Privacy

Who is responsible

This site is operated by Smit Desai, based in Ahmedabad, India, trading under his own name. Depending on the engagement, work is delivered either as an individual freelancer or through a registered company — the specific contracting entity for any given project is stated in that project's agreement, not here. For questions about your data on this website, use the contact form.

[TODO: If you are processing personal data of people in the EU, GDPR Article 27 may require you to appoint an EU representative, since you are established outside the EU. Take advice on whether this applies to you, and state the outcome here.]

What this site collects

If you use the contact form: your name, email address, and the message you write. That is all the form asks for, and all it stores.

Strictly necessary cookies: two — a session cookie and a CSRF token that stops other sites submitting the form on your behalf. Neither tracks you, and neither follows you off this site. Under the ePrivacy rules, strictly necessary cookies do not require consent, which is why you are not asked to accept these.

Analytics: Google Analytics, and only after you accept the cookie banner. IP addresses are anonymised before they reach Google. If you decline or simply close the banner, no analytics cookie is set and the site works exactly the same. You can withdraw consent at any time by clearing this site's data in your browser, which brings the banner back.

Why, and on what basis

Contact form details are used for one thing: replying to you. The lawful basis is legitimate interest — you asked a question and expect an answer. Your details are never sold, never shared with anyone for marketing, and never added to a mailing list. There is no mailing list.

Third parties

Fonts are served from this site's own servers. They are not loaded from Google Fonts or any other font CDN, so no third party sees your IP address to render this page.

The map on the contact page is embedded from OpenStreetMap. When that page loads, OpenStreetMap's servers receive your IP address in order to send the map tiles. OpenStreetMap was chosen over Google Maps specifically because it sets no tracking cookies. See the OpenStreetMap Foundation privacy policy.

Google Analytics runs only if you accept the cookie banner — it is never loaded before that choice is made. See Google's privacy policy.

Hosting and email. This site is hosted on Oracle Cloud Infrastructure (OCI). Email — including contact form notifications — is sent via Gmail. Both are large international providers; if you are in the EU, your data may be processed outside the EU as a result, under those providers' own data protection commitments.

How long it is kept

Contact form enquiries are kept until the enquiry is closed — either because it turns into a project, at which point the relevant contract governs retention from there, or because it doesn't, at which point the enquiry is deleted.

Your rights

If you are in the EU or UK, you can ask for a copy of your data, ask for it to be corrected or deleted, or object to it being held at all. Ask via the contact form and it will be actioned within 30 days. You also have the right to complain to your national data protection authority — in the Netherlands the Autoriteit Persoonsgegevens, in Finland the Tietosuojavaltuutetun toimisto.

Client work

This policy covers this website only. Work done for clients is governed by the contract and any NDA signed with that client. Client projects are never described here in a way that identifies the client without their written permission.

Changes

Material changes will be reflected in the date at the top of this page.