Contact

This policy explains what personal data nabharoy.com collects, why it is collected and what rights you have over it. It is written to reflect India's Digital Personal Data Protection Act, 2023 (the DPDP Act).

Who I am

nabharoy.com is run by Nabha Roy, a web developer and UI/UX designer based in India. I work remotely, both full time with a UK-based company and independently as a freelancer. For the data described here I decide what is collected and why, which under the DPDP Act makes me the data fiduciary. You can reach me at hellonabharoy.com.

Information I collect

I keep data collection to a minimum. Your data reaches me in two ways:

  • Details you send me. When you complete the contact form or email me, I receive the information you choose to provide, typically your name, email address, the type of project you are interested in and your message. Please share only what is needed to answer your enquiry.
  • Usage data. Like most websites, this site collects pseudonymous information about how it is used, such as the pages you visit, the approximate region you visit from, your device and browser type, and how you arrived. This is collected through Google Analytics and Cloudflare Web Analytics, as described under Cookies and analytics.
  • Spam-protection signals. The contact form is protected by Cloudflare Turnstile, which checks that a submission comes from a person and not an automated script. To do this, Cloudflare processes limited technical signals from your browser, such as your IP address and user-agent. Turnstile is designed to be privacy-preserving and is not used to track you across websites or for advertising. How Cloudflare handles these signals is set out in its Turnstile Privacy Addendum.

I do not ask for, or intentionally collect, sensitive information such as health, financial account or identity details. Please do not include information of that kind in your message.

How I use your information

  • To respond to your enquiry, discuss your project and provide a scope and quote.
  • To keep a record of our correspondence in case you get back in touch.
  • To understand, in aggregate, how the site is used so I can improve its content, speed and structure.

I do not use your details for marketing, and I will not send you unsolicited email.

Basis for using your data

Under the DPDP Act, I use your personal data on the following grounds:

  • Your request. When you send an enquiry you voluntarily provide your details so that I can respond, and I process them only for that purpose.
  • Your consent. Analytics cookies are used only with your consent, which you give through the cookie banner and can withdraw at any time.

Cookies and analytics

This site uses Google Analytics, loaded through Google Tag Manager, to measure traffic and understand how visitors use the pages. Google's tags are loaded only after you accept analytics cookies through the cookie banner. Until then, or if you decline, they are not loaded at all. Once you accept, Google processes usage data on my behalf, configured to avoid collecting more than necessary, and it is not used for advertising.

The site also uses Cloudflare Web Analytics as a lightweight, privacy-preserving backup measure. Unlike Google Analytics it is cookieless: it sets no cookies, does not fingerprint your device and does not track you across other websites. It records only aggregate, pseudonymous data such as page views and referrers, which cannot identify you, so it runs without needing consent.

You can accept or decline analytics at any time. Full details, including the specific cookies used and how to opt out, are in the Cookie Policy.

Who I share data with

I do not sell your personal data, and I do not share it except with the service providers that help me run the site:

  • Web3Forms, which delivers contact-form submissions to my inbox.
  • Cloudflare, which hosts the site, runs the Turnstile anti-spam check on the contact form, checks that the email domain you enter can receive mail (a lookup of the domain only, through Cloudflare's public DNS), and provides cookieless Cloudflare Web Analytics.
  • Google (Google Analytics and Google Tag Manager), which processes site-usage data as described above.
  • My email provider, which stores our correspondence.

These providers act on my instructions. I may also disclose data where the law requires it.

How long I keep data

I keep enquiry correspondence only as long as needed to deal with your request, and for a reasonable period afterwards in case you get back in touch, then delete it. Analytics data is retained according to the settings in Google Analytics and is not used to identify you personally.

Your rights

Under India's data protection law you have the right to:

  • ask for a summary of the personal data I hold about you and how it is used;
  • ask me to correct, complete or update data that is inaccurate;
  • ask me to erase your data where there is no longer a reason to keep it;
  • withdraw your consent for analytics at any time;
  • nominate another person to exercise these rights for you if you are unable to;
  • raise a grievance with me and have it addressed.

To exercise any of these, email hellonabharoy.com.

How I protect your data

I take reasonable technical and organisational measures to keep your data safe, including secure hosting, encrypted connections (HTTPS) and limiting who can access your information. No method of transmission over the internet is completely secure, so I cannot guarantee absolute security, but I work to protect your data at every stage.

International transfers

Some of the providers above, including Google, may store or process data on servers outside India. Where that happens, I use established providers that offer recognised safeguards and handle data in line with applicable law.

Children's privacy

This site is not aimed at children. Under India's data protection law a child is anyone under 18, and I do not knowingly collect their data. If you believe a child has provided me with personal data, please contact me and I will delete it.

Changes to this policy

I may update this policy to reflect changes to the site, the services I use or the law. The date at the top shows when it was last revised, and the current version always applies.

Contact and complaints

For any privacy question, or to exercise your rights, email hellonabharoy.com. If you are not satisfied with my response, you may raise a complaint with the Data Protection Board of India.