Legal
At a glance
When you submit an enquiry, we collect your name, company, business email, annual revenue range, and what you're working on. We use this only to decide whether an engagement is a good fit and to follow up.
When you browse the Site, we and our analytics providers (only after you opt in) collect usage patterns, approximate city-level location, device/browser type, and referring URL. This helps us understand which pages are useful.
We do not collect payment data, government IDs, or any sensitive personal information through this Site. We do not send marketing emails without your consent.
Enquiry data stays with KayOne. We use the following third-party providers for specific site functions:
These providers act as data processors on our behalf under appropriate contractual safeguards. Some may process data outside India; this is permitted under DPDPA Section 16 and governed by Standard Contractual Clauses where required.
Enquiry data: up to three years from submission, then deleted or anonymised. Analytics data: per the provider's default retention (typically 14 months or less).
You can ask us to access, correct, delete, or export your data - or withdraw consent to analytics at any time. EU/UK visitors also have the right to data portability and the right to object to processing based on our legitimate interests. Under DPDPA Section 14, you may also nominate another person to exercise these rights on your behalf in the event of your death or incapacity - contact us for the nomination form.
We do not use your data for automated decisions or profiling that produces legal or similarly significant effects.
Email [email protected] and we'll respond within 30 days (45 for California residents).
Strictly necessary cookies (security, bot protection) are always on. Analytics cookies load only after you opt in via our banner. You can change your choice any time:
Enquiry data is stored on servers in Bangalore, India. Site traffic is served through Cloudflare's global edge. We use HTTPS, server-level firewalls, and access controls. If a breach affects your data, we'll notify you and the relevant regulator in line with DPDPA and GDPR timelines.
If we don't resolve your complaint to your satisfaction, you may escalate to the Data Protection Board of India (constituted under Section 18 of the DPDPA) through the channels notified by the Ministry of Electronics and Information Technology at meity.gov.in.
If you're in the EU/UK, GDPR applies: we process data under consent (for analytics), legitimate interests (for enquiry handling and security), and pre-contractual necessity (where an enquiry progresses toward engagement). You have the right to lodge a complaint with your local supervisory authority.
If you're in a US state with a privacy law (California, Virginia, Colorado, etc.): we do not sell or share your data for advertising. Contact us to exercise your rights.
This Site is for business users; we don't knowingly collect data from anyone under 18. If you believe we have, contact us and we'll delete it promptly.
We update this policy occasionally. The version and date appear at the top. Material changes will be flagged on the Site for at least 30 days.
