LEGAL · PRIVACY
Privacy Policy
Last updated
THE SHORT VERSION
- We only collect what you type into the scoping form or send us directly, and we use it only to reply to you.
- No cookies, no analytics, no advertising trackers. Nothing is sold or shared for marketing.
- Enquiries that do not become projects are deleted 12 months after our last conversation.
- You can ask us to show, correct or delete your details at any time.
01Who we are
BuildDock Studio (“we”, “us”) is a web and growth studio based in Surat, Gujarat, India. We decide how the personal data described here is used, which makes us its Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 — and its controller under the EU and UK GDPR.
This policy covers this website and the enquiries it brings in. Data you share with us while we build something for you is also covered by the written scope for that project.
02What we collect, and why
| What | Why we need it | How long we keep it |
|---|---|---|
| Your name or company, email or WhatsApp number, the service you are interested in, your project notes and preferred contact channel — when you send the scoping form by email | To reply to your enquiry and prepare an estimate | 12 months after our last conversation, unless it becomes a project |
| The same details, when you send the form by WhatsApp | The message is written on your device and sent through WhatsApp — it never reaches our servers. We keep the chat so we can reply. | 12 months after our last conversation, unless it becomes a project |
| Anything you send us directly by email or WhatsApp | To reply to you | 12 months after our last conversation, unless it becomes a project |
| Client records: written scopes, approvals, invoices and project correspondence | To deliver and invoice the work, and to meet our legal obligations | As long as Indian tax and accounting law requires — currently up to eight years |
| Your IP address, when you submit the form | To stop the form being flooded with spam | Held in server memory for 60 seconds, and never written to storage by us |
| Standard request logs kept by our hosting provider: IP address, browser, page requested and time | Security, and keeping the site running | A short period, set by the provider’s own policy |
- What
- Your name or company, email or WhatsApp number, the service you are interested in, your project notes and preferred contact channel — when you send the scoping form by email
- Why we need it
- To reply to your enquiry and prepare an estimate
- How long we keep it
- 12 months after our last conversation, unless it becomes a project
- What
- The same details, when you send the form by WhatsApp
- Why we need it
- The message is written on your device and sent through WhatsApp — it never reaches our servers. We keep the chat so we can reply.
- How long we keep it
- 12 months after our last conversation, unless it becomes a project
- What
- Anything you send us directly by email or WhatsApp
- Why we need it
- To reply to you
- How long we keep it
- 12 months after our last conversation, unless it becomes a project
- What
- Client records: written scopes, approvals, invoices and project correspondence
- Why we need it
- To deliver and invoice the work, and to meet our legal obligations
- How long we keep it
- As long as Indian tax and accounting law requires — currently up to eight years
- What
- Your IP address, when you submit the form
- Why we need it
- To stop the form being flooded with spam
- How long we keep it
- Held in server memory for 60 seconds, and never written to storage by us
- What
- Standard request logs kept by our hosting provider: IP address, browser, page requested and time
- Why we need it
- Security, and keeping the site running
- How long we keep it
- A short period, set by the provider’s own policy
Only your name and a way to contact you are required. Everything else is optional — leave it out and we will simply ask when we talk.
03What we do not do
- We do not use cookies, analytics or advertising pixels on this website, and we store nothing in your browser.
- Our fonts are served from our own domain, so opening a page does not send your IP address to a font provider.
- We do not sell, rent or trade personal data, or share it with anyone for their marketing.
- We do not add you to a mailing list. You hear from us only about the enquiry you sent.
- We do not make automated decisions about you.
04Our legal basis
Under the DPDP Act, 2023, we use the details you send us for the purpose you sent them for — replying to your enquiry. The Act treats data you provide voluntarily for a specific purpose as a legitimate use. If you tell us to stop, we stop.
If you are in the European Union or the United Kingdom, we rely on taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), and for client records on our legal obligations (Article 6(1)(c)).
05Who else handles your data
We use a small number of service providers to run this website and our inbox. They handle data only on our instructions and are contractually bound to keep it secure.
| Provider | What it does for us | Where |
|---|---|---|
| Vercel Inc. | Hosts this website and runs the scoping form | United States, global network |
| Resend | Delivers scoping-form submissions to our inbox | United States |
| Google (Gmail) | Our email inbox | Global |
- Provider
- Vercel Inc.
- What it does for us
- Hosts this website and runs the scoping form
- Where
- United States, global network
- Provider
- Resend
- What it does for us
- Delivers scoping-form submissions to our inbox
- Where
- United States
- Provider
- Google (Gmail)
- What it does for us
- Our email inbox
- Where
- Global
If you contact us on WhatsApp, WhatsApp (Meta) handles that conversation under its own privacy policy: WhatsApp Privacy Policy.
We may also disclose personal data where the law requires it — for example, to a court or a government authority acting lawfully.
06Data stored outside India
Some of these providers store data outside India, including in the United States. The DPDP Act allows this unless the Government of India has restricted transfers to that country. For visitors from the EU and UK, our providers transfer data under safeguards those laws recognise, such as Standard Contractual Clauses.
07How we protect it
The site is served only over HTTPS. Form submissions go straight from our server to our inbox — they are not stored in a database on the way.
Only the people who run the studio can read enquiries.
If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
08Your rights
You can ask us, at any time and free of charge, to:
- tell you what personal data we hold about you, and who we have shared it with
- correct, complete or update it
- delete it, unless the law requires us to keep it — invoices, for example
- stop using it, where you had given us consent
- recognise someone you nominate to exercise these rights for you if you die or become unable to
In the EU or UK you can also ask us to restrict or object to processing, or to send you a copy of your data in a portable format.
To make a request, email hello@builddockstudio.com from the address you used — or tell us how you contacted us, so we can find your details. We reply within 30 days.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India once you have raised it with us — or, in the EU or UK, to your local data protection authority.
09Children
This website is for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us their details, tell us and we will delete them.
10Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top. If a change affects data we already hold about you, we will tell you before it applies.
11Contact and grievances
For privacy questions, requests and complaints, write to us. This address is also our grievance contact under the DPDP Act.