Privacy Policy

Who we are

This website is operated by Bararchet Dev ("we", "us"). We build web, mobile, custom software, healthcare technology and technology infrastructure.

For data-protection purposes, the data controller is [REGISTERED ENTITY NAME], of [REGISTERED ADDRESS].

What this policy covers

This policy explains what personal information this website collects, why, how long it is kept, and what rights you have. It covers the marketing website at this domain. It does not cover software we build and operate for clients under separate agreements — those systems have their own notices.

Information we collect

Information you give us. When you submit the project enquiry form we collect the name, email address and project description you provide, plus any optional phone number, organisation, budget, timeline and referral source.

Newsletter. If you subscribe, we store your email address and the page you subscribed from.

Technical information collected automatically. Our servers process the standard information any web server receives to serve a page: IP address, user agent and requested URL. For enquiry submissions we store a one-way salted hash of the IP address — never the address itself — together with the user agent string. This is used solely to detect and block automated abuse.

Why we process it

• To respond to your enquiry and discuss potential work — our legitimate interest in answering people who contact us, and steps taken at your request before entering a contract.
• To send the newsletter, where you have asked us to — consent, withdrawable at any time.
• To protect the site from spam and abuse — our legitimate interest in keeping the service available.

What we do not do

We do not sell personal information. We do not add enquirers to marketing lists without a separate opt-in. We do not use enquiry data to build advertising profiles.

Analytics and cookies

See the Cookie Policy for the current position on cookies and analytics on this site.

Where information is stored

Enquiries and subscriptions are stored in a MySQL database operated by us at [HOSTING PROVIDER AND REGION]. Access is limited to the people who need it to respond to enquiries.

How long we keep it

• Project enquiries: [RETENTION PERIOD, e.g. 24 months] from last contact, unless the enquiry becomes an engagement, in which case it is retained under the contract.
• Newsletter subscriptions: until you unsubscribe.
• Abuse-control records (hashed IP, user agent): 12 months.

Your rights

Depending on where you live, you may have the right to access a copy of your personal information, to have it corrected or erased, to object to or restrict processing, to data portability, and to withdraw consent. To exercise any of these, contact us using the details on this site. You also have the right to complain to your local data-protection authority.

Sharing

We use service providers to host the website and database. Any provider with access to personal information is bound by contract to process it only on our instructions. We disclose information to authorities only where legally required.

Security

We use transport encryption, parameterised database access, input validation, rate limiting and least-privilege access. No system is perfectly secure, but we take reasonable and proportionate measures, and we will notify affected people and regulators where required if a breach occurs.

Children

This website is not directed at children and we do not knowingly collect information from them.

Changes

We will update this page when our practices change and revise the date at the top. Material changes will be highlighted on the page.