This policy explains how Elgrith (“we”, “us”) handles personal data collected through elgrith.com. We are headquartered in New Delhi, India, and we act as the Data Fiduciary for this data under the Digital Personal Data Protection Act, 2023 (the “DPDP Act”).
In short: we only collect what you choose to send us, we use it to reply to you, we do not sell it, and we do not use tracking or advertising cookies.
1. What we collect
When you fill in a contact, partner or audit form on this website, we collect:
- your name;
- your email address;
- your phone or WhatsApp number;
- your website address, if you give one;
- the service you are interested in, if you choose one;
- your message; and
- the page the form was sent from and the date and time it was sent.
If you email, call or message us on WhatsApp, we receive whatever you share in that conversation, along with your email address or phone number.
Like most websites, our hosting provider automatically records basic technical information, such as IP address, browser type and the pages requested, in server logs used for security and troubleshooting. We do not use this information to identify or profile visitors.
2. Why we use it
We use your personal data only to:
- reply to your inquiry and discuss your project;
- prepare a scope, timeline or quote you have asked for;
- deliver and support work if you become a client; and
- keep the website secure and prevent spam or abuse.
By sending a form, you consent to us using the details you provide for these purposes. We do not add you to a marketing list, sell your data or share it with advertisers.
3. Where it is stored
Form submissions are handled in two ways:
- Database. Each inquiry is saved in a MongoDB database hosted by a cloud provider, which only authorized Elgrith staff can access.
- Email. A copy of each inquiry is emailed to our team inbox at connect@elgrith.com so we can respond quickly.
These service providers process data on our behalf and under their own security commitments. Some of them may store data on servers outside India. Any such transfer is made in line with the DPDP Act and any restrictions notified by the Government of India.
We use reasonable security safeguards, including encrypted connections (HTTPS), access controls and limited staff access, to protect your data. No system is perfectly secure, but we will notify you and the Data Protection Board of India of a personal data breach where the law requires it.
4. How long we keep it
We keep inquiries for as long as we need them to respond and follow up, and generally for no more than 24 months after our last conversation. If you become a client, we keep project, contract and billing records for as long as Indian tax and company laws require. When data is no longer needed, we delete it, or anonymize it so it no longer identifies you.
5. Cookies
This website does not use analytics, advertising or tracking cookies, and it does not show cookie banners because none are needed.
The only cookie we set is a strictly necessary session cookie (elg_admin) used when an authorized Elgrith team member signs in to the site’s private admin area. It expires after 12 hours and is never set for ordinary visitors. If we add analytics or other cookies in future, we will update this policy first.
6. Your rights under the DPDP Act
Under the DPDP Act, 2023, you have the right to:
- Access a summary of the personal data we hold about you and how we use it;
- Correct, complete or update data that is inaccurate or out of date;
- Erase your data when it is no longer needed for the purpose you shared it for;
- Withdraw consent at any time. This will not affect anything we did lawfully before you withdrew it;
- Nominate another person to exercise these rights on your behalf in the event of your death or incapacity; and
- Raise a grievance with us, and if you are not satisfied with our response, complain to the Data Protection Board of India.
To use any of these rights, email connect@elgrith.com from the address you used to contact us, or tell us how we can verify who you are. We will respond within the time the law allows.
7. If you are in the UK, EU or USA
We work with clients in the United Kingdom and the United States as well as India. Where UK GDPR, the EU GDPR or US state privacy laws such as the California Consumer Privacy Act (CCPA) apply to you, you may have additional rights, for example to access, correct, delete or receive a copy of your data, or to object to certain uses of it. Contact us at connect@elgrith.com and we will respond as required by applicable law.
We do not sell or share personal data for cross-context behavioral advertising. If you are in the UK, you can also complain to the Information Commissioner’s Office (ICO).
8. Children
This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us their details, contact us and we will delete them.
9. Links to other websites
Our pages may link to other websites, such as client projects or GitHub. We are not responsible for their privacy practices, so please read their policies before sharing data with them.
10. Changes to this policy
We may update this policy when our services, tools or the law change. The “Last updated” date at the top always shows the current version. Significant changes will be highlighted on this page.
11. Contact and grievances
For questions, requests or complaints about your personal data, contact:
Elgrith, New Delhi, India
Email: connect@elgrith.com
Phone: +91 96039 20001
You can also read our Terms of Use.