DRAFT — pending legal review. Not yet in force.

Privacy Policy

1. Who is responsible

The controller of personal data collected through this website is [[PLACEHOLDER: controller legal name and address]].

Privacy contact: [[PLACEHOLDER: privacy contact email]].

2. What this site collects

When you send an enquiry through the form, we collect:

  • your name, business email address, company, country or region, industry, area of interest and project description;
  • technical data stored with the enquiry: a salted one-way hash of your IP address (for IPv6, of its first 64 bits); the IP address itself is not stored — the hash is still personal data; a shortened browser user-agent string; the page the form was sent from; the date and time; a random identifier generated by your browser for each submission, used to prevent duplicate records; and whether our team notification email was sent.

We do not store the anti-spam timing value or the hidden form field.

This site uses no cookies, no analytics and no advertising. Your browser stores two items locally: the localStorage key geolyte.intro.v1, which only remembers that the intro animation has been seen, and the sessionStorage key geolyte.intro.session, which only remembers for this browser session that the intro has already played.

3. Why we use it and legal basis

We use this data to answer your enquiry, to send you a confirmation email, and to prevent abuse (rate limiting).

After an enquiry you may receive one confirmation email. It contains no copy of your message. To prevent abuse, confirmation emails can be suppressed automatically.

[[PLACEHOLDER: legal basis — confirm with counsel (GDPR Art. 6 / India DPDP Act 2023)]]

4. Who receives it

We use these service providers (processors) to handle enquiry data on our behalf:

  • Vercel: hosting; serverless functions run in Mumbai, India, and static files are served from Vercel’s global network.
  • Supabase: database, in Mumbai, India.
  • Resend: email delivery, [[PLACEHOLDER: Resend data region]].

5. Hosting logs

The hosting provider keeps technical server logs, which may include IP addresses. [[PLACEHOLDER: log retention]]

6. International transfers

[[PLACEHOLDER: transfer mechanism and countries]]

7. Retention

[[PLACEHOLDER: retention period for enquiries]]

8. Your rights

You have the rights of access, correction, erasure, objection and withdrawal. You may also complain to [[PLACEHOLDER: supervisory authority / Data Protection Board]].

To exercise your rights, contact [[PLACEHOLDER: privacy contact email]].

9. Security

The site is served over HTTPS. The enquiry database is not publicly readable, and service credentials are kept on the server.

10. Changes and effective date

This notice may change. Effective date: [[PLACEHOLDER: effective date]]