Privacy Policy

Effective Date: 01.01.2025
Last Updated : 26.08.2025

This Privacy Policy (“Policy”) outlines how Vistara Ventures and its affiliates (“Vistara Ventures”, “VV”, “we”, “us”, or “our”) collect, process, store, and protect your personal data. This Policy applies to all personal data collected through our websites, platforms, services, and communications, and governs data handling practices in compliance with applicable data protection and privacy laws across the jurisdictions in which we operate, including Australia, the United Kingdom, the United States, Sri Lanka, and other regions within Asia.

By accessing or using our services or by otherwise providing your personal data to us, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

1. Scope

This Policy applies to:

  • Visitors of our website
  • Founders and startup representatives
  • Investors, mentors, and other stakeholders
  • Individuals who communicate with or otherwise engage with Vistara Ventures

This Policy does not apply to third—party websites, services, or platforms that may be linked to or from our website. Vistara Ventures disclaims any liability for the privacy practices of such third parties.

2. Lawful Basis for Processing

Vistara Ventures processes personal data only where permitted under applicable law. These legal bases include:

  • Consent, where expressly provided
  • Contractual necessity, where processing is required to fulfill a contractual relationship
  • Legal obligation, to comply with applicable laws and regulations
  • Legitimate interests, including business development, operational efficiency, and investor/startup engagement, provided such interests are not overridden by the individual’s rights and freedoms
3. Personal Data We Collect

The types of personal data we may collect include, but are not limited to:

Identifying Information

  • Full name, email address, contact number, title, and company name

Professional and Business Information

  • Investor profile, pitch materials, financial details, business strategy, or company-related data voluntarily submitted to us

Technical Data

  • IP address, browser type/version, time zone, device type, referral source, and usage behaviour (via cookies or analytics tools)

Communications and Correspondence

  • Records of interactions with Vistara Ventures (emails, forms, inquiries)

We do not intentionally collect or process any sensitive personal data (e.g., health, religious, or biometric data), and we request that such data not be submitted to us.

4. Use of Personal Data

Vistara Ventures collects and processes personal data strictly for the following purposes:

  • Evaluating funding applications, investment opportunities, and startup viability
  • Facilitating connections between founders, mentors, and investors
  • Internal business operations, due diligence, compliance, and analytics
  • Communicating updates, opportunities, and relevant announcements
  • Legal and regulatory compliance, risk management, and fraud prevention

Personal data will not be used for purposes materially different from those stated above without prior notice or consent, where required by law.

5. Data Sharing and Disclosure

Vistara Ventures does not sell personal data. Data may be disclosed to the following third parties under strict confidentiality and data protection terms:

  • Affiliated entities within the Vistara Ventures corporate structure
  • Authorized personnel and consultants with a legitimate business need
  • Thirdparty service providers (e.g., cloud storage, CRM, legal, IT services) under binding contractual terms, including data processing agreements (DPAs)
  • Legal, regulatory, or governmental authorities, where disclosure is required or permitted by applicable law

Disclosures are made strictly on a need-to-know basis and in compliance with all applicable data protection laws.

6. Cross—Border Data Transfers

Due to our global operations, your personal data may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home country. In such cases, we ensure that adequate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission or UK ICO
  • Binding corporate rules or approved codes of conduct
  • Transfer mechanisms permitted under applicable law
7. Data Security

We implement appropriate technical and organizational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include:

  • Data encryption in transit and at rest
  • Access control and role—based permissions
  • Regular risk assessments and audits
  • Incident response protocols

However, no system is entirely secure, and we disclaim all liability for unauthorised access to data beyond our reasonable control.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal, regulatory, or operational requirements. Data is securely deleted or anonymized once the retention period expires.

9. Your Rights

Depending on your jurisdiction, you may have rights under applicable law, including:

  • The right to access, rectify, or delete your personal data
  • The right to object to or restrict processing
  • The right to data portability
  • The right to withdraw consent (where applicable)
  • The right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at hello@vistaraventures.com. We reserve the right to verify identity and refuse manifestly unfounded or excessive requests.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to improve site performance, analyze traffic, and enhance user experience. By continuing to use our site, you consent to our use of cookies, unless you disable them via your browser settings.

More information is available in our [Cookie Policy].

11. Children’s Privacy

Vistara Ventures does not knowingly collect data from children under the age of 16. If we become aware that we have inadvertently received such data, we will take steps to delete it.

12. Policy Updates

We reserve the right to modify or update this Privacy Policy at any time without prior notice. The revised version will be posted on our website with an updated effective date. Your continued use of our services constitutes acceptance of any changes.

13. Contact Us

For questions, requests, or complaints regarding this Policy or our data handling practices, please contact:

Vistara Ventures – Privacy Office
Email: hello@vistaraventures.com
Website: www.vistaraventures.com