Privacy Policy.

Who we are

Nirvau Ltd, company number 12607528, is registered in England and Wales and has its registered office at 30 Ford End Road, Bedford, England, MK40 4JW. Nirvau Ltd operates Rupal and is the data controller for the personal information described in this policy.

For questions about this policy or your personal information, contact jazz@rupal.ai.

Information we collect

When you submit the website form, we collect your name, email address, chosen report route, optional company or project, the question you share, and your consent record. If you later receive a report or related service, we will explain any additional information required before collecting it.

The required form fields are needed so we can understand and respond to your enquiry. You may leave the company or project field blank.

How we use it

We use enquiry information to respond to you, understand which report or service is relevant, arrange that service, and maintain a record of our conversation. We do not use the website enquiry form for unrelated marketing or solely automated decisions that have legal or similarly significant effects.

Our basis for using it

For an enquiry about a report or service, we process your information because it is necessary to take steps you request before potentially entering into a contract with you.

We also rely on our legitimate interests in answering enquiries, keeping an accurate record of conversations, securing the website and improving the service from relevant feedback. We use only the information reasonably needed for those purposes and balance those interests against your rights.

Who can access it

Access is restricted to Rupal and the providers needed to host the website, protect the form from abuse, store enquiry records and send operational notifications. These currently include website-hosting, security, workspace-database and transactional-email providers. An email notification contains your name, email address, chosen route, optional company or project and a private link to the stored record; it does not contain the question you submit.

We do not sell your personal information or share it for advertising.

International transfers

Some providers may process personal information in the United States or other countries outside the UK. Where this happens, we rely on UK adequacy regulations for covered recipients or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

You may contact us for more information about the safeguard used for a particular provider and, where available, a copy of it.

Security and abuse prevention

We use technical security services to distinguish genuine enquiries from automated abuse and to limit repeated submissions. Those services may process limited device, browser, network and security signals for that purpose. We do not use those signals for advertising or solely automated decisions with legal or similarly significant effects.

Cookies and similar technologies

We do not currently use advertising or audience-analytics cookies. The enquiry form uses essential security technology that may use short-lived cookies or similar browser storage to verify genuine visitors and prevent abuse. This technology is used only where needed to provide and secure the form.

How long we keep it

We delete or anonymise enquiry records 12 months after the last meaningful contact unless we are legally required to keep them longer.

Meaningful contact means the latest substantive exchange about an enquiry, report or service. An automated acknowledgement does not restart the retention period.

Age eligibility

The current Rupal service, including Career Direction reports intended for students or graduates, is available only to adults aged 18 or over. We do not knowingly collect enquiry or assessment information from anyone under 18.

Your choices and rights

You may ask for access to your personal information, correction, deletion or restriction, depending on the circumstances. You may also object to processing based on our legitimate interests. Where processing is based on contract and carried out by automated means, you may have a right to data portability.

If you are unhappy with how your information is handled, contact us first so we can try to resolve it. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this policy as the website and service develop. The current version and its update date will remain available on this page.