This site collects very little, and I want to be precise about exactly what it is. No cookies are set, no analytics run, nothing you do here is tracked, and nothing is ever sold or shared for marketing. The only personal information I hold is what you choose to type into the contact form.
1. Who is responsible for your data
This website, deepankar.xyz, is operated by me, Deepankar Bhadrasen. I work as a sole proprietor, which means this is a one person business and I am personally responsible for it. I am based in Bhopal, India, and I am the data controller for any personal information collected through this site. You can reach me about anything on this page at sales@deepankar.xyz.
2. What this site does not do
It is worth stating the absences plainly, because they remove most of what a privacy policy usually needs to cover:
- No cookies are set by this site, so there is no cookie banner and nothing to consent to on that front.
- No analytics of any kind. No Google Analytics, no Tag Manager, no Plausible, no Fathom, no heatmaps or session recording.
- No advertising or marketing pixels, no Meta pixel, no remarketing, no cross-site tracking.
- No accounts, no logins, no profiles, no behavioural profiling and no automated decision making.
- Your information is never sold, rented, or shared with anyone for their own marketing purposes.
3. What I collect when you use the contact form
The contact form on the home page and the about page is the only place this site gathers personal information. When you submit it, the following is sent to me:
- Your name
- Your email address
- Your role, if you fill it in
- Your company, if you fill it in
- The project budget you select on the slider, recorded both as a label and as a number
- Your message
- Which page you sent it from, and the date and time of submission
Only your name, email address and message are required. Role, company and budget are optional, and the form works perfectly well if you leave them blank. Please do not include confidential information, credentials, or commercially sensitive detail in the message field. A first enquiry does not need it, and a plain web form is not the right channel for it.
4. Why I collect it, and my lawful basis
I use what you send for one purpose only: to read your enquiry, reply to it, and keep track of our conversation if it turns into a piece of work. I do not add you to a newsletter or a marketing list, because I do not run one.
Where the UK and EU General Data Protection Regulation applies, my lawful basis is your consent, given when you choose to submit the form, together with my legitimate interest in responding to business enquiries and keeping ordinary records of them. Where India's Digital Personal Data Protection Act, 2023 applies, I process the information on the basis of the consent you give by submitting the form for the purpose stated on this page.
5. Where your information goes, and who can see it
When you submit the form, the information travels to an automation workflow I run on my own server. That workflow does exactly two things. It sends me an email letting me know someone has enquired, and it saves the enquiry into my own customer record system, which runs on the same server I control.
I am the only person who reads these enquiries. I do not use a third party sales platform, and your information is not passed to any marketing tool.
The service providers involved in operating the site are limited to the following, and they act as processors on my behalf:
- AquaHost hosts this website and the email account that receives enquiry notifications. Their servers used for this site are located in India.
- Hostinger provides the private server on which my automation workflow and my customer record system run. That server is located in India.
6. External services your browser contacts
The fonts used across this site are served directly from this domain. Your browser does not contact Google Fonts, or any other font service, at any point. That was a deliberate choice, because loading fonts externally would send your IP address to a third party purely to display text.
Three things are still loaded from external services, and when your browser requests them those services receive your IP address, your browser and device type, and the address of the page you are viewing. That is an unavoidable consequence of loading any external file on the web, but you deserve to know it happens and who is involved:
- jsDelivr serves the two small animation libraries the site uses for smooth scrolling and motion.
- Iconify and Simple Icons serve the technology logos shown on the home page and the about page.
None of these are used to track you, and I receive no information back from any of them. I hold no account with them and cannot identify you through them. I intend to bring these files onto my own domain as well, which will remove the last external requests entirely.
7. Storage in your browser
The site saves a single value in your browser's local storage, under the name theme, holding either dark or light. Its only job is to remember whether you switched the site to light mode so it looks the same next time you visit.
This is not a cookie, it is never sent to me or to any server, and it contains nothing personal. Clearing your browser data removes it, and the site continues to work normally without it.
8. How long I keep it
I keep enquiry records for up to 24 months after our last contact, and then delete them. If a conversation turns into paid work, I keep the records needed for that engagement and for any tax or accounting obligation that applies to it, for as long as the law requires.
If you would rather I did not wait, ask me and I will delete your information sooner. See the next section.
9. Your rights
Whatever country you are in, you can ask me to:
- Tell you what information about you I hold
- Send you a copy of it
- Correct anything that is wrong
- Delete it
- Stop using it, or restrict how I use it
- Withdraw consent you previously gave, which will not affect anything already done lawfully before you withdrew it
Email sales@deepankar.xyz and I will action it within 30 days. There is no charge, and you do not need to explain your reasons. I may need to confirm your identity first, purely to make sure I am not disclosing someone else's information to the wrong person.
If you are in the UK or the EU and you are unhappy with how I have handled your information, you have the right to complain to your national data protection authority. If you are in India, you may raise a grievance with me first at the address above, and you have the right to escalate to the Data Protection Board of India.
10. International transfers
Both the website and my automation server are located in India. If you contact me from the United Kingdom, the European Economic Area, or elsewhere outside India, the information you submit will be transferred to and stored in India, which is outside those jurisdictions. By sending the form you are asking me to reply to you, and that transfer is a necessary part of doing so. The information stays on servers I control, is used only to answer you, and is deleted on the schedule described in section 8.
11. Security
The site is served over an encrypted HTTPS connection, and the form submission is encrypted in transit. Fonts are served from this domain rather than a third party, which removes an external request on every page view. My server and record system are access controlled and only I hold the credentials. External code loaded by the site is locked to specific verified versions, so a compromised third party cannot silently substitute different code.
No system is perfectly secure and I am not going to pretend otherwise. What I can commit to is that I hold as little as possible, for as short a time as is useful, on infrastructure I control myself.
12. Children
This is a professional portfolio aimed at businesses. It is not directed at children, and I do not knowingly collect information from anyone under 18. If you believe a child has sent me information through this site, tell me and I will delete it.
13. Changes to this policy
If I change what this site collects or how it is handled, I will update this page and change the effective date at the top. Material changes will be summarised here so you can see what moved rather than having to compare versions.
14. Contact
Questions about this policy, or any request about your information:
Deepankar Bhadrasen
Bhopal, India
sales@deepankar.xyz