Privacy Policy

• Contact and enquiry data: name, email address, phone number, company name, service interest, budget range, timeline and the project details you write in our forms.
• Project data: content, credentials and assets you share with us to deliver the Services.
• Billing data: invoice records, amounts, currency and payment status. Card details are handled by Stripe — we never see or store full card numbers.
• Technical data: IP address, browser type, device type, pages visited and referring URL, collected only where you consent to analytics cookies.
• Correspondence: emails, call notes and support tickets.

• To respond to enquiries and prepare proposals — legitimate interests, and steps taken at your request prior to entering a contract.
• To deliver the Services and manage your project — performance of a contract.
• To take payment, issue invoices and handle refunds — performance of a contract and legal obligation.
• To keep accounting and tax records — legal obligation.
• To measure site usage and improve our website — consent (analytics cookies only).
• To defend legal claims and evidence delivery and acceptance — legitimate interests.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

• Stripe, Inc. — payment processing. Stripe collects and processes card data directly under its own privacy policy. We receive only the last four digits, card brand and payment status.
• Supabase — database and authentication hosting for enquiry records and project data.
• Email and hosting providers — to operate this website and deliver correspondence.
• Advertising and analytics platforms — only for clients who engage us for marketing services, and only under their instructions.

Some processors are located in the United States and other countries. Where personal data is transferred internationally, transfers are made under appropriate safeguards such as standard contractual clauses.

We set essential cookies necessary to operate the site. Non-essential cookies, including analytics, are disabled until you accept them in our consent banner. You can change your choice at any time. See our Cookie Policy for detail.

• Enquiries that do not become projects: 24 months from last contact.
• Project records, contracts and deliverable history: 7 years from project completion.
• Invoices and financial records: 7 years, as required for tax and accounting.
• Analytics data: 14 months where analytics consent is given.
• Correspondence: 24 months unless it relates to an active contract or dispute.

The site is served over HTTPS. Access to project data is restricted to team members who need it, credentials are stored in an encrypted password manager, and database access is governed by row-level security rules. No system is perfectly secure, but we take reasonable and appropriate technical and organisational measures to protect your data.

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete data we no longer have a lawful basis to keep.
• Restriction and objection — limit or object to certain processing, including processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, without affecting processing already carried out.
• Complain to your local supervisory authority.

• Right to know what personal information we collect, use and disclose.
• Right to delete personal information, subject to legal retention obligations.
• Right to correct inaccurate personal information.
• Right to non-discrimination for exercising your rights.
• We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

Email support@udayanit.com with the subject "Privacy Request". We acknowledge requests within 3 business days and respond within 30 calendar days. We may ask for information to verify your identity before acting on a request.

Our services are for businesses. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact support@udayanit.com and we will delete it.

We may update this policy. The version number and effective date at the top of this page always reflect the current version. Material changes will be notified to active clients by email.