Privacy policy.

Who we are

This site is run by Nevaeh First Source Solutions Private Limited (NFSS), a company incorporated in India with Corporate Identity Number U37200UR2017PTC010550. NFSS decides what is collected about you on this site and what it is used for, and is the data fiduciary for it under the Digital Personal Data Protection Act, 2023.

This policy covers personal data we handle when you use nevaehfirstsource.com, send us an enquiry, or call or email us from it. It is published under the Information Technology Act, 2000 and the rules made under it, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

What we collect

When you send an enquiry: your name and email address, and if you give them, your company, phone number, the kind of work you need, where you would like it made, rough volumes, and your message.

With an enquiry, the site also sends where your visit started: the first page you opened, the website that linked you to us if there was one, and any campaign tags on that first link (such as utm_source, or an ad click id). This is held in your browser only for the length of the visit, and reaches us only if you send the form.

When you call or email us: your number or address and what you tell us.

When you send the form, your IP address is used to stop one address sending too many requests. It is held only in the server’s memory and forgotten within minutes.

Before the form is sent, Cloudflare Turnstile checks that a person in a browser is sending it, not an automated script, so the form cannot be used to send confirmation emails to people who did not ask for them. To do this Cloudflare looks at signals from your browser and device and at your IP address. Usually you see nothing; occasionally it asks you to tick a box.

When you browse: how the site is used, as How we measure the site describes.

Our forms do not ask for, and we do not want, sensitive personal data of any kind.

What we use it for

To answer your enquiry, to discuss, quote for and arrange the work you asked about, and to keep a record of that conversation.

To confirm by email that your enquiry reached us, with its reference number. That email repeats nothing you wrote.

To understand which pages and searches bring people who become clients, so we can improve the site. Where your visit started is used for this.

To keep the records the law requires, to prevent misuse of the site, and to deal with a dispute.

We do not send marketing emails. If we ever want to, we will ask first.

Why we may use it

We use what you send us for the purpose you sent it for, which the Digital Personal Data Protection Act, 2023 allows when you give your data voluntarily for a specified purpose. We keep records where the law requires us to.

Recordings, heatmaps and Google Analytics rest on your consent alone, given with Allow. You can withdraw it as easily as you gave it.

How we measure the site

For everyone, visits are counted by Umami, an open-source analytics tool run on servers operated for us, reached through this site’s own address. It records the pages opened, the links and buttons used (such as a call or a map link), how quickly pages load, the site or campaign that brought the visit, and the country, device and browser, worked out from the request. It sets no cookie, does not store your IP address, and does not identify you.

If you choose Allow, two more things run:

• Recordings and heatmaps, by Umami, on the same servers. A visit may be recorded so we can replay how the pages were used, with where people click and how far they scroll. Everything typed into a form is hidden in recordings, and the enquiry form is left out of them entirely. Recordings are deleted after 30 days.
• Google Analytics, which measures the pages viewed and roughly where visitors are and what devices they use, and sets cookies that recognise your browser between visits. Google handles this under its own privacy policy. Advertising features and Google signals are switched off.

Your choice is kept in your browser’s storage for 180 days, after which the site asks again. Use Privacy choices at the foot of any page to change it. Choosing Essential only after Allow stops recordings and Google Analytics from that moment; to have what was already collected deleted, write to us as below.

Who else handles it

Enquiries are recorded on servers operated for us, the same ones that run Umami, and reach us by email, sent through Resend, an email delivery service, which also sends you the confirmation. They are kept in that record and in our business email.

The site is hosted by Vercel, whose servers keep short-lived technical logs of requests, including IP addresses, to run and protect the service.

Cloudflare runs the Turnstile check on the enquiry form, as described in What we collect, and only to keep automated abuse off the form.

With Allow, Google receives the measurement described above.

Links to Google Maps and to the websites of brands we work for open those services, which handle your visit under their own policies.

Each of these handles your details only to do that job for us, under its terms of service, and some of them may handle them outside India.

We disclose details to a government authority, a court or the police only when the law requires it.

We do not sell your details, and we do not share them with anyone for their own marketing.

Cookies and your browser

The site itself sets no cookies. It keeps two small items in your browser’s storage: your privacy choice, and, for the length of the visit only, where the visit started (see What we collect).

Only with Allow does Google Analytics load and set its own cookies.

Clearing your browser’s site data removes all of this, and the site will ask for your choice again.

How long we keep it

Enquiries and the emails around them are kept while we are discussing work with you, and for up to two years after our last contact, so a conversation can be picked up again. If they lead to work, they are kept with that client’s records for as long as tax and company law requires. Then they are deleted.

The record made when an enquiry arrives is deleted automatically two years after it was sent.

Umami’s counts identify no one and are kept while they help us run the site. Recordings are deleted after 30 days.

What Google Analytics collects is held by Google for the retention period set in our account.

Keeping it safe

We take reasonable security measures to protect your details from loss, misuse and unauthorised access: the site is served only over an encrypted connection, enquiries are sent and stored only over encrypted or private connections, and access to them is limited to the people who need it.

If a breach of security affects your details, we tell you, and the authorities the law requires us to tell, without undue delay.

Children

This is a site for businesses. We do not knowingly collect details of anyone under eighteen. If you believe a child has sent us their details, write to us and we will delete them.

Your rights over your details

Under the Digital Personal Data Protection Act, 2023, you have the right to:

• ask what details we hold about you, what we do with them, and who we have shared them with;
• ask us to correct, complete or update them;
• ask us to delete them, unless the law requires us to keep them;
• withdraw your consent to anything that rests on it;
• nominate someone to exercise these rights for you if you die or become unable to;
• complain to us, and then to the Data Protection Board of India.

Write from the email address you used with us, so we know the request is yours. We may ask for something more to confirm who you are before we share or delete anything.

Questions and complaints

Email help@nevaehfirstsource.com with the word Grievance in the subject, call +91 96344 44708, or write to Nevaeh First Source Solutions Private Limited, Plot No. 100, Sector 5, Integrated Industrial Estate, SIDCUL, Haridwar, Uttarakhand 249403, India.

We acknowledge a complaint within two working days and answer it within thirty days. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

Changes to this policy

When we change what we collect or who handles it, we update this page and its date before the change takes effect. When the change needs your consent, the site asks you again.