Who we are
Analytical Webs is an independent digital systems studio. For the personal data described here, we are the data controller (under the GDPR and UK GDPR) and the data fiduciary (under India’s Digital Personal Data Protection Act, 2023). That means we decide why and how your data is used, and we are responsible for it.
Analytical Webs A-26, KPS, Nilamber CircleVasna, Vadodara 390007Gujarat, IndiaThis policy covers www.analyticalwebs.com and enquiries made through it. It does not cover data we process inside client systems during an engagement. That is governed by the contract and data processing terms we agree with each client.
What we collect
We collect personal data from three places, and nowhere else. We never buy data, enrich it from other sources or build profiles.
Name, email, company, industry, the services you pick, your brief, timeline and budget.
- Why
- To read your enquiry, reply to you and, if we work together, scope and deliver the project.
- Legal basis
- Steps you ask for before a contract, and our legitimate interest in answering enquiries. Under the DPDP Act, your consent when you press send.
- Kept for
- 24 months if no work follows. For clients, the engagement plus the period Indian tax and accounting law requires.
IP address, browser type, the page requested and the time. Recorded automatically by our host when any page loads.
- Why
- To keep the site running, secure and free of abuse.
- Legal basis
- Our legitimate interest in operating a secure website.
- Kept for
- A short rolling window set by the host, then deleted automatically.
Your browser requests our typefaces from Google Fonts, which receives your IP address to deliver them.
- Why
- To display the site in its intended typefaces.
- Legal basis
- Our legitimate interest in presenting the site consistently.
- Kept for
- Handled by Google under its own policy. We receive nothing.
Please don’t include sensitive information in your brief, such as health records, financial account details or other people’s personal data. If a project involves data like that, we will agree a secure way to share it, under NDA, before you send anything.
How we use it
- Reply to your enquiry and answer follow-up questions
- Prepare a proposal or estimate you asked for
- Deliver, invoice and support work you engage us for
- Keep the website secure and working
- Meet legal, tax and accounting obligations
- Sell, rent or trade your data
- Add you to newsletters or marketing lists
- Use your brief to train AI models
- Make automated decisions about you
- Share your brief with anyone outside the work
Cookies & tracking
This site sets no cookies and runs no analytics, advertising or social media tracking. That is why there is no cookie banner.
One small note: the short intro animation stores a single flag, awl-seen, in your browser’s session storage so it plays once per visit. It contains no personal data, is never sent to us and is deleted when you close the tab.
If we ever add analytics, we will choose a privacy-first tool, update this policy first and ask for consent wherever the law requires it.
International transfers
We are based in India and work with clients in the US, UK, EU and elsewhere. Our service providers may process data in the United States and other countries. Where data leaves the UK or European Economic Area, we rely on recognised safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or an adequacy decision or certification where one applies.
How we protect it
- The whole site is served over HTTPS, so your brief is encrypted in transit.
- Briefs go to a single inbox protected by 2-step verification.
- Access is limited to the people working on your enquiry.
- We sign an NDA before you share confidential details, on request.
- We delete enquiries once the retention period above ends.
No system is perfectly secure. If a personal data breach affects you, we will tell you and the relevant authority without undue delay, as the law requires.
Your rights
Depending on where you live, you have some or all of the rights below. We extend them to everyone, wherever you are.
- AccessAsk for a copy of the personal data we hold about you.
- CorrectionAsk us to fix anything inaccurate or incomplete.
- ErasureAsk us to delete your data where we have no reason to keep it.
- Objection & restrictionObject to, or ask us to limit, how we use your data.
- PortabilityReceive your data in a common, machine-readable format.
- Withdraw consentWhere we rely on consent, withdraw it at any time. It is as easy as giving it.
- NominateUnder India’s DPDP Act, name someone to exercise your rights if you cannot.
- ComplainRaise a concern with us first, or with your data protection authority.
To use any of them, send a request through our contact form. We may need to confirm your identity first. We reply within one month, and there is no charge.
You can also complain to a regulator: the Information Commissioner’s Office in the UK, your local supervisory authority in the EU, or the Data Protection Board of India. We would appreciate the chance to resolve it with you first.
US residents: we do not sell or share personal information for targeted advertising, as those terms are defined under California and other US state privacy laws.
Children
Our services are for businesses. This site is not directed at anyone under 18, and we do not knowingly collect their data. If you think a child has sent us information, let us know and we will delete it.
Changes to this policy
We update this policy when our practices or the law change. The date at the top always shows the latest version. If a change materially affects how we use data you have already sent us, we will tell you directly.
Contact & grievances
For any question, request or complaint about your personal data, including grievances under India’s DPDP Act, contact us through the form below. Mention “Privacy request” and we will respond within one month.