Privacy Policy

Who we are & scope

Gyro Web Services LLP is a Limited Liability Partnership registered in India (2016), with its registered office in Greater Noida, Uttar Pradesh. For personal data processed through this website, GWS acts as the data controller. When we process data on behalf of clients while delivering services, we act as a data processor under the terms of the relevant service agreement.

This policy applies to the website at gyro.xyz and related pages. It does not apply to third-party websites we link to.

Information we collect

We collect only what we need:

• Information you give us - when you submit the contact form: your name, email address, and optionally your company, selected service, indicative budget and the message you write.
• Information collected automatically - standard server logs (IP address, browser type, pages viewed, timestamps) and limited, privacy-respecting analytics to understand and improve the site.
• Cookies and local storage - a small number of essential items (for example, your theme preference and cookie choice). See our Cookie Policy.
• Client data during service delivery - where you engage us, we may process data on your behalf strictly per our agreement.

How we use your data

We use personal data to: respond to and manage your enquiry; provide, maintain and improve our services; operate, secure and improve the website; comply with legal obligations; and, only where you have consented, send you relevant updates. We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects.

Legal bases (GDPR)

Where the EU/UK GDPR applies, we rely on: consent (e.g. when you submit the form or accept non-essential cookies); performance of a contract (to deliver services you request); legitimate interests (to run and secure our website and business, balanced against your rights); and legal obligation (to meet applicable law). You may withdraw consent at any time.

Cookies & analytics

We use only essential cookies/local storage to make the site work, plus optional, anonymised analytics to understand usage. Non-essential cookies are set only with your consent via the banner. Full detail is in our Cookie Policy.

Sharing & disclosure

We share personal data only with: trusted service providers who help us operate (for example, hosting and email delivery) under confidentiality obligations; authorities where required by law; and successors in the event of a business transfer. We never sell or rent your personal data.

International transfers

We are based in India and serve clients across five continents, so your data may be processed in India and in other countries where our providers operate. Where data is transferred out of your region, we take steps to ensure an appropriate level of protection, such as contractual safeguards. We disclose that cross-border processing may occur, as required under India's DPDP Act and the GDPR.

Data retention

We keep personal data only as long as necessary for the purpose it was collected, to meet legal or contractual obligations, and to resolve disputes. Enquiry data is retained for a reasonable period to manage the conversation and any resulting engagement, then deleted or anonymised.

How we protect data

We apply technical and organisational safeguards appropriate to the risk, including encrypted connections (HTTPS), access controls, and the security and cyber-resilience practices we offer to clients. No method of transmission or storage is completely secure, but we work to protect your data and to respond quickly if an incident occurs.

Your rights

Depending on where you live, you may have the right to access, correct, update, or delete your personal data; to withdraw consent; to object to or restrict processing; to data portability; and to lodge a complaint with a supervisory authority.

• India (DPDP Act 2023): you may exercise access, correction, and erasure rights, nominate a representative, and raise a grievance with us; if unresolved, you may complain to the Data Protection Board of India.
• EU/UK (GDPR): the rights listed above, including complaint to your local Data Protection Authority.
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of “sale” or “sharing” - note we do not sell or share personal data as those terms are defined.

To exercise any right, contact us via the contact form or at we@gyro.xyz. We respond within the timeframes required by applicable law.

Children's privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Grievance redressal

If you have a concern about how we handle your data, please contact us first so we can resolve it. We treat grievances seriously and aim to acknowledge and address them promptly, in line with the DPDP Act's grievance-redressal requirements.

Changes to this policy

We may update this policy to reflect changes in law or our practices. The “last updated” date above shows the latest revision. Material changes will be highlighted on this page.