you provide such consent through our cookie banner/preference tool. You may manage or withdraw cookie consent at any time through your browser settings or our cookie preference tool.

7. Disclosure of Personal Data

We do not sell your personal data. We may share personal data with:

  • Service providers / Data Processors engaged to provide IT infrastructure, website hosting, security, and analytics services, strictly under written contract requiring them to process data only on our instructions and to implement appropriate safeguards.
  • Regulators and government authorities, including the Data Protection Board of India, where required to comply with a legal obligation or valid legal process.
  • Professional advisers (e.g., legal, audit) where necessary for our legitimate business operations.

We do not knowingly transfer personal data collected through this Site outside India. Should this change, this Policy will be updated to reflect the applicable safeguards, consistent with any restrictions notified by the Central Government under the DPDP Act.

8. Data Retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, in accordance with the DPDP Act's data minimisation and storage limitation principles.

  • Contact form submissions are retained only for as long as necessary to address your enquiry and for a reasonable period thereafter for record-keeping, or until you request erasure, whichever is earlier.
  • Cookie and analytics data is retained only for the duration necessary for the analytical purpose for which it was collected, as further described in our cookie preference tool.

Where we no longer have a lawful purpose to retain personal data, and no legal obligation requires continued retention, we will erase or anonymise such data, including data held by our processors on our behalf.

9. Data Security

We implement reasonable security safeguards, including organisational and technical measures, to prevent personal data breaches and protect personal data in our possession or under our control. This includes access controls, encryption where appropriate, and contractual obligations on our service providers to maintain adequate security standards.

In the event of a personal data breach, we will take prompt action in accordance with the DPDP Act and applicable rules, including intimating the Data Protection Board of India and affected Data Principals where required.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights in respect of your personal data:

  • Right to Access Information : Obtain a summary of the personal data we hold about you and the processing activities undertaken.
  • Right to Correction and Erasure : Request correction of inaccurate or incomplete personal data, and updating or erasure of personal data that is no longer necessary for the purpose for which it was collected (unless retention is required by law).
  • Right to Grievance Redressal : Have any grievance regarding processing of your personal data addressed by us in a timely manner.
  • Right to Nominate : Nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
  • Right to Withdraw Consent : Withdraw previously given consent at any time, as described in Section 5.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 12. We may need to verify your identity before actioning your request. We aim to respond to all requests within the timelines prescribed under the DPDP Act.

11. Grievance Redressal

If you have any grievance regarding the processing of your personal data, please contact our Data Protection Officer in the first instance. We will endeavour to resolve your grievance within the timeframe prescribed under the DPDP Act.

If you are not satisfied with our response, you have the right to file a complaint with the Data Protection Board of India, constituted under the DPDP Act.

12. Data Protection Officer / Grievance Officer

For any questions, requests, or grievances relating to this Privacy Policy or the processing of your personal data, please contact:

13. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this Policy periodically.

15. Contact Us