NAVRITU DIGITAL
CROSS-BORDER DATA TRANSFER
Effective Date: August 22, 2026
This page explains where personal data processed by NavRitu Digital (“we,” “us,” or “our”) is actually stored and transferred, and the safeguards we apply when data crosses borders.
1. Where Your Data Lives
Primary data store: The core business and client data we collect — including inquiry form submissions and project records — is stored on our own servers located in India.
Website hosting: Our website itself, including live capture of form submissions before they reach our own servers, is hosted on Vercel, a global hosting platform operated by a US-based company, which may process or transiently cache data across its international infrastructure as part of standard content delivery.
Payments and analytics: Payment processing (Razorpay, Stripe) and website analytics (Google Analytics) involve additional data flows described in our Approved Sub-Processor Registry.
2. When Data Crosses Borders
Based on the above, personal data may flow from India to the United States (and, depending on Google's or Vercel's infrastructure choices at a given time, potentially other countries) in the course of hosting our website, processing international payments via Stripe, and running Google Analytics.
3. Safeguards We Apply
|
Framework |
Our Transfer Approach |
|
GDPR / UK GDPR (EU/UK data) |
Where personal data of individuals in the EU/EEA or UK is transferred to India or the US, we rely on Standard Contractual Clauses (SCCs) incorporated into our sub-processors' own data processing terms (e.g., Google's and Stripe's SCCs, Vercel's Data Processing Addendum), or an applicable adequacy mechanism |
|
DPDP Act (India) |
The DPDP Act permits transfers out of India except to countries specifically restricted by the Central Government; we are not aware of any current restriction affecting our transfers |
|
CCPA/CPRA (US) |
CCPA does not impose a specific cross-border transfer mechanism, but we require service providers to contractually restrict their use of personal information to the purposes we've authorized |
4. Sub-Processor Details
For a full list of the third parties involved in processing personal data, including their location and role, see our Approved Sub-Processor Registry.
5. Contact Us
Questions about where your data is processed: legal@navritu.digital.