Privacy Policy
Effective Date: August 19, 2026 | Last Updated: August 19, 2026
Our Privacy Principles
- We only ask for personal information we genuinely need. We have no interest in collecting data for its own sake.
- We do not sell your personal data. We never have and never will.
- We do not share your personal data with third parties except where necessary to operate this Website, comply with the law, or protect our rights — and only with parties who have agreed to treat it responsibly.
- We do not store personal data on our servers beyond what is required for the ongoing operation of this Website and our services.
- You have the right to access, correct, and delete the data we hold about you. We will honour those requests promptly.
Table of Contents
- Introduction
- Who We Are (Data Controller)
- Key Definitions
- What Personal Data We Collect
- How We Collect Your Data
- How We Use Your Data
- Change of Purpose
- How We Share Your Data
- Third-Party Services and Data Processors
- Data Retention
- Cookies
- Your Rights
- Data Security
- International Data Transfers
- Children
- Third-Party Websites
- Changes to This Policy
- Grievance Officer
- Contact Us
1. Introduction
This Privacy Policy describes how Bitvarium (a trading name of Growthery Media (OPC) Private Limited, incorporated in India) collects, uses, stores, discloses, and otherwise processes personal data when you visit bitvarium.com (“the Website”), subscribe to our mailing list, leave a comment on a blog post, use site search, enquire about our services, or otherwise interact with us.
Please read this policy carefully. If you do not agree with any part of it, please do not use the Website or provide us with your personal data. By using the Website, you acknowledge that you have read and understood this policy. Your use of the Website is also subject to our Terms of Service.
2. Who We Are (Data Controller)
Bitvarium / Growthery Media (OPC) Private Limited is the data controller responsible for your personal data under this policy.
Legal entity: Growthery Media (OPC) Private Limited
Trading as: Bitvarium
Website: https://bitvarium.com
Primary jurisdiction: India (Digital Personal Data Protection Act, 2023)
Privacy contact: https://bitvarium.com/contact/
3. Key Definitions
“Personal data” means any information that identifies or could reasonably identify a living individual — for example, a name, email address, IP address, or search query.
“Processing” means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
“Data controller” means the party that determines the purposes and means of processing personal data. That is Bitvarium / Growthery Media (OPC) Private Limited.
“Data processor” means a third party that processes personal data on behalf of a data controller, under that controller’s instructions.
“Consent” means a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
“Session recording” means a technology that captures a replay of how a visitor interacts with a webpage — including mouse movement, clicks, scrolling behaviour, and text entered into visible input fields — for the purpose of UX analysis and site improvement.
“Aggregated data” means data combined and summarised in a way that no individual can be identified from it. We may produce and use aggregated data derived from personal data, but aggregated data is not itself personal data.
“DPDP Act” refers to India’s Digital Personal Data Protection Act, 2023.
“GDPR” refers to the EU General Data Protection Regulation 2016/679 and, where relevant, the UK GDPR as retained in UK law.
4. What Personal Data We Collect
4.1 Data Categories
Depending on how you interact with the Website, we may collect and process the following categories of personal data:
- Identity Data — your name, as provided in a contact form or blog comment.
- Contact Data — your email address and any other contact details you voluntarily provide.
- Technical Data — your IP address, browser type and version, operating system, device type, screen resolution, time zone, and pages visited on this Website.
- Usage Data — how you navigate the Website: pages visited, time on page, scroll depth, links clicked, referral source, and session duration.
- Session Recording Data — a visual replay of your interaction with specific pages, captured via Microsoft Clarity, including mouse movement, click patterns, and scroll behaviour. Text entered into certain input fields may also be captured unless masked. Session recording is subject to your cookie consent.
- Search Query Data — the search terms you enter into the Website’s search function. These are transmitted in real time to Algolia’s servers to return results.
- Comment Data — if you leave a comment on a blog post: your display name, email address, optional website URL, your comment content, and the IP address from which the comment was submitted. Approved comments and your display name are publicly visible on the Website.
- Marketing and Communications Data — your email address collected via newsletter subscription, managed through Kit (formerly ConvertKit), and your preferences regarding communications from us.
4.2 Data You Provide Directly
- Contact form: your name, email address, and the message you send us.
- Newsletter subscription (Bitvarium Vault): your email address, collected via an opt-in form built with Thrive Architect and connected to Kit.
- Blog comments: your display name, email address, optional website URL, and comment content.
You are never required to provide personal data to browse the Website. All form submissions are entirely voluntary.
4.3 Data Collected Automatically
Like most websites, we automatically collect certain Technical and Usage Data when you visit, through cookies, server logs, analytics scripts, and — where you have consented — session recording tools. This includes page views, navigation paths, device and browser information, IP address, and a visual session replay of your activity on certain pages via Microsoft Clarity. See Section 11 (Cookies) for the full breakdown.
When you use the site search function, your search query is transmitted to Algolia in real time to generate results. This occurs each time you perform a search, regardless of cookie consent, as it is necessary for the search function to work.
4.4 Data Received from Third Parties
Analytics and session recording providers (Google Analytics, Microsoft Clarity) supply us with aggregated or pseudonymised Technical and Usage Data about visitor activity. We do not purchase or acquire personal data from data brokers or marketing list providers.
4.5 Sensitive Data
We do not collect, and have no reason to collect, any sensitive personal data — including data relating to racial or ethnic origin, religious or philosophical beliefs, political opinions, health or medical conditions, genetic or biometric data, or sexual orientation. If you include any such information in a contact form message or blog comment, we will treat it with additional care and will not store it beyond what is necessary to respond to you.
4.6 Data We Do Not Collect
- Payment data: Bitvarium does not process payments on this Website. No card numbers, bank details, or financial account information are collected here.
- Children’s data: This Website is not directed at children under 16 years of age. See Section 15 for more.
5. How We Collect Your Data
- Direct interactions: When you fill in a contact form, subscribe to the newsletter, or submit a blog comment.
- Automated technologies: As you browse, we collect Technical and Usage Data via cookies, server logs, and analytics scripts (Google Analytics and Microsoft Clarity, both via Google Tag Manager). Session recordings are captured by Microsoft Clarity on consented sessions.
- Video embeds: Pages containing YouTube videos embedded via Presto Player load YouTube’s player scripts, which may set cookies and collect Technical Data about your device and viewing behaviour, even before you press play.
- Site search: Each search query you enter is transmitted to Algolia’s servers in real time to generate search results.
- Third-party sources: Analytics and hosting providers may supply aggregated Technical Data about visitor activity, as described above.
6. How We Use Your Data
We only use your personal data where we have a lawful basis to do so.
| Purpose | Data Used | Legal Basis (DPDP / GDPR) |
|---|---|---|
| Respond to contact form enquiries and manage our relationship with you | Identity, Contact | Consent / Legitimate interest |
| Send the Bitvarium Vault newsletter and resource updates via Kit | Contact (email address) | Consent (explicit opt-in; withdraw at any time) |
| Moderate and publish blog comments | Identity, Contact, Comment content, IP address | Consent (submitting a comment) / Legitimate interest (spam prevention) |
| Deliver site search results via Algolia | Search Query Data, Technical Data | Legitimate interest (providing core site functionality) |
| Analyse website traffic and improve the Website via Google Analytics | Technical, Usage | Consent (via Silktide cookie acceptance) |
| Analyse user behaviour, heatmaps, and session recordings via Microsoft Clarity | Technical, Usage, Session Recording Data | Consent (via Silktide cookie acceptance) |
| Serve embedded YouTube videos via Presto Player | Technical Data (IP, device, browser) | Consent (via Silktide cookie acceptance) |
| Detect and prevent security threats and spam | Technical (IP, server logs), Comment Data | Legitimate interest |
| Comply with legal obligations | Any data relevant to the request | Legal obligation |
| Retain a record of communication in the event of a dispute | Identity, Contact, message content | Legitimate interest |
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
Marketing Communications
You will receive marketing or newsletter communications from us only if you have explicitly subscribed via an opt-in form on the Website. Every email includes a one-click unsubscribe link. You can also opt out by contacting us via the contact page. Opting out does not affect transactional or service-related messages.
A Note on Session Recordings
Microsoft Clarity can capture text entered into input fields during a session. We have configured field masking to prevent sensitive inputs from being recorded. However, you should be aware that if you type personal information into a page element that is not a designated form field, it may be captured. Session recordings are only activated after you have accepted analytics cookies via the Silktide consent banner.
7. Change of Purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
8. How We Share Your Data
We do not sell, rent, or trade your personal data. We may share it only in the following circumstances:
8.1 Service Providers and Data Processors
We engage trusted third-party companies to help us operate the Website and deliver our services. These parties act as data processors — they handle your personal data only on our instructions and are contractually prohibited from using it for any other purpose. See Section 9 for the full list.
8.2 Legal Requirements
We may disclose personal data if required by law, court order, or a request from a government or regulatory authority, or where we believe disclosure is necessary to protect the safety of any person, prevent fraud, or defend our legal rights.
8.3 Business Transfers
If Bitvarium / Growthery Media (OPC) Private Limited is involved in a merger, acquisition, asset sale, or restructuring, your personal data may be among the assets reviewed or transferred. We will take reasonable steps to ensure appropriate data protection obligations apply, and will notify you before your data becomes subject to a different privacy policy.
8.4 Publicly Visible Comment Data
When your blog comment is approved and published, your display name and comment content become publicly visible on the Website and may be indexed by search engines. Your email address and IP address are never made public. Please do not include personal information in a comment that you would not want to be publicly visible.
8.5 Aggregated or Anonymised Data
We may share aggregated or fully anonymised data — from which no individual can be identified — with third parties for analytical or business development purposes. This is not personal data.
9. Third-Party Services and Data Processors
The following third-party services are active on or supporting this Website and may process personal data about you:
9.1 Google Tag Manager & Google Analytics
We use Google Tag Manager (container ID: GTM-WK5PCMPZ) to manage and deploy tracking scripts, including Google Analytics. Google Analytics collects anonymised and pseudonymised usage data — page views, session duration, navigation paths, and device/browser information — to help us understand and improve the Website. Analytics tags are deployed only after you grant consent via Silktide.
- Processor: Google Ireland Limited / Google LLC (USA)
- Transfer destination: United States, under Standard Contractual Clauses
- Opt out: Google Analytics Opt-out Browser Add-on
- Google Privacy Policy: https://policies.google.com/privacy
9.2 Microsoft Clarity
We use Microsoft Clarity for behavioural analytics, including heatmaps and session recordings. Clarity captures how visitors interact with pages — including mouse movement, click patterns, scroll behaviour, and text entered into visible fields — and replays these as recordings we can review to improve the Website’s usability and design. Clarity is deployed via Google Tag Manager and only activates after you accept analytics cookies.
We have configured input field masking in Clarity to prevent sensitive form fields from being recorded. Session recordings are stored on Microsoft’s infrastructure and are accessible only to Bitvarium.
- Processor: Microsoft Corporation (USA)
- Transfer destination: United States, under Microsoft’s Standard Contractual Clauses
- Opt out: Decline analytics cookies via the Silktide banner, or visit https://choice.microsoft.com
- Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement
- Microsoft Clarity Privacy: https://clarity.microsoft.com/terms
9.3 Silktide (Cookie Consent Management)
Silktide is our Cookie Consent Management Platform. It serves the cookie consent banner, records your consent preferences, and signals those preferences to Google Tag Manager so that non-essential scripts — including Google Analytics, Microsoft Clarity, and YouTube embeds — only load once you have opted in.
- Processor: Silktide Ltd (United Kingdom)
- Silktide Privacy Policy: https://silktide.com/privacy-policy/
9.4 Kit (formerly ConvertKit) — Email Marketing
We use Kit to manage our newsletter subscriber list, send the Bitvarium Vault resource emails, and track email engagement (opens and clicks). When you subscribe via an opt-in form on the Website — built with Thrive Architect — your email address is transmitted to Kit’s servers, where it is stored and used to deliver subscriber communications.
Kit records your IP address at the time of signup, tracks whether you open emails and which links you click (via tracked redirect links), and may set cookies if you visit a Kit-hosted page. You can unsubscribe from any email we send at any time using the unsubscribe link included in every message.
- Processor: ConvertKit LLC (USA)
- Transfer destination: United States, under Kit’s Standard Contractual Clauses
- Kit Privacy Policy: https://kit.com/privacy
9.5 Thrive Architect / Thrive Themes
Thrive Architect is the page builder used to create landing pages, opt-in forms, and content layouts on this Website. Thrive Architect forms connect directly to Kit to transmit subscriber data. Thrive Themes also maintains a licensing server that Thrive products communicate with periodically to verify plugin licences — this involves your server’s IP address being transmitted to Thrive Themes’ infrastructure.
- Processor: Thrive Themes (USA)
- Transfer destination: United States
- Thrive Themes Privacy Policy: https://thrivethemes.com/privacy-policy/
9.6 YouTube (via Presto Player)
Some pages on this Website contain videos embedded from YouTube, displayed via the Presto Player plugin. When you visit a page containing a YouTube embed, YouTube’s player scripts load and may set cookies and collect Technical Data about your device, browser, and viewing behaviour — even before you press play. This is subject to Google’s and YouTube’s own data collection practices.
YouTube video embeds are treated as analytics-category content and are only loaded after you accept the relevant cookie category via the Silktide banner. Where consent is withheld, a static placeholder is displayed in place of the video.
- Processor: Google Ireland Limited / Google LLC (USA), operating YouTube
- Transfer destination: United States, under Google’s Standard Contractual Clauses
- YouTube Privacy Policy: https://policies.google.com/privacy
9.7 Algolia (Site Search)
The Website’s search function is powered by Algolia via the WP Search with Algolia plugin. When you enter a search query, that query is transmitted to Algolia’s servers in real time to retrieve and rank results. Algolia may also log your IP address and Technical Data as part of this process. This data transmission is necessary for site search to function and occurs independently of cookie consent.
- Processor: Algolia SAS (France / USA)
- Transfer destination: European Union and United States, under Algolia’s Standard Contractual Clauses
- Algolia Privacy Policy: https://www.algolia.com/policies/privacy/
9.8 Internet Archive (Wayback Machine)
The Website uses the Internet Archive Wayback Machine Link Fixer plugin, which includes an Auto Archiving feature. This feature periodically submits pages published on this Website — and outbound links found within content — to the Internet Archive (archive.org) for public archiving. This means certain Website pages may be publicly accessible via archive.org. The plugin communicates with Internet Archive’s servers to check and submit links; these requests include the URL being archived and the server’s IP address.
The Internet Archive is a US-based non-profit public archive. Once content is submitted, it is publicly accessible on archive.org and subject to the Internet Archive’s own policies. If you leave a comment that is subsequently published on a page that is archived, your comment content and display name may appear in archived versions of that page.
- Processor: Internet Archive (USA, non-profit)
- Internet Archive Privacy Policy: https://archive.org/about/terms.php
9.9 Secure Backup Storage
We use WPvivid to create regular automated backups of the entire Website, including its database. The database contains personal data stored by the Website — including contact form submissions, subscriber records, and comment data. Backups are encrypted and transmitted to a secure cloud storage service operated by Google LLC. Google processes these backups as a data processor under our instructions and does not use backup data for any other purpose.
- Backup tool: WPvivid Backup Plugin
- Cloud storage processor: Google LLC (USA)
- Transfer destination: United States, under Google’s Standard Contractual Clauses
9.10 DigitalOcean Spaces (CDN)
All Website media assets are served from DigitalOcean Spaces, hosted in the SGP1 region (Singapore). When your browser loads a page, it makes a direct request to this CDN for media, which may log your IP address.
- Processor: DigitalOcean LLC (USA), SGP1 node in Singapore
- DigitalOcean Privacy Policy: https://www.digitalocean.com/legal/privacy-policy
9.11 Hostinger (Web Hosting)
The Website is hosted on Hostinger’s infrastructure. All web traffic passes through Hostinger’s servers, generating standard access logs including IP addresses, request timestamps, and response codes, used for security monitoring and uptime management.
- Processor: Hostinger International Ltd
- Hostinger Privacy Policy: https://www.hostinger.com/privacy-policy
9.12 NovaShare (Social Sharing Buttons)
NovaShare renders social sharing buttons locally — no third-party scripts load on page load. A request to the respective social platform is only made if you actively click a share button, at which point that platform’s own privacy policy applies.
9.13 Social Media and WhatsApp
The Website includes links to Bitvarium’s official profiles on Facebook, X/Twitter, LinkedIn, YouTube, and WhatsApp (via wa.me links). These are standard hyperlinks — no third-party scripts load on this Website as a result of their presence. Following a link takes you to an external platform governed by its own privacy policy. We have no control over how those platforms collect or use your data.
10. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Contact form submissions (name, email, message) | Up to 24 months from receipt | Maintain a record of communication and follow up if required |
| Newsletter subscriber email addresses (Kit) | Until you unsubscribe | Ongoing consent-based marketing relationship |
| Blog comment data (name, email, IP, content) | Indefinitely while the post is published; deleted upon post removal or upon request | Public conversation record; you may request deletion at any time |
| Google Analytics data | Up to 14 months (default GA4 setting) | Trend analysis and Website improvement |
| Microsoft Clarity session recordings | Up to 13 months (Clarity default) | UX analysis and Website improvement |
| Algolia search index data | Retained while the search index is active; query logs per Algolia’s default settings | Powering site search results |
| Hostinger server access logs | 30–90 days (provider standard) | Security monitoring and incident investigation |
| Silktide consent records | 12 months or until you clear cookies | Proof of consent |
| Encrypted backup data (WPvivid) | Retained per our backup rotation schedule; old backups deleted automatically | Disaster recovery and site restoration |
When the applicable retention period expires, personal data is securely deleted or anonymised. In some circumstances we may retain data longer where required by law or to establish, exercise, or defend a legal claim.
11. Cookies
A cookie is a small text file stored on your device when you visit. This Website uses a cookie consent banner powered by Silktide. When you first visit, you may accept all cookies, customise by category, or decline non-essential cookies. Non-essential cookies are not set until you actively consent.
| Category | Example cookie names | Set by | Purpose | Consent required? |
|---|---|---|---|---|
| Strictly Necessary | wordpress_*, wordpress_logged_in_*, wp-settings-* | WordPress | Core session management. Required for the site to function. | No — always active |
| Performance / Caching | litespeed_*, lscache_* | LiteSpeed Cache | Serves correct cached page variant per visitor type. | No — functional necessity |
| Consent Record | silktide*, cookieconsent* | Silktide | Records cookie consent preferences to avoid repeat prompts. | No — functional necessity |
| Comments | comment_author_*, comment_author_email_*, comment_author_url_* | WordPress | Remembers your name, email, and website so you don’t have to retype them when leaving another comment. | No — set only after you submit a comment |
| Analytics — Google | _ga, _gid, _gat, _ga_* | Google Analytics via GTM | Tracks page views, sessions, and usage patterns in aggregate pseudonymised form. | Yes |
| Analytics — Clarity | _clck, _clsk, CLID, MUID | Microsoft Clarity via GTM | Enables session recording, heatmaps, and behavioural analytics. | Yes |
| Video — YouTube | VISITOR_INFO1_LIVE, YSC, yt-remote-*, yt-player-* | YouTube via Presto Player | Set by YouTube when its player loads on a page containing an embedded video. | Yes |
| Preferences | wp-saving-post, wp-dark-mode-active | WordPress | Stores UI preferences. Relevant only when logged into the WordPress dashboard. | No — functional necessity |
Managing Cookies
Update your cookie preferences at any time via the cookie settings link in the Website footer. You can also control cookies through your browser settings — most browsers allow you to block or delete cookies. Blocking strictly necessary cookies will impair core Website functionality. For guidance on managing cookies in major browsers, see allaboutcookies.org.
12. Your Rights
12.1 Under India’s DPDP Act, 2023
- Right to access: request a summary of the personal data we hold about you and how it is used.
- Right to correction: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of your personal data where the purpose for which it was collected has been fulfilled or consent withdrawn.
- Right to grievance redressal: raise a complaint with us, acknowledged within 48 hours and resolved within 30 days.
- Right to nominate: nominate another person to exercise your rights on your behalf in the event of your death or incapacity.
12.2 For EEA / UK Residents (GDPR / UK GDPR)
- Right to access, rectification, erasure, restriction of processing, and data portability.
- Right to object to processing based on legitimate interests.
- Right to withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint with your local supervisory authority.
12.3 Exercising Your Rights
Contact us via https://bitvarium.com/contact/. We will respond within 30 days. We may ask you to verify your identity before processing your request. There is no charge unless the request is manifestly unfounded, repetitive, or excessive.
12.4 Right to Complain to a Supervisory Authority
- India: the Data Protection Board of India, once operational under the DPDP Act.
- EEA: the data protection authority in your country of residence.
- UK: the Information Commissioner’s Office — https://ico.org.uk.
13. Data Security
We have implemented appropriate technical and organisational measures to protect your personal data, including:
- HTTPS/TLS encryption for all data in transit between your browser and the Website.
- Encrypted automated backups stored in secure cloud infrastructure.
- Access controls limiting who within Bitvarium can access personal data.
- Brute force and intrusion protection via Kadence Security.
- Comment spam filtering via Antispam Bee, which processes comment data locally without transmitting it to external servers.
- Use of reputable, security-certified third-party processors operating under data processing agreements.
No method of internet transmission is completely secure. We cannot guarantee absolute security, but we will notify you and the relevant supervisory authority of a personal data breach where required by law. If you suspect unauthorised access to your data in connection with this Website, please contact us immediately via https://bitvarium.com/contact/.
14. International Data Transfers
Bitvarium is based in India. Several third-party processors we use are located in, or transfer data to, countries outside India and the EEA:
| Processor | Transfer destination | Safeguard |
|---|---|---|
| Google LLC (Analytics / GTM / YouTube / Backup Storage) | United States | Standard Contractual Clauses |
| Microsoft Corporation (Clarity) | United States | Standard Contractual Clauses |
| ConvertKit LLC / Kit | United States | Standard Contractual Clauses |
| Thrive Themes | United States | Standard Contractual Clauses |
| DigitalOcean LLC (CDN) | United States (company); Singapore (SGP1 data node) | Standard Contractual Clauses |
| Algolia SAS | European Union and United States | Standard Contractual Clauses |
| Internet Archive | United States | Non-profit public archive; no contractual transfer framework available |
| Hostinger International Ltd | Lithuania / EU infrastructure | GDPR-compliant EU processor |
| Silktide Ltd | United Kingdom | UK GDPR adequacy framework |
Where personal data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or equivalent safeguards. If you would like more information about safeguards for a specific transfer, please contact us.
15. Children
This Website is intended for adults and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe a child under 16 has provided us with personal data without your consent, please contact us at https://bitvarium.com/contact/ and we will delete it promptly.
16. Third-Party Websites
This Website contains links to third-party websites including social media platforms, tools referenced in Showcase articles, and external resources. This Privacy Policy applies only to bitvarium.com. Once you follow a link to another website, that site’s own privacy policy governs the collection and use of your data. We have no control over and accept no responsibility for those practices.
17. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. For material changes, we will take additional steps to notify you — such as placing a notice on the Website or, where we hold your email address, sending a direct notification. Continued use of the Website after an update constitutes acceptance of the revised policy.
18. Grievance Officer (DPDP Act Compliance)
As required under India’s Digital Personal Data Protection Act, 2023, the designated Grievance Officer for Bitvarium / Growthery Media (OPC) Private Limited is:
Name: Praveen Gandhiraj
Organisation: Growthery Media (OPC) Private Limited
Contact: https://bitvarium.com/contact/
Grievances will be acknowledged within 120 hours and fully addressed within 30 days of receipt.
19. Contact Us
Bitvarium (Growthery Media (OPC) Private Limited)
Contact form: https://bitvarium.com/contact/
We aim to respond to all privacy-related enquiries within 5 business days.