Data Protection

This Data Protection statement explains how Leads24, operated by Rivavya Create & Trade LLP, handles personal data in the course of its lead generation and customer acquisition services — both for visitors to this website and for the lead data we process on behalf of our clients. It complements our Privacy Policy.

1. Our approach

We are committed to handling personal data lawfully, fairly, and transparently, in alignment with India's Digital Personal Data Protection Act, 2023 and applicable rules. Data protection is built into how we design and run campaigns — not added afterwards.

2. Roles: who controls the data

• For data collected through this website (your enquiries), Rivavya Create & Trade LLP acts as the entity responsible for that data.
• For lead data generated for a client, the client is generally the entity that determines how the data is ultimately used, and we process that data on their behalf under the terms of the engagement.

3. How leads are sourced & consent

Leads delivered through our campaigns come from prospects who have actively submitted an enquiry through advertisements, landing pages, or forms, with consent captured at the point of submission. We do not source leads from harvested, scraped, or purchased third-party databases.

4. Verification & minimisation

• We collect only the data needed to verify and qualify a lead — typically identity, contact details, interest, location, and budget indication.
• Verification calls confirm genuine interest before a lead is delivered, reducing the volume of unnecessary data shared.
• We avoid collecting sensitive personal data unless it is strictly necessary and lawfully obtained.

5. Security measures

We apply reasonable technical and organisational safeguards to protect personal data, including:

• Access controls limiting lead and client data to authorised team members.
• Use of reputable, secured platforms for storage, delivery, and communication.
• Internal data-handling protocols and confidentiality expectations for our team.
• Periodic review of our practices and access permissions.

6. De-duplication & exclusivity

Each lead delivered to a client is cross-referenced against prior records to prevent duplicates, and verified leads are delivered exclusively to a single client. We do not resell the same lead to multiple buyers.

7. Sharing & sub-processors

Personal data may be processed by trusted service providers (for example, hosting, analytics, advertising, and messaging platforms) strictly to deliver our services. We require such providers to handle data securely and only for the agreed purpose. We do not sell personal data.

8. Retention & deletion

We retain personal data only for as long as needed to deliver and account for our services, and to meet legal obligations. Client lead datasets are retained per the engagement terms; thereafter data is securely deleted or anonymised. You may request deletion of your own data, subject to lawful retention requirements.

9. Data principal rights

Individuals whose data we hold may, subject to applicable law, request access to their data, correction of inaccuracies, deletion, and withdrawal of consent, and may raise a grievance. Requests relating to leads generated for a client may be coordinated with that client where they control the data.

10. Data breach

In the event of a personal data breach that is likely to cause harm, we will act promptly to contain and assess it and will notify affected parties and the relevant authority where required by applicable law.

11. Grievance officer

Concerns about data protection can be raised using the contact details below. We aim to acknowledge and address grievances within a reasonable timeframe in line with applicable law.