Privacy policy

The data controller is Raunak Pandey, trading as rkweb.dev, Bengaluru, India. For any privacy question, write to raunak@rkweb.dev — it reaches me directly, not a support queue.

Only what an enquiry needs to be answered:

• Contact details you send me — your name, email address, phone number and company, when you email, call or submit a form.
• Project information — the site URL, brief, credentials and files you share so I can scope or carry out work.
• Technical logs — IP address, browser and referring page, recorded by the web server for security and abuse prevention.
• Aggregate analytics — page views and traffic sources, if analytics is enabled on this site.

I do not collect payment card details; invoices are paid through a payment provider or bank transfer and card data never touches this site. I do not knowingly collect data from anyone under 16.

Contact and project data is used to reply to you, quote work, carry out an engagement and keep the records the law requires — a contractual and legal-obligation basis. Server logs and aggregate analytics rest on legitimate interest in keeping the site secure and understanding whether it works. I do not sell data, rent it, or use it for automated decision-making or profiling.

This site sets no advertising or cross-site tracking cookies. WordPress may set a session cookie if you log in to the admin area, and analytics — where enabled — sets a first-party cookie to distinguish one visit from another. You can block or delete cookies in your browser; nothing on the public site breaks if you do.

A short list of processors, each handling data only to provide their service:

• Web hosting — stores the site and its logs.
• Email provider — delivers and stores correspondence.
• Analytics provider — aggregate traffic reporting, where enabled.
• Font and script CDNs — Fontshare, Google Fonts, cdnjs and unpkg serve typefaces and animation libraries; your browser requests those files directly, and your IP address is visible to them as a result.
• Payment and accounting providers — process invoices and keep the tax record.

Where I work on your site under an engagement, I may be a processor of your end users' data. In that case your own privacy policy and data-processing terms govern, and I follow your instructions.

I am based in India and some processors are in the United States or the EU, so data may be transferred outside your country. Where the GDPR or UK GDPR applies, transfers rely on the processor's standard contractual clauses or an equivalent safeguard.

Enquiries that do not become projects: up to 12 months. Project correspondence and files: for the engagement and up to 24 months afterwards, so I can support work I delivered. Invoices and tax records: as long as Indian tax law requires. Server logs: up to 90 days. Credentials you share are deleted, and any I hold rotated, at the end of an engagement.

You can ask me to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. Where processing relies on consent you can withdraw it at any time. Email the address below and I will respond within 30 days, at no cost. If you are in the EU, UK or another jurisdiction with a data-protection regulator and you are unhappy with my response, you may complain to that regulator.

Access to correspondence and project data is protected by strong unique passwords and two-factor authentication. Credentials you share are stored in an encrypted password manager, never in plain text, and shared onward only where an engagement requires it. No system is perfect: if a breach affects your data I will tell you and, where required, the relevant regulator, without undue delay.

Material changes to this policy will be reflected in the revision date at the top of the page. To exercise any right, or to ask what I hold: raunak@rkweb.dev, or +91 93480 16171.