What we hold, why, and how to get rid of it.
Written under the UK GDPR and the Data Protection Act 2018. Where the law also gives you rights under the EU GDPR or the CCPA, those are covered too.
Who is responsible
The data controller is the company named on the legal information page. Write to support@hindujatech.shop about anything on this page and we will treat it as a data protection request.
The short version
- We collect what we need to run the service and no more.
- What you write is never used to train models — ours or anyone else’s.
- We do not sell or share personal data for advertising, ever.
- You can delete any entry, or your whole account, whenever you want.
- There is no upload channel, so we hold no recordings, images or video of any kind.
What we collect, and why
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Email address and password hash | To give you an account and let you back into it | Performance of a contract | Until you close the account, then 30 days |
| Your descriptions and observations of a noise | To sort them into dimensions and produce your cards | Performance of a contract | Until you delete them, or the account closes |
| Plan, renewal dates, payment reference and receipts | To run your subscription and meet tax and accounting law | Contract, and legal obligation | 6 years from the end of the tax year (UK accounting requirement) |
| Support correspondence | To answer you and keep a record of what was agreed | Legitimate interests — running a service people can get help with | 2 years from the last message |
| Technical logs: IP address, browser, timestamps, error traces | Security, abuse prevention and fixing faults | Legitimate interests — keeping the service working and secure | 90 days |
| Analytics about how the site is used | To see which parts of the site are unclear | Consent — only if you accept it on the cookie bar | 14 months |
We do not knowingly collect data about anyone under 18, and we do not collect special category data. Nothing on this site asks you for a vehicle registration, a chassis number, or anything else that identifies a specific vehicle — and you should not put one in.
What we do not do
- We do not use your content to train models. Where a hosted model is used to help sort a phrase into a dimension, it is called with instructions that prohibit retention and training, and the content is not retained by the provider beyond the request.
- We do not sell personal data, and we do not share it for cross-context behavioural advertising. Under the CCPA that means we have no “sale” or “sharing” to opt out of — but the right to ask is still yours and we will confirm it in writing.
- We do not build advertising profiles, and there is no third-party advertising technology on this site.
- We do not make any decision about you by automated means that produces a legal or similarly significant effect.
Who we share it with
We use a small number of processors, each under a written contract that limits them to our instructions:
- A hosting and content delivery provider, to serve the site.
- A database and authentication provider, to store your account and your entries.
- A payment processor, to take subscription payments. They receive what they need to take the payment; we never see or store your full card details.
- An email provider, to send confirmations, renewal reminders and support replies.
- A model provider, for the dimension-sorting step, under no-retention and no-training terms.
We will also disclose data where the law requires it. We will tell you if that happens, unless we are prohibited from doing so.
Transfers outside the UK
Some of these providers operate outside the United Kingdom. Where personal data is transferred, we rely on UK adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for a copy of the safeguards in place.
Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you, and get a copy of it;
- have anything inaccurate corrected;
- have your data erased;
- restrict what we do with it, or object to it;
- receive it in a portable, machine-readable format;
- withdraw consent at any time, where we relied on consent — this does not affect anything done beforehand.
Write to support@hindujatech.shop. We respond within one month and we do not charge for it.
If you are in the EU, the equivalent rights under the EU GDPR apply. If you are a California resident, you additionally have the rights to know, to delete, to correct, to opt out of sale or sharing (we do neither) and not to be discriminated against for exercising them.
Complaining
You have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. You can do this at any time, and you do not have to come to us first — though we would rather you did, because it is usually quicker.
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint
If you are in the EU, you may complain to the supervisory authority in the country where you live, work, or where you think the problem happened.
Security
Traffic is encrypted in transit. Data is encrypted at rest. Access is limited to the people who need it and is logged. Passwords are stored as salted hashes and never in a form anyone can read. If a breach ever puts your rights at risk, we tell the ICO within 72 hours and we tell you without undue delay.
Cookies
What is set, why, and how to change your mind is on the cookies page. Nothing beyond the strictly necessary is set unless you accept it.
Changes
If we change this notice in a way that matters, we will tell you before it takes effect rather than quietly updating the date at the top.