Privacy Policy

1. What we collect and why

When you submit an enquiry, we collect your name, company, business email, annual revenue range, and what you're working on. We use this only to decide whether an engagement is a good fit and to follow up.

When you browse the Site, we and our analytics providers (only after you opt in) collect usage patterns, approximate city-level location, device/browser type, and referring URL. This helps us understand which pages are useful.

We do not collect payment data, government IDs, or any sensitive personal information through this Site. We do not send marketing emails without your consent.

2. Who sees your data

Enquiry data stays with KayOne. We use the following third-party providers for specific site functions:

• Analytics - understanding site usage (opt-in only)
• Bot protection - blocking spam on forms
• CDN - delivering the Site quickly and securely

These providers act as data processors on our behalf under appropriate contractual safeguards. Some may process data outside India; this is permitted under DPDPA Section 16 and governed by Standard Contractual Clauses where required.

3. How long we keep it

Enquiry data: up to three years from submission, then deleted or anonymised. Analytics data: per the provider's default retention (typically 14 months or less).

4. Your rights

You can ask us to access, correct, delete, or export your data - or withdraw consent to analytics at any time. EU/UK visitors also have the right to data portability and the right to object to processing based on our legitimate interests. Under DPDPA Section 14, you may also nominate another person to exercise these rights on your behalf in the event of your death or incapacity - contact us for the nomination form.

We do not use your data for automated decisions or profiling that produces legal or similarly significant effects.

Email [email protected] and we'll respond within 30 days (45 for California residents).

5. Cookies

Strictly necessary cookies (security, bot protection) are always on. Analytics cookies load only after you opt in via our banner. You can change your choice any time:

On this page the banner is not shown and analytics load on arrival. To withdraw consent, email [email protected] and we will action it within 30 days.

6. Where the data lives

Enquiry data is stored on servers in Bangalore, India. Site traffic is served through Cloudflare's global edge. We use HTTPS, server-level firewalls, and access controls. If a breach affects your data, we'll notify you and the relevant regulator in line with DPDPA and GDPR timelines.

7. Grievance Officer (required under Indian law)

If we don't resolve your complaint to your satisfaction, you may escalate to the Data Protection Board of India (constituted under Section 18 of the DPDPA) through the channels notified by the Ministry of Electronics and Information Technology at meity.gov.in.

8. International visitors

If you're in the EU/UK, GDPR applies: we process data under consent (for analytics), legitimate interests (for enquiry handling and security), and pre-contractual necessity (where an enquiry progresses toward engagement). You have the right to lodge a complaint with your local supervisory authority.

If you're in a US state with a privacy law (California, Virginia, Colorado, etc.): we do not sell or share your data for advertising. Contact us to exercise your rights.

9. Children

This Site is for business users; we don't knowingly collect data from anyone under 18. If you believe we have, contact us and we'll delete it promptly.

10. Changes

We update this policy occasionally. The version and date appear at the top. Material changes will be flagged on the Site for at least 30 days.