Privacy Policy
In short: we only collect what you type into our contact form, we use it only to reply to your enquiry, we don't sell it, we don't use advertising or tracking cookies, and you can ask us to see, correct or delete it at any time.
1. Who we are
This website, lensandlayers.in, is operated by [Legal entity name, e.g. Lens and Layers Digital Solutions LLP / Pvt Ltd / proprietor name] (“Lens & Layers”, “we”, “us”), having its registered office at [Registered address, city, state, PIN], India.
For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary for personal data collected through this website. This policy is also published in accordance with Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. What personal data we collect
a) Information you give us
When you send an enquiry through the contact form we collect:
| Data | Required? | Why |
|---|---|---|
| Name | Yes | To address you and identify your enquiry |
| Email address | Yes | To reply and send you a confirmation email |
| Phone number | Optional | To call you back if you prefer |
| Company / brand | Optional | To understand who the work is for |
| Services of interest and your message | Optional | To understand and respond to your request |
| Page the form was sent from, date and time, and your consent | Automatic | To keep a record of the enquiry and of your consent |
We do not ask for, and you should not send us, sensitive personal data such as passwords, financial account or card details, health information, biometric data or government ID numbers through the form.
b) Information collected automatically
Our hosting and security provider (Cloudflare) processes technical data such as your IP address, browser type and the pages requested, in order to deliver the site and protect it against abuse and attacks. When the page loads, your browser also requests fonts from Google Fonts and some images from Unsplash, which means those providers receive your IP address and browser information as part of that request.
c) Cookies and tracking
This website does not set cookies and does not use analytics, advertising pixels, cross-site tracking or profiling. If we ever add analytics or similar tools, we will update this policy and, where required by law, ask for your consent first.
3. How and why we use your data
We process the personal data you submit on the basis of your consent (Section 6 of the DPDP Act), which you give by ticking the consent box on the contact form, and only for these purposes:
- to reply to your enquiry and discuss the services you asked about;
- to send you an automatic confirmation that we received your enquiry;
- to prepare a proposal or quotation if you request one;
- to keep a record of our communication and of your consent; and
- to comply with legal obligations and protect the website from misuse.
We will not use your details for marketing newsletters, sell them, rent them, or share them with third parties for their own marketing.
4. Who we share it with
We use a small number of service providers (“Data Processors”) who process data on our behalf, under their own security and confidentiality commitments:
| Provider | What they do |
|---|---|
| Google LLC (Google Workspace / Apps Script, Sheets, Gmail) | Receives the form, stores enquiries in a private spreadsheet, sends the confirmation email |
| Cloudflare, Inc. | Website hosting, content delivery and security |
| Google Fonts and Unsplash | Deliver the fonts and some images shown on the site |
We may also disclose personal data where required by law, a court order or a lawful request from a government authority in India.
5. Where your data is stored
Our service providers operate global infrastructure, so your data may be stored or processed on servers outside India. Any such transfer is made in accordance with Section 16 of the DPDP Act and will not be made to any country or territory restricted by the Government of India.
6. How long we keep it
We keep enquiry details for as long as needed to respond and follow up, and for up to 24 months after our last communication, after which they are deleted. If you become a client, project-related records are kept for the period required by applicable laws (for example, tax and accounting laws). If you withdraw consent or ask us to erase your data, we delete it within a reasonable time unless the law requires us to keep it.
7. How we protect it
We follow reasonable security practices, including: encrypted HTTPS connections with HTTP Strict Transport Security; a strict Content Security Policy and other security headers; spam protection on the form; storing enquiries in a private account accessible only to authorised team members; and limiting access to people who need it to respond to you. No method of transmission or storage is completely secure, but we work to protect your data and will act promptly, including notifying you and the Data Protection Board of India where required, if a personal data breach occurs.
8. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how it is processed (Section 11);
- Correct, complete, update or erase your personal data (Section 12);
- Withdraw your consent at any time, as easily as you gave it (Section 6(4)). Withdrawal does not affect processing already carried out before it;
- Grievance redressal through our Grievance Officer (Section 13); and
- Nominate another person to exercise these rights in the event of your death or incapacity (Section 14).
To exercise any of these rights, email our Grievance Officer (below) from the email address you used, or mention it in a new enquiry. We may ask you to confirm your identity before acting on a request.
9. Grievance Officer
In accordance with the Information Technology Act, 2000, the rules made under it, and the DPDP Act, the contact person for questions, requests and complaints about your personal data is:
Name: [Grievance Officer name]
Designation: [e.g. Director]
Email: [[email protected]]
Address: [Registered address]
We will acknowledge your request promptly and aim to resolve it within 30 days, and in any case within the time limits set by applicable law. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India under the DPDP Act.
10. Children
This website is meant for businesses and adults. We do not knowingly collect personal data from anyone under 18 years of age. If you are under 18, please do not use the contact form; a parent or lawful guardian can contact us on your behalf. If we learn that we have collected a child’s data without verifiable parental consent, we will delete it.
11. Third-party links
The site links to other websites, such as our Instagram profile. Their privacy practices are governed by their own policies, not this one.
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it was last changed. Material changes will be highlighted on this page.
13. Contact
Questions about this policy can be sent to the Grievance Officer above or through the contact form.