Privacy Policy

This website, tatvacode.com, is run by TatvaCode("we", "us", "our"), a digital agency based in India that designs, builds and markets websites and applications for businesses worldwide.

This policy explains what personal information we collect when you visit our website or contact us, why we collect it, and the choices you have. For personal information collected through this website, we are the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023).

It does not cover the websites and applications we build for clients. Each of those has its own privacy policy, and the client is responsible for the personal information collected there.

Information you give us

• Contact form: your name, email address, phone number (optional), the service you are interested in and your message.
• Email, WhatsApp and phone: whatever you choose to share when you contact us directly, such as your name, contact details and project information.
• If you become a client: the business and contact details needed to agree, deliver and invoice our work. This is also covered by our agreement with you.

Every contact form submission is also recorded in a private log on our web server, together with the time, the page it was sent from and your browser type. This makes sure no enquiry is lost if email delivery fails, and helps us spot spam. The log cannot be accessed from the web.

Please don't send us sensitive information (such as health, financial or government ID details) through the contact form. We don't need it to respond to an enquiry.

Information collected automatically

• Analytics, only if you accept cookies: the pages you visit, how long you stay, the site that referred you, your device and browser type, your approximate location (country or city, worked out from your IP address) and actions such as clicking our email, phone or WhatsApp links or sending the contact form. The contents of your message are never sent to analytics.
• Technical and security logs: like almost every website, our hosting and security providers automatically record details of each request, such as IP address, browser, date, time and the page requested. These are used to keep the site running and protect it from attacks.

Some pages, such as the menus we host for our clients, never load analytics at all.

We use personal information to:

• Reply to your enquiry, answer your questions and prepare a proposal or quote.
• Plan, deliver, support and invoice our services if you become a client.
• Understand, in aggregate, how people use our website so we can improve it (only if you accept analytics cookies).
• Protect the website and contact form from spam, bots and misuse.
• Meet our legal, tax and accounting obligations, and establish or defend legal claims.

We do not sell or rent your personal information, we do not use it for advertising or build advertising profiles, and we do not make decisions about you based solely on automated processing.

If you are in the United Kingdom or the European Economic Area, we rely on the following legal bases under the UK GDPR and EU GDPR:

• Consent for analytics cookies. You can withdraw it at any time.
• Steps before a contract, and performance of a contract when you ask us for a quote or become a client.
• Legitimate interests in replying to enquiries, running and securing our website, and keeping business records, where these are not overridden by your rights.
• Legal obligation where the law requires us to keep or disclose information.

Under India's Digital Personal Data Protection Act, 2023, we process personal information on the basis of your consent, or for legitimate uses such as responding to information you have voluntarily provided to us for a specific purpose.

Cookies are small files a website stores in your browser. Local storage works in a similar way. We keep their use to a minimum, and analytics cookies are only set after you click Accept on our cookie banner.

To change your choice at any time, use Cookie settings (also in the footer of every page). If you decline or withdraw consent, Google Analytics stops collecting data and its cookies are removed from our domain. You can also block or delete cookies in your browser settings, or install Google's opt-out browser add-on.

We only share personal information with trusted service providers who help us run our website and business, and only as much as they need:

• Google (Google Analytics) to measure website usage, only with your consent. Our setup always refuses advertising cookies and ad personalisation. See how Google uses information from sites that use its services.
• Cloudflare for content delivery, DNS and security, which involves processing technical request data such as IP addresses.
• Hostinger for website hosting.
• Our email provider to deliver contact form messages to our inbox and store our email correspondence.
• WhatsApp (Meta)if you choose to message us on WhatsApp. Your use of WhatsApp is covered by WhatsApp's own privacy policy.

We may also disclose personal information:

• If required by law, court order or a government authority.
• To protect our rights, property or safety, or those of our clients or others.
• To a buyer or successor if our business is reorganised, merged or sold, under the same protections described here.

We are based in India, and some of our service providers (including Google and Cloudflare) process information in other countries, including the United States. Where information from the UK or EEA is transferred to a country without an adequacy decision, these providers rely on recognised safeguards such as Standard Contractual Clauses.

• Enquiries(contact form, email, WhatsApp, and the server log of form submissions): kept for as long as needed to respond and follow up, and deleted within 2 years of our last contact if you don't become a client.
• Client records: kept for the length of our working relationship, and afterwards for as long as tax, accounting and other legal requirements demand.
• Analytics data: kept in Google Analytics for a maximum of 14 months, after which it is deleted automatically.
• Technical and security logs: kept by our hosting and security providers for a short period, in line with their own retention policies.

Our website is served only over encrypted HTTPS connections, access to enquiries is limited to the people who need it to respond, and our contact form includes spam and bot protection. We work with reputable providers that maintain their own security programmes.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities where the law requires it.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy of it.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your information.
• Withdraw your consent at any time, without affecting processing that took place before.
• Object to, or ask us to restrict, how we use your information.
• Receive your information in a portable format.
• Nominate someone to exercise your rights on your behalf, as provided under India's Digital Personal Data Protection Act, 2023.

To make a request, email reachus@tatvacode.com. We will respond within 30 days, and may need to confirm your identity first. There is no charge for a reasonable request.

If you are not happy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to your local data protection authority, such as the Information Commissioner's Office (ICO) in the UK, your national supervisory authority in the EU, or the Data Protection Board of India.

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us their information, please contact us and we will delete it.

Our website links to other websites, including projects we have built for clients and our social media profiles. We are not responsible for how those websites handle personal information, so please read their privacy policies.

On our Projects page you can open a live preview of a client's website inside our page. The preview only loads when you choose to open it. While it is open, that website runs in your browser exactly as if you had visited it, and it may set its own cookies or show its own cookie notice, under its own privacy policy.

We may update this policy from time to time, for example when we change how our website works or when the law changes. The date at the top of this page shows when it was last updated, and significant changes will be highlighted on our website.

If you have any questions about this policy or how we handle your personal information, please get in touch:

• Email: reachus@tatvacode.com
• WhatsApp: +91 79844 98217
• Contact form: tatvacode.com/contact