Privacy Policy

Last updated: 29 October 2026

This policy explains how Lenor Ventures Private Limited ("Lenor Ventures", "we", "us") handles personal data collected through lenorventures.com and when you contact us. We are the Data Fiduciary for that data under the Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025.

Our products, such as ClinicIQ, Mei Reco, Murmur and Vanguard, have their own privacy notices. Where we process personal data for a client as part of a service, the client decides how that data is used, and we act as their Data Processor under our contract with them.

1. Personal Data We Collect

Data You Give Us

When you call, email or write to us: your name, phone number, email address, organisation, and anything you choose to tell us in your message.
When you use the “Ask us” assistant on the website: what you choose, such as the product, service or role you are interested in, and, only if you decide to send an enquiry, your name, phone number or email address, your message, and a record that you agreed to be contacted. Nothing is sent to us until you tick the consent box and press send.
When you apply for a job with us: the details in your application and CV.
When you are a candidate through our staffing service: your CV, contact details, employment history, skills, notice period, salary expectations and location preferences, and, if you are selected, the identity, education, employment, experience and address documents needed to verify you before an offer.
When you meet us for a demonstration or a project: contact details and notes needed to arrange and deliver the work.

Data Collected Automatically

Server logs: when you visit the website, our hosting provider records your IP address, browser type, the pages you request and the time of the request. We use these logs only to keep the website secure and working.
No tracking: the website does not use analytics, advertising or tracking cookies. See our Cookie Policy for details.

We do not ask for sensitive information such as health records, financial details or government identity numbers through this website. Please do not send them to us unless we ask for them for a specific, agreed purpose.

2. Why We Use It, and on What Basis

To answer your enquiry and talk about working together. You give us this data for that purpose, which the DPDP Act treats as a legitimate use. Where we need your consent for anything more, we ask for it separately.
To consider you for a role. Using the details you send for recruitment, at Lenor Ventures or, through our staffing service, with a client. We share your profile with a client only for a role you have agreed to be considered for.
To deliver a project or service you have agreed to. As set out in our contract with you or your organisation.
To keep the website and our systems secure. Detecting and preventing misuse, and investigating incidents.
To meet legal obligations. For example tax, accounting and lawful requests from authorities.

We do not sell personal data, and we do not use it for advertising.

Where we rely on your consent, it must be free, specific, informed, unconditional and unambiguous, and limited to the data needed for the stated purpose. You can withdraw consent at any time by writing to the Grievance Officer below. Withdrawing is as easy as giving consent. It does not affect processing already done, and we will stop processing your data, and ask our processors to stop, within a reasonable time.

We share personal data only with service providers who process it for us under contract, and only as needed:

Website hosting, database, file storage and backups: Amazon Web Services (AWS), through Amazon Internet Services Private Limited, on servers in its Mumbai (India) region. AWS runs the server; it does not use the data for its own purposes.
Domain and email: Hostinger, which manages our domain name and carries email sent to our addresses.
Email and telephone services that carry your messages to us.

We may also disclose personal data when the law requires it, or to protect the rights, safety and property of Lenor Ventures, our clients or the public.

5. Data Stored Outside India

The website, its database, uploaded files and backups are stored in India, on AWS servers in Mumbai. Some service providers, such as email services, may process data on servers outside India. Such transfers are permitted under Section 16 of the DPDP Act unless the Government of India restricts transfers to a particular country, and we will follow any such restriction.

6. How Long We Keep It

Enquiries: no longer than 6 months after our last contact, unless we start working together.
Job applications and staffing candidates: no longer than 6 months after the role is filled or your application closes, unless you join us or a client, or you ask us to keep your profile for future roles.
Backups: no longer than 14 days for database copies and uploads.
Where the law requires longer: records that the law obliges us to keep, such as accounting, tax and employment records under the Companies Act, 2013 and tax laws, and the logs of processing that the DPDP Rules, 2025 require us to keep for at least one year for security purposes. These are kept only for the period the law requires and used for nothing else.

When data is no longer needed for its purpose, or you withdraw consent, we erase it, and ask our processors to erase it, unless the law requires us to keep it.

7. How We Protect It

We take reasonable security safeguards, including encrypted connections (HTTPS) to the website, a database that cannot be reached from the internet, a firewall that opens only the ports the website needs, sign-in to the server by security key rather than password, access limited to people who need it, separate accounts for each staff member, regular backups, and records of access to our systems.

If a personal data breach affects you, we will tell you without delay, in plain language: what happened, the likely impact on you, what we are doing about it, what you can do to protect yourself, and whom to contact. We will also report the breach to the Data Protection Board of India as the law requires.

8. Your Rights

Under the DPDP Act you have the right to:

Access information: a summary of the personal data we hold about you, what we do with it, and with whom we have shared it.
Correction, completion, updating and erasure of your personal data.
Withdraw consent at any time, where we rely on consent.
Grievance redressal: a response from us to any complaint about how we handle your data.
Nominate another person to exercise your rights if you die or become unable to do so.

To exercise any right, write to the Grievance Officer below. We may need to confirm your identity. We will respond within 90 days, and sooner where we can. If you are not satisfied with our response, you may complain to the Data Protection Board of India after using our grievance process.

The DPDP Act also asks Data Principals not to impersonate others, not to give false information, and not to file frivolous complaints.

9. Children

This website is meant for adults and organisations. We do not knowingly collect personal data from anyone under 18. If we learn that we have, without verifiable consent from a parent or lawful guardian, we will delete it.

10. Languages

This policy is in English. If you would like it in another language listed in the Eighth Schedule to the Constitution of India, ask the Grievance Officer and we will provide it.

11. Contact and Grievances

For questions, requests or complaints about personal data, contact:

Grievance Officer: Manav Gupta, Director
Email: support@lenorventures.com
Telephone: +91 99010 14014 or 044 48215982
Post: Lenor Ventures Private Limited, 3rd Street, Kumaran Kudil Extension, Thoraipakkam, OMR, Chennai 600097, Tamil Nadu

12. Changes to This Policy

We will update this policy when our practices or the law change, and show the date of the latest version at the top. Where a change affects how we use data you have already given us, we will tell you before it applies.