Privacy notice
Draft for lawyer review. Version 0.1, written 24 October 2026 against the Digital Personal Data Protection Act 2023 and the 2025 Rules, with the GDPR in view for visitors in the EU and UK. It becomes effective when a lawyer has reviewed it and the business details below are confirmed.
Brimpa, a sole proprietorship operated by Badal in Gujarat, India ("Brimpa", "I"), is the data fiduciary for the personal data described here. Contact for anything in this notice: brimpatechnologies@gmail.com.
1. What is collected, and why
| Data | When | Purpose | Basis |
|---|---|---|---|
| Name, email, phone number, your message and an optional budget range | When you send the contact form | To reply to you about the project you describe | You asked for the reply (legitimate use under section 7 of the DPDP Act; contract or legitimate interest under the GDPR) |
| The page you sent the form from and the time | With the form | To understand what you were looking at when you wrote | As above |
| Your IP address, only when a spam check is enabled on the form | With the form | To verify the spam check | Legitimate interest in keeping the form usable |
| Aggregate page views without cookies, only when page counting is enabled | On every page | To see which pages are read | Legitimate interest; no cookies, no cross-site identifiers |
| Your theme choice (light or dark) | When you click the theme button | To keep the theme you chose | Stored only in your own browser; never sent anywhere |
No account exists on this site, no advertising cookies are set, and nothing is collected before you send the form. The consent box on the form is unticked until you tick it.
2. Who sees it
| Recipient | Role | Data | Where |
|---|---|---|---|
| The hosting provider (named here once the lawyer confirms the wording) | Processor: serves the site and receives the form | All traffic to the site; the form content in transit | Data centre location to be confirmed |
| Google LLC (Gmail) | Processor: delivers and stores the received message | Name, email, message | Global; EU and US data centres |
Personal data is not sold and is not shared with anyone else.
3. How long it is kept
A message is kept in the mailbox for as long as the conversation about your project continues and for 12 months after the last reply, then deleted. If the project goes ahead, the messages become part of the project record and are kept for the duration of the contract and 3 years after it, for tax and dispute reasons. These periods are to be confirmed by the lawyer.
4. Your rights
You can ask for a summary of the personal data held about you, for a correction, for erasure, and for a note of who it was shared with. You can nominate another person to exercise these rights if you cannot. Email brimpatechnologies@gmail.com with the subject "Privacy request". Acknowledgement within 7 days, answer within 30 days; never more than the 90 days the law allows.
5. Withdrawing consent
The only processing that rests on consent is storing your message to reply. To withdraw, send one email asking for the message to be deleted. It is deleted the same way it was received, with one message, and nothing else is affected.
6. Children
This site is for businesses and is not intended for anyone under 18. No data from children is knowingly collected.
7. Security
The site is served over HTTPS only. The form endpoint accepts only what it needs, limits size, and stores nothing itself. Mail accounts use two-factor authentication.
8. Complaints
If a request is not resolved to your satisfaction, you may complain to the Data Protection Board of India once it publishes its process, or, in the EU or UK, to your local supervisory authority.
9. Changes
Changes are listed here with a date and a version number. Material changes are announced on the home page for 30 days.
