Privacy Policy

Information you give us. When you use our contact form, email us, or message us on LinkedIn, we receive your name, email address and anything you include in your message.

Analytics. We use Google Analytics to understand how visitors use our site. This includes pages viewed, time on page, device and browser type, approximate location (city or country) and how you arrived at our site. Google Analytics does not give us your name or email address.

• EEA, UK and Switzerland: Google Analytics sets no cookies unless you click “Accept”. Until then, it may send Google limited cookieless signals, such as the page viewed and browser type.
• Everywhere else: analytics is on by default. You can switch it off at any time using Cookie Settings in the footer.

Security data. Our contact form uses Google reCAPTCHA to prevent spam. reCAPTCHA collects device, browser and interaction data so it can tell people from bots. We also use your IP address to verify reCAPTCHA results with Google and to limit the contact form to 3 messages per 24 hours.

Technical logs. Our hosting provider, Vercel, automatically records basic technical data such as IP address, browser type and request time. This keeps the site secure and running well. Vercel also uses your IP address to tell us whether you are in the EEA, UK or Switzerland, so we know whether to ask for cookie consent. We store only that result, not your country or IP address.

We use your information to:

• reply to your enquiries and discuss potential projects
• understand and improve how our website performs
• protect the site against spam, abuse and security threats

We do not sell your personal data, use it for advertising profiles, or make automated decisions about you.

We process your data based on:

• your consent, when you submit the contact form or accept analytics cookies (EEA, UK and Switzerland)
• our legitimate interests, in keeping the site secure, responding to business enquiries and, outside the EEA, UK and Switzerland, understanding how our site is used

You can withdraw your consent at any time.

• Google Analytics (_ga, _ga_*)

  Purpose

  Site usage statistics

  When it’s set

  EEA, UK and Switzerland: only after you click “Accept”. Elsewhere: when you visit, unless you switch analytics off in Cookie Settings

• Google reCAPTCHA

  Purpose

  Spam and bot protection

  When it’s set

  When the home page, which contains the contact form, loads

• ah_consent

  Purpose

  Remembers your cookie choice for 12 months

  When it’s set

  When you click “Accept” or “Reject”

• ah_region

  Purpose

  Decides whether to show the cookie banner

  When it’s set

  When you visit

• contact:sentAt (local storage)

  Purpose

  Limits the contact form to 3 messages per 24 hours

  When it’s set

  When you send a message

You can change your choice at any time using the Cookie Settings link in the footer. You can also block cookies in your browser settings.

We share data only with service providers that help us run this website:

• Google: Analytics, reCAPTCHA and email (Gmail)
• Vercel: website hosting
• Our email delivery provider: to deliver form submissions to our inbox

These providers process data under their own privacy and security commitments. We may also disclose information if required by law.

Some of our providers store data outside India, including in the United States. Where required, these transfers are protected by appropriate safeguards, such as Standard Contractual Clauses.

• Enquiries: up to 24 months, or longer if they lead to a project, as set out in our contract with you
• Analytics data: 14 months
• Hosting logs: for a short period, as set by Vercel

Depending on where you live, you can:

• access, correct or delete your personal data
• withdraw consent or object to processing
• request a copy of your data in a portable format

India (DPDP Act, 2023): you can contact our Grievance Officer below. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

EU and UK visitors: you can complain to your local data protection authority.

California residents: we do not sell or share personal information.

To make a request, email us. We aim to respond within 30 days.

We use reasonable technical and organisational measures to protect your data, including HTTPS encryption and restricted access. No method of transmission over the internet is completely secure.

This website is not intended for anyone under 18, and we do not knowingly collect their data.

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed.