Contact

This policy explains what personal data nabharoy.com collects, why it is collected and what rights you have over it. It is written to reflect India's Digital Personal Data Protection Act, 2023 (the DPDP Act).

Who I am

nabharoy.com is run by Nabha Roy, a web developer and UI/UX designer based in India. I work remotely, both full time with a UK-based company and independently as a freelancer. For the data described here I decide what is collected and why, which under the DPDP Act makes me the data fiduciary. You can reach me at [email protected].

Information I collect

I keep data collection to a minimum. Your data reaches me in two ways:

  • Details you send me. When you complete the contact form or email me, I receive the information you choose to provide, typically your name, email address, the type of project you are interested in and your message. Please share only what is needed to answer your enquiry.
  • Usage data. Like most websites, this site collects pseudonymous information about how it is used, such as the pages you visit, the approximate region you visit from, your device and browser type, and how you arrived. This is collected through Google Analytics, as described under Cookies and analytics.

I do not ask for, or intentionally collect, sensitive information such as health, financial account or identity details. Please do not include information of that kind in your message.

How I use your information

  • To respond to your enquiry, discuss your project and provide a scope and quote.
  • To keep a record of our correspondence in case you get back in touch.
  • To understand, in aggregate, how the site is used so I can improve its content, speed and structure.

I do not use your details for marketing, and I will not send you unsolicited email.

Basis for using your data

Under the DPDP Act, I use your personal data on the following grounds:

  • Your request. When you send an enquiry you voluntarily provide your details so that I can respond, and I process them only for that purpose.
  • Your consent. Analytics cookies are used only with your consent, which you give through the cookie banner and can withdraw at any time.

Cookies and analytics

This site uses Google Analytics, loaded through Google Tag Manager, to measure traffic and understand how visitors use the pages. It uses Google Consent Mode, so analytics cookies are set only after you accept them through the cookie banner; until then Google's tags stay in a consent-denied state. Google then processes usage data on my behalf, configured to avoid collecting more than necessary, and it is not used for advertising.

You can accept or decline analytics at any time. Full details, including the specific cookies used and how to opt out, are in the Cookie Policy.

Who I share data with

I do not sell your personal data, and I do not share it except with the service providers that help me run the site:

  • Web3Forms, which delivers contact-form submissions to my inbox.
  • Google (Google Analytics and Google Tag Manager), which processes site-usage data as described above.
  • My website host and email provider, which store the site and our correspondence.

These providers act on my instructions. I may also disclose data where the law requires it.

How long I keep data

I keep enquiry correspondence only as long as needed to deal with your request, and for a reasonable period afterwards in case you get back in touch, then delete it. Analytics data is retained according to the settings in Google Analytics and is not used to identify you personally.

Your rights

Under India's data protection law you have the right to:

  • ask for a summary of the personal data I hold about you and how it is used;
  • ask me to correct, complete or update data that is inaccurate;
  • ask me to erase your data where there is no longer a reason to keep it;
  • withdraw your consent for analytics at any time;
  • nominate another person to exercise these rights for you if you are unable to;
  • raise a grievance with me and have it addressed.

To exercise any of these, email [email protected].

How I protect your data

I take reasonable technical and organisational measures to keep your data safe, including secure hosting, encrypted connections (HTTPS) and limiting who can access your information. No method of transmission over the internet is completely secure, so I cannot guarantee absolute security, but I work to protect your data at every stage.

International transfers

Some of the providers above, including Google, may store or process data on servers outside India. Where that happens, I use established providers that offer recognised safeguards and handle data in line with applicable law.

Children's privacy

This site is not aimed at children. Under India's data protection law a child is anyone under 18, and I do not knowingly collect their data. If you believe a child has provided me with personal data, please contact me and I will delete it.

Changes to this policy

I may update this policy to reflect changes to the site, the services I use or the law. The date at the top shows when it was last revised, and the current version always applies.

Contact and complaints

For any privacy question, or to exercise your rights, email [email protected]. If you are not satisfied with my response, you may raise a complaint with the Data Protection Board of India.