Privacy Policy

Sayak Web Designer & Developer is an information technology company based at 9R, Munshi Bazar Road, Sunrise Tower, Sealdah, Kolkata, West Bengal 700014, India. This policy explains what personal data we collect through this website and through our commercial relationships, why we collect it, how long we keep it and what rights you have over it.

It is written to be read rather than to be defensible. If anything here is unclear, call +91 70033 91355 and ask — a person will answer.

This website does not require an account and does not ask you to submit a form before viewing any content, including our pricing calculator. The information we hold is therefore limited.

• Contact details you choose to give us — name, phone number, email address and company — when you call, message us on WhatsApp, or email us.
• The content of your enquiry, including any brief, document or link you send us.
• Aggregate, non-identifying analytics about how pages are used: page views, approximate region, device category and referring source.
• Technical logs from our hosting provider, including IP address, retained for a short period for security and abuse prevention.

We think it is more useful to state the absences plainly than to bury permissions in a long clause.

• We do not sell, rent or trade personal data to anyone, in any circumstance.
• We do not use advertising retargeting pixels on this website.
• We do not require an email address to use the cost calculator or read any content.
• We do not use dark patterns to obtain consent, and there is no pre-ticked box anywhere on this site.
• We do not send marketing email to people who have not asked for it.

We process the contact details and enquiry content you provide in order to respond to you, prepare a proposal, and — if you become a client — to deliver and support the work. That is the entire purpose.

Aggregate analytics are processed to understand which pages are useful and where the site performs badly, so we can improve it. This data does not identify you.

When we work with you, we frequently handle data belonging to your business — which may include personal data about your employees, customers or patients. In that context you are the data fiduciary and we act as a data processor on your instructions.

We sign a non-disclosure agreement before receiving anything sensitive, as a matter of course. We access only what is necessary for the work, we do not copy production data to personal devices, and we delete or return working copies at the end of an engagement on request.

Where we deploy AI systems, we use enterprise service tiers with model training on your data explicitly disabled, and for clients whose data cannot leave their environment we deploy models on their own infrastructure instead. We tell you which mode a project is in before it starts.

Our own business records are held in India. Client project data is held wherever the client's infrastructure is — normally in an Indian cloud region, and on-premise inside the client's network for plant and regulated work.

This website is served through a global content delivery network, which means static page files may be cached on servers outside India. No personal data is stored in that cache.

Enquiries that do not become projects are retained for up to twenty-four months, so that we have context if you come back to us, and then deleted. You can ask us to delete an enquiry sooner and we will.

Records relating to actual engagements are retained for as long as required for contractual, tax and statutory purposes under Indian law, and then deleted.

Server logs containing IP addresses are retained for thirty days.

Under India's Digital Personal Data Protection Act you have the right to know what personal data we hold about you, to have it corrected if it is wrong, to have it erased where we have no continuing legal reason to keep it, and to withdraw any consent you have given.

To exercise any of these, email hello@sayakwebdesigner.in or call +91 70033 91355. We will respond within thirty days and normally much sooner. We do not require you to use a particular form or portal.

If you are not satisfied with how we have handled a request, you may raise it with the relevant data protection authority.

This website uses only what is strictly necessary to serve pages and, where analytics are enabled, a single first-party measurement identifier that does not track you across other websites.

We do not use third-party advertising cookies, cross-site trackers or fingerprinting. If we add anything beyond the strictly necessary in future, we will ask for your consent first, with a genuine option to decline.

Data in transit is encrypted with TLS. Access to systems holding client or enquiry data is role-based, logged, and protected by multi-factor authentication. Devices used by our team are encrypted and centrally managed.

If a breach occurs that is likely to affect you, we will tell you and the relevant authority promptly, with what we know, what we do not yet know, and what we are doing about it. We will not delay disclosure while we decide how it looks.

If we change this policy materially we will update the date at the top and, for changes that affect how we handle data you have already given us, we will tell you directly rather than relying on you noticing.