Privacy Policy

Who this policy is from

This website, haqto.com, is operated by Haqto, a digital brand development and technology company based in Coimbatore, Tamil Nadu, India.

This policy explains what personal information we collect through this website, why we collect it, who else can see it, and what you can ask us to do about it.

Add the registered legal entity name, company registration number, registered address and GSTIN

What this policy covers

This policy covers the haqto.com website only. It does not cover:

• Information you give us during a client project, which is governed by the contract for that project
• Websites or applications we build for clients, which have their own policies
• Third-party websites we link to

Information we collect

Information you give us

If you submit the enquiry form, we receive what you type into it: your name, company, email address, and optionally your phone number, the service you are interested in, a description of your project, and any budget or timeline you choose to share.

You decide how much to tell us. Only name, email and a project description are needed for us to reply.

Information collected automatically

Like almost all websites, our hosting provider records standard server logs when a page is requested. These typically include your IP address, the page requested, the time, your browser type and the page you came from.

Confirm with your hosting provider exactly what server logs contain and how long they are retained

What we do not collect

As this policy is written, the website does not use analytics, advertising trackers or marketing cookies. It sets no cookies of its own and stores nothing in your browser. If that changes, this policy must be updated before the change goes live.

Update this section the moment analytics, a chat widget, advertising pixels or any tracking is added

How we use your information

We use enquiry information to:

• Reply to you
• Understand and scope what you are asking for
• Prepare a proposal if the enquiry goes that far
• Keep a record of the conversation for our own reference

Server logs are used to operate the site, diagnose faults and protect against abuse.

We do not sell your information. We do not share it with advertisers. We do not add you to a marketing list because you sent an enquiry — if we ever run one, it will be something you opt into deliberately.

Cookies and similar technologies

This website sets no cookies of its own and does not use browser storage.

Fonts are loaded from Google Fonts, which is a third-party request — see the next section. Your hosting provider or any future third-party tool may set cookies of its own, and this section must be updated if any are added.

If a cookie banner becomes necessary, add it and list every cookie here with its purpose and lifetime

Third parties that may receive data

We try to keep this list short and accurate. As the site currently stands:

Google Fonts

The site loads the Manrope and Inter typefaces from Google's font servers. This means Google receives your IP address and browser information when a page loads. If you would prefer to avoid this, the fonts can be self-hosted instead — the site is already set up to make that change straightforward.

Our hosting provider

Serves the website and keeps standard server logs.

Name your hosting provider, its location, and add every other processor: form handler, email provider, CRM, analytics

If we later add analytics, a form handler, a chat tool or a CRM, each one becomes a party that receives data and each must be named here.

How long we keep information

Enquiries are kept for as long as there is a reasonable business reason: while we are in conversation, and afterwards as a record of what was discussed. If an enquiry does not lead anywhere, there is no good reason to keep it indefinitely.

Set and state actual retention periods — for example, enquiries deleted after 24 months of no contact; server logs after 90 days

You can ask us to delete your enquiry at any time, and we will unless we are required to keep it.

Your rights

Subject to applicable Indian law, including the Digital Personal Data Protection Act 2023, you can ask us to:

• Tell you what personal information we hold about you
• Correct anything that is wrong or out of date
• Delete information we no longer have a reason to keep
• Explain who we have shared it with
• Withdraw consent you previously gave

Ask through the contact details below. We will not charge you for a reasonable request, and we will not make it difficult.

Have a lawyer confirm the exact rights, response deadlines and procedures required under the DPDP Act 2023 and its implementing rules as currently in force

Grievance officer

Indian law requires certain organisations to publish the name and contact details of a grievance officer who will address complaints about personal data.

REQUIRED — appoint a grievance officer and publish their name, designation, email address and postal address here. Confirm with counsel whether this obligation applies to Haqto and what response timeframe is required.

How we protect information

The site is served over HTTPS. Access to enquiry data is limited to the people who need it to reply to you.

We will not claim your data is perfectly secure, because no honest organisation can. What we can say is that we apply the same practices we build for clients: encryption in transit, least-privilege access, credentials kept out of code, and dependencies kept patched.

Describe actual access controls once the enquiry form is connected to a real system, and confirm where that data is stored

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Confirm the applicable age threshold and any verifiable parental consent requirement under the DPDP Act 2023

Information leaving India

Some services we rely on operate outside India. The Google Fonts request, for example, may be served from outside the country, and email or hosting providers may store data elsewhere.

Confirm where your hosting, email and any future processors store data, and have counsel confirm the cross-border transfer position under the DPDP Act 2023

Changes to this policy

If we change how we handle personal information, we will update this page and change the date at the top. Material changes deserve more than a silent edit, and we will say what changed.

Contact us

For any question about this policy, or to make a request about your information, use the contact page.

Add a dedicated privacy email address and the registered postal address