Privacy policy

How SideSwipe Technologies collects, uses and protects personal data sent through this website, and your rights under Indian law.

Last updated
Reading time
10 min
On this page15 sections

This policy explains what personal data we collect through TODO: https://www.your-domain.com, why we collect it, how long we keep it and what you can ask us to do with it.

Who we are

This website is run by TODO: SideSwipe Technologies Private Limited (exactly as on the certificate of incorporation) (CIN: TODO: Corporate Identification Number (21 characters)), called "SideSwipe Technologies", "we" or "us" in this policy.

For personal data you send us through this website, we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"). That means we decide why and how it is used, and we are responsible for looking after it.

The short version

  • There are no accounts or logins on this website, and it doesn't set cookies or use advertising trackers.
  • We only receive personal data when you choose to send it: through the contact form, the estimate builder, WhatsApp or email. Our server also keeps basic technical logs for security.
  • We use your details to reply to you and to prepare estimates and proposals. We don't sell your data.
  • Enquiries are kept for up to 24 months, unless you become a client or ask us to delete them sooner.
  • You can ask to see, correct or delete your data, or withdraw your consent, at any time.

What we collect and why

Contact form

When you send the contact form, we receive:

  • your name and email address
  • your phone number and company name, if you give them
  • the service you're interested in, your budget range and your timeline
  • your message
  • your consent, given by ticking the consent box

We use this to reply to you, understand what you need and prepare an estimate or proposal. The form is emailed to us, and a copy is added to a private lead log on our web server. The lead log is stored outside the public part of the website, so it can't be opened through the website.

Estimate builder

The estimate builder works inside your browser. The services you select and the answers you give are used on your device to calculate an estimate. They aren't sent to us while you use the builder.

If you ask us to follow up on an estimate, we receive the same details as the contact form, together with your selections and the estimate. These are emailed to us and added to the lead log in the same way. We may also email you a copy of the estimate.

Competitor quote upload

Uploading a quote from another provider is optional. You can upload one PDF, JPG or PNG file of up to 5 MB.

  • The file is first read inside your browser to find the total amount. Nothing is sent to us at this stage.
  • If you then send a request, the file is attached to the email we receive. It is not stored on our web server.
  • We may keep that email and its attachment in our mailbox, so we can verify the quote and the work it covers.

Please only upload a quote you're entitled to share. You're welcome to hide anything we don't need, such as bank details or other people's personal information, before uploading it.

Spam and abuse protection

To keep automated spam out of our forms, we use:

  • a hidden field that people don't see but automated scripts tend to fill in
  • a check on how quickly the form was completed
  • rate limiting, which counts recent requests using a keyed hash of your IP address (a scrambled value that can't easily be turned back into the address). Our application doesn't store your raw IP address, and these hashes are kept only briefly.
  • Cloudflare Turnstile, if it is switched on, which checks your browser for signs of automation. Cloudflare handles this under its own privacy policy.

Server logs

Like almost every website, our hosting server keeps access logs. They record your IP address, the date and time, the page or file requested, the server's response, your browser type and the page you came from. We use them to keep the website secure and to fix problems. They are kept for a limited period and then deleted or overwritten.

Analytics

If we use analytics, we only use cookie-free tools such as Cloudflare Web Analytics or Plausible. They tell us things like which pages are visited, which websites sent visitors to us, and general device and country information. They don't set cookies or follow you across other websites.

WhatsApp and email

If you click a WhatsApp link, WhatsApp opens. WhatsApp is run by Meta, and it handles your messages under its own terms and privacy policy. If you message us on WhatsApp or email us directly, we receive your phone number or email address and whatever you send, and we use it to reply to you.

Sensitive personal data

We don't ask for sensitive personal data, such as passwords, bank account or card details, health information or biometric data, through this website. Please don't include it in your message or in any file you upload.

When you tick the consent box and send a form, you agree to us using your details for the purposes described in this policy.

You can withdraw your consent at any time by emailing [TODO: hello@your-domain.com](mailto:TODO: hello@your-domain.com). Withdrawing is as easy as giving consent. It doesn't affect anything we did before you withdrew, and afterwards we'll stop using your details except where the law requires us to keep them. If you withdraw consent before we've replied, we may not be able to help with your enquiry.

Some technical data, such as server logs and spam checks, is processed to keep the website secure and working. Some records are kept because the law requires it.

How we use your information

We use personal data only to:

  • reply to your enquiry and talk to you about your project
  • prepare estimates, proposals and quotes, including checking a competitor quote you've sent
  • keep a record of enquiries so we can follow up on them
  • keep our website and forms secure and free of spam
  • deliver the work and send invoices, if you become a client
  • meet our legal, tax and accounting obligations

We don't sell or rent your personal data.

Who we share it with

We share personal data only with service providers that help us run the website and our business, and only as much as they need:

  • our email provider, which receives and stores the emails our forms send
  • our hosting provider, whose server runs the website and stores the lead log
  • Cloudflare, if we use it for Turnstile, delivering the website or analytics
  • an analytics provider such as Plausible, if we use one
  • professional advisers such as accountants and lawyers, where needed
  • government authorities, courts or regulators, when the law requires it

If we email you a copy of an estimate, your own email provider will also process that email.

Some of these providers may store or process data outside India. We follow any restrictions the Government of India places on transferring personal data to other countries.

How long we keep it

  • Enquiries and estimate requests (emails and lead log entries): up to 24 months after we receive them, unless they lead to a client relationship or you ask us to delete them sooner.
  • If you become a client: for as long as we work together, and afterwards for as long as tax, accounting and other laws require.
  • Competitor quotes: in our mailbox with your enquiry, for the same period as the enquiry. They are never stored on our web server.
  • Rate-limiting hashes: a short time, then deleted automatically.
  • Server access logs: a limited period, then deleted or overwritten.
  • Data in your browser (see below): until you clear it.

Cookies and browser storage

This website doesn't set cookies.

It stores a few things in your browser, on your device only:

  • in local storage, a draft of an estimate you haven't sent yet, so you don't lose your answers
  • for the current browser session only, the services you keep on the services page, and a note that the opening animation has already played, so it isn't shown again

None of this identifies you, and your draft and shortlist stay on your device unless you choose to send an estimate request. You can remove them at any time by clearing this website's data in your browser settings.

If we use Cloudflare to protect the website, Cloudflare may set a strictly necessary security cookie when it needs to check that a visitor isn't an automated script.

Your rights

Under the DPDP Act, you have the right to:

  • Access: ask for a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
  • Correction: ask us to correct, complete or update data that is wrong or incomplete.
  • Erasure: ask us to delete your data, unless we still need it for the purpose you gave it for or the law requires us to keep it.
  • Withdraw consent: at any time, as described above.
  • Grievance redressal: raise a complaint with us and get a response if you think we have mishandled your data.
  • Nominate: name another person to use these rights on your behalf if you die or become unable to use them yourself.

To use any of these rights, email [TODO: hello@your-domain.com](mailto:TODO: hello@your-domain.com) or our Grievance Officer (see below). We may ask you to confirm your identity first, so that we don't give your data to someone else.

You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India.

If you aren't satisfied with how we handle your complaint, you can complain to the Data Protection Board of India.

How we protect your data

We follow reasonable security practices, as required by the Information Technology Act, 2000 and the rules made under it. These include:

  • HTTPS encryption across the whole website
  • keeping the lead log outside the public web folder, with access restricted to us
  • not storing uploaded quotes on the web server
  • not storing raw IP addresses in our application
  • collecting only what we need
  • keeping our server and its software up to date

No system is perfectly secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

Children

Our services are for businesses and adults. This website isn't meant for anyone under 18, and we don't knowingly collect their personal data. If you think a child has sent us their details, contact us and we will delete them.

Links to other websites and apps, such as WhatsApp or social media profiles, take you to services we don't control. Their own privacy policies apply.

Grievance Officer

Under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and the DPDP Act, you can raise any concern or complaint about your personal data with our Grievance Officer:

  • Name: TODO: Grievance Officer name or designation
  • Email: [TODO: grievance@your-domain.com](mailto:TODO: grievance@your-domain.com)
  • Address: TODO: SideSwipe Technologies Private Limited (exactly as on the certificate of incorporation), TODO: Address line 1, TODO: City, TODO: State TODO: PIN code, India

We will resolve your grievance as quickly as we can, and within one month of receiving it.

Changes to this policy

We may update this policy when our website, our services or the law change. The date at the top of this page shows when it last changed. If we make a significant change, we will make that clear on this page.

Contact us

If you have a question about this policy or your data, email [TODO: hello@your-domain.com](mailto:TODO: hello@your-domain.com), call TODO: +91 00000 00000, or write to TODO: SideSwipe Technologies Private Limited (exactly as on the certificate of incorporation), TODO: Address line 1, TODO: City, TODO: State TODO: PIN code, India.