digital-web-weaver — workspace
+91 97125 15105▶ Run project

// privacy-policy.md · legal

PRIVACY POLICY

Privacy Policy

1. Overview

Digital Web Weaver commits to protecting privacy for clients, website visitors, and prospects. This policy covers information collected via digitalwebweaver.com and related services. By using this website, you agree to these terms; if you disagree, please do not use the site.

2. What We Collect

Directly provided information

  • Name, job title, email, phone number
  • Company details (name, size, industry)
  • Project details and communications
  • Payment data (processed by third parties; card details are not stored by us)

Automatically collected data

We do not run analytics or behavioral tracking on this site. The only automatic collection happens when you submit an enquiry form, at which point we record:

  • IP address and an approximate location (city/region level, via a third-party lookup)
  • Standard web server request logs kept by our hosting provider (Vercel)

Third-party sources

LinkedIn, Clutch, referral partners, and professional directories.

3. How We Use It

Processing purposes

  • Responding to enquiries submitted through our forms
  • Service delivery, communication, and support for clients
  • Legal compliance (accounting, tax, data protection)
  • Security and fraud prevention

When you submit an enquiry form, we ask for your explicit, opt-in consent — via an unticked checkbox you must actively select — before we process your details for that enquiry. You are told plainly what we collect and why at the point of collection, and you can withdraw consent at any time (see Section 7).

Legal bases: your consent (enquiry forms), contract performance (active client work), legal obligation, and legitimate interests (e.g. security, fraud prevention).

4. Sharing Data

We do not sell personal data, and we do not run marketing or retargeting campaigns with it. We share it only with the processors that operate this website and our email delivery, and in limited legal circumstances:

  • Supabase (database hosting for enquiry records)
  • Resend (transactional email delivery, to route your enquiry to our team)
  • ipapi.co (approximate IP-based location lookup, for fraud/spam screening)
  • Vercel (website hosting infrastructure)
  • Business transfers (with advance notice if an acquisition or merger occurs)
  • Legal requirements or court orders
  • Protection of rights and safety

Cross-border transfer: our infrastructure providers may process data outside your home country; where that includes the EEA/UK, we rely on their standard contractual safeguards.

5. Cookies & Local Storage

This site does not currently set analytics, advertising, or retargeting cookies, and we do not run Google Analytics or any similar tracking. The only browser storage we use is a single localStorage entry to remember your light/dark theme preference on your device — this never leaves your browser and is not personal data. If that changes in the future, we will add a cookie consent banner before any non-essential cookie is set, and update this section accordingly.

6. Data Retention

Data typeRetention period
Client records7 years post-project
Enquiry form submissions2 years from last contact
Security logs12 months

After expiration, data is deleted or anonymized.

7. India — Digital Personal Data Protection Act, 2023

As an Indian company (registered in Vadodara, Gujarat), we process personal data of Indian users in line with the Digital Personal Data Protection Act, 2023 (DPDP Act).

Consent

Where we rely on your consent — for example, when you submit an enquiry form — that consent is free, specific, informed, and given through a clear affirmative action: an unticked checkbox you actively select, next to a plain-language notice of what we collect and why, shown at the point of collection. We do not use pre-ticked boxes or bundle consent for unrelated purposes.

Withdrawing consent

You can withdraw consent at any time by emailing info@digitalwebweaver.com. Withdrawal is as easy as giving consent, and we will stop processing your data for that purpose as soon as we action your request, without affecting anything already lawfully done before withdrawal.

Your rights as a Data Principal

  • Obtain a summary of your personal data we hold and how it is being processed
  • Correct, complete, or update your personal data
  • Request erasure of your personal data once it is no longer needed for the purpose it was collected for
  • Withdraw consent, and have any grievance addressed
  • Nominate another individual to exercise these rights on your behalf in the event of death or incapacity

Grievance redressal

For any DPDP-related request or complaint, contact us at info@digitalwebweaver.com. We aim to resolve grievances within 30 days. If you remain unsatisfied, you may file a complaint with the Data Protection Board of India.

8. Your Rights (Other Jurisdictions)

Depending on your location, you may have the right to:

  • Access the data we hold about you
  • Correct inaccurate information
  • Request erasure ("right to be forgotten")
  • Restrict processing
  • Request data portability
  • Object to processing
  • Withdraw consent

We respond within 30 days. Contact info@digitalwebweaver.com. EEA residents may lodge complaints with their national data protection authority.

9. Security

  • TLS 1.3 encryption in transit; AES-256 at rest
  • Role-based access control
  • Regular security audits
  • Employee training
  • ISO 27001-aligned incident response

No system is completely secure. Please report suspected breaches to info@digitalwebweaver.com immediately.

10. Children

Our services target business professionals and are not directed at users under 18 (India's DPDP Act) or under 16 (other jurisdictions). If we inadvertently collect data from a child, it is deleted immediately upon discovery.

11. Changes to This Policy

Updates are posted with a revised "Last updated" date. Material changes receive prominent notice (email or banner). Continued use of the site constitutes acceptance of the updated policy.

12. Contact Us

Data protection inquiries:

EU/EEA: you have the right to complain to your local supervisory authority if unsatisfied with our response.

Key Data-Related Reference

CategoryDetails
Primary contactinfo@digitalwebweaver.com
Data classesNames, emails, phones, company info, project details, payment data (third-party processed)
Main service providersSupabase, Resend, ipapi.co, Vercel
Compliance standardsISO 27001, SOC 2 Type II, GDPR-aligned, DPDP Act 2023 (India)

$ ./contact --data-inquiry

Questions about your data?

Reach our data protection team directly — we respond to every inquiry within 30 days.

⎇ main✓ 0 errors⚠ 0 warningsprivacy-policy.mdMarkdownLn 1, Col 1