Privacy Policy

Goated Designs is a web and SaaS development studio based in Anand, Gujarat, India. This policy explains what personal data we collect when you use goateddesigns.in or engage us for a project, why we collect it, and what you can ask us to do with it.

Throughout this policy, "we", "us" and "our" mean Goated Designs. "You" means anyone visiting the site, contacting us, or working with us as a client.

Business address

Navrachna Society, Bhavna Colony, Anand, Gujarat 388001, India.

Email

works.goateddesigns@gmail.com

Phone / WhatsApp

+91 81558 49212

We collect very little, and only where there is a reason for it.

Information you give us

Your name, email address, the service you selected, and the message you write when you submit the contact form. If you reach us over WhatsApp or email instead, we hold whatever you choose to send in that conversation.

Newsletter signups

The email address you enter in the footer subscribe box. That form opens your own email client and sends the address to us as a normal email - we receive it the same way we receive any other message.

Client and project information

During an engagement we may hold business contact details, billing information, project briefs, brand assets, and credentials you share so we can build and deploy your product.

Technical information

Our hosting provider records standard server logs - IP address, browser and device type, pages requested, and timestamps - as part of serving and securing the site.

We do not ask for, and do not want, sensitive personal data - government identifiers, health information, biometric data, or payment card numbers. Please do not send these through the contact form.

Every use below maps to something you asked for or something we are required to do:

• Replying to your enquiry and preparing a scope, timeline and quote.
• Delivering, supporting and maintaining work you have engaged us for.
• Invoicing, accounting and meeting our tax and record-keeping obligations under Indian law.
• Sending occasional notes about our work, but only to addresses that asked for them.
• Keeping the site available, secure and free of abuse.

We do not sell your personal data. We do not rent, trade, or share it with advertisers or data brokers, and we do not use it to build profiles for targeted advertising.

For visitors and clients in India, we process personal data under the Digital Personal Data Protection Act, 2023 - on the basis of the consent you give when you submit a form or message us, and for the legitimate uses the Act permits, such as fulfilling a contract you have entered into with us.

For visitors in the UK and the European Economic Area, we rely on the UK GDPR and EU GDPR: your consent for enquiries and newsletter emails, performance of a contract for client work, our legitimate interests in running and securing the site, and legal obligation for financial records.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that already took place while consent was in force.

This site does not set advertising or profiling cookies, and we do not run third-party analytics or tracking pixels on it.

Fonts are served from our own domain rather than a third-party font CDN, so simply loading a page does not hand your IP address to another company for that purpose.

Your browser may store a small amount of data locally to remember preferences such as light or dark mode. That stays on your device and is never transmitted to us.

If we introduce analytics later, we will update this section and this policy's date before turning it on, and we will use a privacy-respecting configuration.

We use a small number of service providers to run the studio. They only receive what they need, and only to provide their service to us:

EmailJS

Delivers contact form submissions to our inbox. It processes the name, email, service and message you enter.

Hosting and infrastructure providers

Serve the website and store server logs generated when pages are requested.

Email and file storage providers

Hold our correspondence and the project files you send us during an engagement.

WhatsApp (Meta)

If you start a chat with us through a WhatsApp link on the site, that conversation is handled by WhatsApp under its own privacy policy, not ours.

We will also disclose information where we are legally required to - for example in response to a valid order from a court or a competent authority in India. If that happens and we are permitted to tell you, we will.

When we build a product for you, we sometimes come into contact with personal data belonging to your users - a customer list to migrate, a staging database, or an admin account to configure.

In that situation you remain the data fiduciary or controller and we act on your instructions. We access that data only to do the work, we do not use it for anything else, and we return or delete it when the engagement ends or when you ask.

Where your project needs a separate data processing agreement to satisfy your own obligations, we are happy to sign one.

Enquiries that do not become projects

Up to 24 months, then deleted, so we have context if you come back to us.

Client project records and correspondence

For the duration of the engagement and up to 3 years after, so we can support what we built.

Invoices and financial records

For as long as Indian tax and company law requires us to retain them.

Newsletter addresses

Until you unsubscribe or ask us to remove you.

Server logs

For the short retention window our hosting provider applies, typically a matter of weeks.

The site is served over HTTPS. Access to our inboxes, repositories and file storage is limited to the people working on your project and protected by strong, unique credentials with two-factor authentication where the provider supports it. Client credentials are shared through secure channels and rotated or revoked at the end of an engagement.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the Data Protection Board of India as required under the DPDP Act, without undue delay.

Under the DPDP Act, 2023, if you are in India you have the right to:

• Ask for a summary of the personal data we hold about you and how we process it.
• Have inaccurate or incomplete data corrected, completed or updated.
• Have your data erased once the purpose it was collected for has been served.
• Nominate another person to exercise these rights on your behalf if you die or become incapacitated.
• Raise a grievance with us, and escalate to the Data Protection Board of India if our response does not resolve it.

If you are in the UK or the EEA, you additionally have the rights to object to processing, to restrict it, to data portability, and to lodge a complaint with your local supervisory authority.

To exercise any of these, email works.goateddesigns@gmail.com with what you need. We will respond within 30 days. We may ask you to confirm your identity first, purely so we do not hand your information to someone else.

We are based in India, and our service providers may store or process data on servers outside India, including in the United States and the European Union.

Where data moves across borders we rely on the provider's own safeguards, such as standard contractual clauses, and we only use providers that commit to protecting the data they hold for us.

This site and our services are aimed at businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, email us and we will delete it.

Our site links out to places we do not control - client projects, our Instagram, WhatsApp, and other third-party sites. Once you follow one of those links you are covered by that site's privacy policy, not this one. It is worth reading theirs.

We will update this policy when what we do changes. The date at the top always reflects the current version. For material changes we will make the update visible on the site rather than quietly editing the page, and where the law requires it we will ask for your consent again.

Questions, requests and complaints about privacy all go to the same place, and a person reads them:

Grievance contact

Goated Designs - works.goateddesigns@gmail.com

Post

Navrachna Society, Bhavna Colony, Anand, Gujarat 388001, India

Response time

Within 30 days of receiving your request.

If you are not satisfied with how we handle a grievance, you may escalate it to the Data Protection Board of India, or to your local supervisory authority if you are in the UK or the EEA.