01Who we are and scope
Gyro Web Services LLP is a Limited Liability Partnership registered in India (2016), with its registered office in Greater Noida, Uttar Pradesh. For personal data processed through this website, GWS acts as the data controller. When we process data on behalf of clients while delivering services, we act as a data processor under the terms of the relevant service agreement.
This policy applies to the website at gyro.xyz and related pages. It does not apply to third-party websites we link to.
02Information we collect
We collect only what we need:
- Information you give us: when you submit the contact form, your name, email address, and optionally your company, selected service, indicative budget and the message you write.
- Information collected automatically: standard server logs (IP address, browser type, pages viewed, timestamps) and, only if you accept analytics cookies, usage data collected by Google Analytics and Microsoft Clarity (pages visited, device and browser type, clicks, scrolling and session replays with form inputs masked) to understand and improve the site.
- Cookies and local storage: a small number of essential items, such as your cookie choice. See our Cookie Policy.
- Client data during service delivery: where you engage us, we may process data on your behalf strictly per our agreement.
03How we use your data
We use personal data to respond to and manage your enquiry; provide, maintain and improve our services; operate, secure and improve the website; comply with legal obligations; and, only where you have consented, send you relevant updates. We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.
04Legal bases (GDPR)
Where the EU/UK GDPR applies, we rely on:
- consent, for example when you submit the form or accept non-essential cookies;
- performance of a contract, to deliver services you request;
- legitimate interests, to run and secure our website and business, balanced against your rights; and
- legal obligation, to meet applicable law.
You may withdraw consent at any time.
07International transfers
We are based in India and serve clients across five continents, so your data may be processed in India and in other countries where our providers operate. Where data is transferred out of your region, we take steps to ensure an appropriate level of protection, such as contractual safeguards. We disclose that cross-border processing may occur, as required under India's DPDP Act and the GDPR.
08Data retention
We keep personal data only as long as necessary for the purpose it was collected, to meet legal or contractual obligations, and to resolve disputes. Enquiry data is retained for a reasonable period to manage the conversation and any resulting engagement, then deleted or anonymised.
09How we protect data
We apply technical and organisational safeguards appropriate to the risk, including encrypted connections (HTTPS), access controls, and the security and cyber-resilience practices we offer to clients. No method of transmission or storage is completely secure, but we work to protect your data and to respond quickly if an incident occurs.
10Your rights
Depending on where you live, you may have the right to access, correct, update or delete your personal data; to withdraw consent; to object to or restrict processing; to data portability; and to lodge a complaint with a supervisory authority.
- India (DPDP Act 2023): you may exercise access, correction and erasure rights, nominate a representative, and raise a grievance with us; if unresolved, you may complain to the Data Protection Board of India.
- EU/UK (GDPR): the rights listed above, including complaint to your local Data Protection Authority.
- California (CCPA/CPRA): the right to know, delete, correct, and opt out of “sale” or “sharing”. Note that we do not sell or share personal data as those terms are defined.
To exercise any right, contact us via the contact form. We respond within the timeframes required by applicable law.
11Children's privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12Grievance redressal
If you have a concern about how we handle your data, please contact us first so we can resolve it. We treat grievances seriously and aim to acknowledge and address them promptly, in line with the DPDP Act's grievance-redressal requirements.
13Changes to this policy
We may update this policy to reflect changes in law or our practices. The “last updated” date above shows the latest revision. Material changes will be highlighted on this page.