Privacy Policy

GCCBase, a division of Innovalus Group (“GCCBase”, “we”, “our”, or “us”), is committed to protecting your privacy. This Policy explains how we collect, use, disclose, and safeguard information when you visit gccbase.com or interact with our contact forms, downloadable assets, and Calendly booking widget (together, the “Services”).

1  Information We Collect

1. Contact details – name, work-email, phone number, company and job title provided through Webflow forms or the Calendly scheduler.
2. Download details – name, email, company size and industry submitted to access our playbook or other gated resources.
3. Technical data – IP address, browser type, device information, pages visited and referring URL collected via first-party cookies and Google Analytics 4.
4. Scheduling metadata – preferred time-slot and time-zone captured by Calendly’s inline embed.

We do not knowingly collect sensitive personal data or any information from children under 16.

2  How We Use Your Information

• To respond to enquiries, schedule meetings and deliver requested downloads.
• To follow up on your interest in our GCC services and (with consent) send related updates.
• To analyse site performance and improve user experience.
• To prevent fraud, enforce our terms and comply with applicable laws.

Our legal bases under UK GDPR and India’s DPDP Act are consent (for marketing) and legitimate interest (for service fulfilment and analytics).

3  Cookies and Tracking Technologies

We use essential cookies for form security, analytics cookies (Google Analytics 4 with IP anonymisation) to understand visitor behaviour, and Calendly cookies to operate the scheduler. You can disable non-essential cookies in your browser without losing core functionality.

4  How We Share Data

• Webflow, Inc. – hosts our website and captures form submissions.
• Google LLC – provides analytics (GA4) with IP anonymisation.
• Calendly, Inc. – powers our meeting-booking widget.
• HubSpot, Inc. – will be used for CRM and email automation in future.

All transfers to US-based providers rely on Standard Contractual Clauses or equivalent safeguards. We never sell or rent your personal data.

5  Data Retention

• Enquiry and download information is stored for 24 months from your last interaction or until you ask us to delete it.
• Contract-related data is kept for seven years after an engagement ends to meet legal obligations.
• Analytics data follows Google Analytics 4’s current 26-month retention period.

6  Security Measures

We protect your data through HTTPS/TLS encryption, ISO 27001-certified cloud infrastructure, role-based access controls, regular vulnerability scans and third-party penetration tests.

7  Your Rights

Depending on your jurisdiction you may:

• Request access to, correction of, or deletion of your personal data.
• Object to or restrict certain processing activities.
• Withdraw consent at any time (for example, to marketing emails).
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email vishal@innovalus.com or call +91 99002 52849.

8  International Transfers

When personal data is transferred outside the UK, the EEA or India, we rely on Standard Contractual Clauses or other legally recognised transfer mechanisms.

9  Third-Party Links

Our Site may contain links to external websites we do not control. We are not responsible for their privacy practices or content.

10  Changes to This Policy

We may revise this Privacy Policy from time to time. Any changes will be posted on this page with a new “Last updated” date.

11  Contact Us

GCCBase — Innovalus Group
Email: vishal@innovalus.com
Phone: +91 99002 52849

If you have any questions about this Policy or our data practices, please reach out using the details above.

‍