Privacy policy

01Who we are

This website, diginathi.in, is run by Diginathi Private Limited (“Diginathi”, “we”), G65, Rajdanga Main Road, E.K.T.P., Behind Taj Vivanta, Kolkata 700107, India. For the purposes of India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary; under the EU and UK GDPR we are the controller of the personal data described here.

This policy covers the website and enquiries made through it. When we process data on behalf of a client inside a project or one of our products, the client’s own policy and our contract with them apply.

02What we collect

• What you send us. Name, work email, company, phone number, the service you are interested in and your message, when you use the contact form, email us, call us, or message us on WhatsApp.
• Technical data needed to run the site. Our hosting provider receives your IP address, browser type and the page requested, to deliver the page and protect it from abuse.
• Analytics, only with your consent. If you allow analytics, Google Analytics records pages viewed, approximate location (city level), device type and how you arrived. Google Analytics 4 does not log or store IP addresses.
• Your cookie choice. Stored in your own browser so we do not ask again.

We do not knowingly collect data from anyone under 18, and the site is not directed at children.

03Why we use it, and on what basis

• To answer your enquiry and discuss a project. India: you provided the data voluntarily for this purpose (DPDP Act, s.7(a)). EU/UK: steps you asked for before a contract, and our legitimate interest in replying to business enquiries.
• To run and secure the website. Legitimate interest; strictly necessary.
• To understand how the site is used. Your consent, which you can withdraw at any time under “Cookie settings”.
• To meet legal obligations, such as tax and accounting records once we work together.

We do not use your data for automated decisions that have legal or similarly significant effects, and we do not build advertising profiles.

04Who we share it with

We do not sell personal data, and we do not share it for cross-context behavioural advertising. We use these service providers (processors), each under data processing terms that limit what they may do with it:

• Vercel Inc. (USA): website hosting and delivery.
• Formspree Inc. (USA): receives contact form submissions and forwards them to us by email.
• Google LLC (USA): Google Analytics, only if you consent; Google Maps on the contact page, only if you allow functional cookies or choose to load the map.
• Our email provider, where enquiries are stored and answered.

If you message us on WhatsApp, that conversation is also subject to WhatsApp’s own terms and privacy policy. We may disclose data where the law requires it.

05International transfers

We are based in India and some processors are in the United States. Where data from the EU or UK is transferred, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. Transfers out of India are made in line with the DPDP Act and any restrictions notified under it.

06How long we keep it

• Enquiries that do not lead to work: up to 24 months, then deleted.
• Client correspondence and records: for the length of the engagement plus the period tax and company law requires (generally 8 years in India).
• Analytics data: no longer than 14 months.
• Your cookie choice: 12 months, after which we ask again.

07How we protect it

Encrypted connections (HTTPS) everywhere, access limited to the people who need it, and service providers chosen for their security practices. If a breach affects your personal data we will notify you and the relevant authority as the law requires, including the Data Protection Board of India.

08Your rights

Everyone can ask us what personal data we hold about them, ask us to correct or delete it, and withdraw consent at any time. Withdrawing consent does not affect processing that already took place.

India (DPDP Act). You have the right to a summary of your data and how it is processed, to correction, completion, updating and erasure, to grievance redressal, and to nominate someone to exercise these rights if you die or become incapacitated. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

EU and UK (GDPR). You also have the rights to restrict or object to processing, and to data portability. You may complain to your local supervisory authority.

United States (California and other states). You have the right to know what personal information we collect, use and disclose; to delete and correct it; and to opt out of its sale or sharing. We do not sell or share personal information, and we honour Global Privacy Control browser signals as an opt-out. We will not discriminate against you for exercising these rights. Categories collected in the last 12 months: identifiers and contact details (from you), and internet activity (from your browser, with consent).

To use any of these rights, email info@diginathi.in with the subject “Privacy request”. We will confirm receipt and answer within 30 days, or sooner where the law requires. We may need to verify your identity first.

09Grievance Officer and contact

Grievance Officer, Diginathi Private Limited
G65, Rajdanga Main Road, E.K.T.P., Behind Taj Vivanta, Kolkata 700107, India
Email: info@diginathi.in · Phone: +91 91477 43253

10Changes to this policy

We will post any change here with a new date. If a change affects how we use data you have already given us, we will tell you before it applies.