Privacy Policy

We may collect the following categories of personal data when you contact us or submit a project enquiry:

• Identification data: name and organisation name
• Contact data: email address
• Project data: requirements, scope details, and budget tier selections
• Technical data: browser type, device type, IP address, and session metadata collected automatically via analytics tools

Personal data is collected and used solely for the following purposes:

• To respond to enquiries and scope potential projects
• To deliver agreed services and manage the client relationship
• To comply with applicable legal obligations

We do not sell, rent, or share your personal data with third parties for marketing or commercial purposes.

We process personal data under the following lawful bases as defined under applicable data protection law (including GDPR and India's Digital Personal Data Protection Act 2023):

• Legitimate interest: responding to inbound enquiries and scoping projects from individuals who have voluntarily contacted us
• Consent: where you have explicitly opted in to communications or use of non-essential cookies
• Contractual necessity: processing required to perform a service agreement with you
• Legal obligation: where processing is required to comply with applicable law

We use the following third-party tools that may independently process data in connection with our service. We recommend reviewing each provider's privacy policy:

• Google Analytics (analytics.google.com/analytics) — page view, session, and interaction tracking
• Vercel (vercel.com/legal/privacy-policy) — website hosting and edge delivery; may log IP addresses and request metadata
• Google Fonts via CDN — loading fonts from Google's servers transmits your IP address to Google; we self-host where feasible to mitigate this
• Web3Forms (web3forms.com/privacy) — contact form processing and email routing
• Any form or contact tool in use at time of enquiry — disclosed in the contact form interface

Where third-party processors act as data processors on our behalf, we take reasonable steps to ensure they maintain appropriate safeguards.

Please refer to our Cookie Policy for full detail on the cookies we use, their purpose, and how to manage them.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Enquiry data from non-converting contacts is deleted within 12 months. Client project data is retained for a minimum of 3 years for accounting and legal compliance purposes, after which it is securely deleted.

Subject to applicable law (including GDPR Articles 15–21 and India's DPDP Act 2023), you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data where no legal basis for retention exists
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interest

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days of receiving a valid request. We may ask you to verify your identity before processing the request.

In accordance with India's Digital Personal Data Protection Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, our designated Grievance Officer can be reached at:

Email: [email protected]

Response time: within 30 days of receipt of grievance.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with GDPR Article 33. Where the breach is likely to result in a high risk to individuals, we will also notify affected individuals without undue delay.

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will delete it promptly. Where required under India's DPDP Act 2023, verifiable parental or guardian consent will be obtained before processing data of a minor.

All data transmitted to and from this website is encrypted in transit using TLS (Transport Layer Security). We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this policy from time to time. Where changes are material, we will update the "Last updated" date at the top of this page. We recommend reviewing this page periodically. Continued use of the site following an update constitutes acknowledgement of the revised policy; however, where applicable law requires renewed consent, we will seek it explicitly.