Skip to content

Privacy Policy

Last updated 10 October 2026

Template — pending legal review. Bracketed items must be completed by Shanu&Co before this page is relied on.

This policy explains what personal data Shanu&Co collects through shanuandco.com, why, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, for visitors in the EU/UK, the GDPR.

1. Who we are

Shanu&Co ("we", "us") is the data fiduciary (DPDP Act) and data controller (GDPR) for data collected on this website. Registered address: [registered business address]. Contact: connect@shanuandco.com.

2. What we collect

  • Contact form: name, email, company (optional), the service you need, budget range and your message.
  • Direct contact: whatever you choose to send us by email, phone or WhatsApp.
  • Analytics (only with consent): anonymous, aggregated page views and button clicks via Plausible Analytics. Plausible does not use cookies or collect personal identifiers.
  • Technical logs: our host and form provider may briefly process IP addresses to deliver the site and block spam.

3. Why we use it, and our legal basis

  • To reply to your enquiry and arrange a strategy call — based on your consent when you submit the form (DPDP Act s.6) and, under GDPR, steps prior to entering a contract (Art. 6(1)(b)).
  • To keep the form free of spam and abuse — legitimate use / legitimate interests (GDPR Art. 6(1)(f)).
  • To understand which pages are useful — your consent via the cookie banner (GDPR Art. 6(1)(a)).

4. Who we share it with

We do not sell personal data. We use these processors to run the site:

  • Netlify — website hosting and form processing.
  • Resend — delivering form submissions to our inbox.
  • Cloudflare Turnstile — spam protection on the contact form.
  • Plausible Analytics — privacy-friendly analytics, only after consent.

Some of these providers process data outside India. Where data leaves India or the EU, we rely on the provider's contractual safeguards (such as Standard Contractual Clauses).

5. How long we keep it

Enquiries are kept for up to [24 months] after our last contact, then deleted, unless they become part of a client engagement. Analytics data is aggregated and contains no personal identifiers.

6. Your rights

Depending on where you live, you can ask us to:

  • access a summary of the personal data we hold about you;
  • correct, complete or update it;
  • erase it;
  • withdraw consent at any time (this does not affect processing already done);
  • nominate another person to exercise your rights (DPDP Act);
  • object to or restrict processing, and receive your data in a portable format (GDPR).

Email connect@shanuandco.com and we will respond within [30] days.

7. Grievance officer

[Name], Grievance Officer, Shanu&Co — connect@shanuandco.com. If you are not satisfied with our response, you may complain to the Data Protection Board of India or, in the EU/UK, your local data protection authority.

8. Security

The site is served only over HTTPS with strict security headers. Form submissions are validated on our server, rate-limited and screened for spam. No method of transmission is perfectly secure, but we take reasonable safeguards as required by the DPDP Act.

9. Children

This website is not directed at children under 18, and we do not knowingly collect their personal data.

10. Changes to this policy

We will post any changes on this page and update the date above.