Last updated: [10th Sept 2026]
This Privacy Policy explains how Lunar Leap Technologies LLP, operating as Vector CXO, collects, uses, shares, stores and protects personal data in connection with the website vectorcxo.com, its subdomains, and the services we provide.
We are a limited liability partnership incorporated in India under the Limited Liability Partnership Act 2008, bearing LLP Identification Number ACD-6585, with its registered office in Mumbai, Maharashtra, India.
Email: info@vectorcxo.com
Telephone: +91 9193909596
We process personal data in accordance with the Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025 notified on 13 November 2025, the Information Technology Act 2000 and the rules made under it, and any other applicable Indian law.
Where we provide services to clients or process data relating to individuals outside India, we will comply with applicable data protection law in the relevant jurisdiction, including the UK and EU General Data Protection Regulation where it applies, and will agree any additional terms required before that engagement begins.
It matters which of two roles we are in, because it determines who controls the data.
When you visit our website, contact us, subscribe to our writing, or engage us as a client, we determine why and how your personal data is processed. In that role we are a Data Fiduciary, also called a data controller.
When we collect responses from your employees, contractors or other personnel as part of an engagement we run for you, we do so on your instructions and for your purposes. In that role you are the Data Fiduciary and we are a Data Processor. You are responsible for having a lawful basis for that collection, for informing your people how their responses will be used and with whom they will be shared, and for obtaining any consent required.
Internet protocol address, browser and device type, and basic technical information generated automatically when a page is served. We do not run analytics, advertising or tracking tools on this website.
Name, business email address, telephone number where you provide it, company name, role, and any information you choose to include in your message.
Contact details for individuals at your organisation, engagement correspondence, billing details, tax details, and any business information you share with us during the engagement.
Name, role, department, work email address, structured attributes relevant to the engagement such as site, shift, team or product line where these have been agreed with you, and responses to the questions asked.
Name and email address.
We do not deliberately collect sensitive personal data such as health information, biometric data, financial account credentials or government identification numbers, and we ask you not to send us any. Payment details are handled by Razorpay and are never received or stored by us.
Directly from you, when you fill in a form, send us an email, speak to us, or respond during an engagement.
Automatically, through the standard operation of our website hosting.
From your organisation, where your employer nominates you as a respondent and supplies your contact details.
From public sources, such as company websites and professional networking platforms, where we research an organisation before or during an engagement.
a. To respond to your enquiry and to provide the information you requested.
b. To deliver the services you have engaged us for, including producing the deliverable.
c. To administer the engagement, including scheduling, billing and collections.
d. To maintain business records and comply with legal, tax and accounting obligations.
e. To send you our writing and occasional relevant communications, where you have asked to receive them or where we have an existing business relationship, and always with the ability to unsubscribe.
f. To secure and maintain the website and our services.
g. To improve our methodology using aggregated and non identifying information derived from completed engagements.
h. To establish, exercise or defend legal claims.
Where consent is the basis for processing, you may withdraw that consent at any time. Withdrawal does not affect processing already carried out, and may mean we can no longer provide a particular service.
This website uses only cookies that are strictly necessary for it to function and to remain secure. These cannot be switched off.
We do not use analytics cookies, advertising cookies, retargeting pixels or any third party tracking technology on this website.
If this changes, we will update this policy and, where required, present a consent banner before setting any non essential cookie.
Where we collect responses from individuals within a client organisation, those responses, and the identity of the person who gave them, may be shared with the client as part of or alongside the deliverable.
The client is responsible for informing respondents of this before they respond, and for obtaining any consent required under applicable law.
We use responses only to produce the deliverable for that engagement and for the methodological improvement described in clause 6(g), which uses aggregated and non identifying information only.
If you are a respondent and have a question about how your responses are handled, you may contact us at info@vectorcxo.com, and we will direct you to your employer where they are the Data Fiduciary.
We use artificial intelligence systems supplied by third parties to assist in classifying, structuring and analysing information collected during an engagement.
The providers we currently use for this purpose are Anthropic, OpenAI and Google. We use these services under terms which provide that data submitted through them is not used to train the providers models.
Where such systems are used, they operate within a defined methodology and their outputs are reviewed by a person before any conclusion is issued. We do not issue an opinion generated solely by automated processing.
We do not sell personal data. We do not rent or trade mailing lists.
We share personal data only with:
a. service providers who process it on our behalf, currently Webflow for website hosting, Zoho Mail for email, Razorpay for payment processing, and Anthropic, OpenAI and Google as described in clause 9;
b. professional advisors such as lawyers and accountants, under obligations of confidentiality;
c. authorities, courts or regulators where required by law or to establish or defend a legal claim;
d. a successor entity, in the event of a reorganisation, merger or transfer of our business, subject to the same protections.
If we add or change a service provider that processes personal data, we will update this list.
Some of the service providers named above store or process data on servers outside India. Where personal data is transferred outside India, we do so in accordance with the Digital Personal Data Protection Act 2023 and any restrictions notified by the Central Government, and we rely on the contractual protections offered by those providers.
Where a client requires that all engagement data remains within a specific jurisdiction, we will confirm before the engagement whether we are able to accommodate that.
Enquiries and general correspondence: up to twenty four months from last contact.
Engagement material, including responses, working files and deliverables: up to twenty four months from the date the deliverable is issued, so that we are able to support a later review engagement without asking you to supply everything again. Deleted at the end of that period unless you ask us in writing to retain it for longer.
Billing, tax and statutory records: for the period required under Indian law, which for income tax records is currently up to eight years, regardless of the period above.
Subscriber details: until you unsubscribe, plus a minimal suppression record so that we do not contact you again in error.
Where data is no longer needed, we delete it or irreversibly anonymise it.
We apply reasonable security safeguards appropriate to the nature of the data, including access limited to those who need it, encryption in transit, multi factor authentication on business systems, and periodic review of who holds access to what.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we will act promptly if something goes wrong.
In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals within the timelines required under the Digital Personal Data Protection Rules 2025, and will tell affected individuals what happened, what data was involved, and what they can do.
Where we are acting as a Data Processor for a client, we will notify that client without undue delay so that they can meet their own obligations.
Subject to applicable law, you have the right to:
a. obtain confirmation of whether we hold personal data about you and a summary of it;
b. ask us to correct data that is inaccurate, incomplete or out of date;
c. ask us to erase personal data where it is no longer needed for the purpose it was collected for;
d. withdraw consent where consent is the basis of processing;
e. nominate another person to exercise these rights on your behalf in the event of death or incapacity;
f. raise a grievance with us and, if unsatisfied, with the Data Protection Board of India.
To exercise any of these rights, email info@vectorcxo.com. We will respond within the timelines required by law and will normally do so within thirty days. We may need to verify your identity first.
Where we hold your data as a Data Processor on behalf of your employer, we will direct your request to them and support them in responding.
We send occasional emails containing our writing and, from time to time, information about our services.
Every such email includes an unsubscribe link. You can also email info@vectorcxo.com to be removed. We will action the request promptly and retain only a minimal record so that we do not contact you again in error.
Our website and services are directed at businesses and are not intended for anyone under the age of eighteen. We do not knowingly collect personal data from children. If you believe we have done so, please contact us and we will delete it.
This website may link to other websites. We are not responsible for their content or their privacy practices, and this Privacy Policy does not apply to them. Please read their policies before providing them with personal data.
We may update this Privacy Policy from time to time. The current version is always available on this website and takes effect when published. Where a change is material, we will take reasonable steps to notify you, for example by email or a notice on the website.
For any question, request or complaint about privacy or personal data, contact:
Grievance Officer: Saurin Gandhi
Lunar Leap Technologies LLP, operating as Vector CXO
Email: info@vectorcxo.com
Telephone: +91 9193909596
Mumbai, Maharashtra, India
We will acknowledge your communication within twenty four hours and aim to resolve it within fifteen days.
If you are not satisfied with our response, you may escalate to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act 2023.