Privacy

Who is responsible

The controller is Agochar Tech LLP, Rajkot, Gujarat, India. For anything about privacy, email privacy@agochar.nl.

What we process and why

Enquiries: when you email us or message us on WhatsApp, we receive your name, contact details and whatever you share about your project. We use this only to answer your enquiry, plan a call and prepare a proposal. Legal basis: steps you ask us to take before a possible contract (Article 6(1)(b) GDPR).

Website analytics: only if you accept analytics cookies, we use Google Analytics 4 and Microsoft Clarity to see how visitors use the site, for example which pages are visited, how far people scroll and where they click. This covers your browser, device type, approximate location derived from your IP address and pseudonymous identifiers. Clarity can record anonymised sessions; text you type is masked. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” in the footer.

Hosting and security: our host processes technical data such as IP addresses in server logs to deliver the site and protect it against abuse. Legal basis: our legitimate interest in a secure, working website (Article 6(1)(f) GDPR).

How long we keep it

Enquiries are kept for up to 24 months after our last contact and then deleted, unless they lead to a contract; contract and invoicing records are kept for as long as the law requires. Google Analytics data is kept for 14 months. Microsoft Clarity keeps session recordings for 30 days and aggregated data for up to 13 months. Server logs are kept for a short period, for security only.

Who processes data for us

Hosting: Cloudflare (Cloudflare Pages). Analytics, only after consent: Google Ireland Ltd. (Google Analytics 4) and Microsoft Ireland Operations Ltd. (Microsoft Clarity). Messaging: WhatsApp is operated by Meta under its own privacy terms. We do not sell personal data and do not use it for advertising.

Transfers outside the EEA

Our team handles enquiries from India. India has no EU adequacy decision, so we protect these transfers with the European Commission’s Standard Contractual Clauses. Google and Microsoft may process analytics data in the United States; they are certified under the EU-U.S. Data Privacy Framework and also use Standard Contractual Clauses.

Your rights

You can ask to access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time without affecting earlier processing. Email privacy@agochar.nl; we reply within one month.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the supervisory authority in your own EU country.

Changes

We update this statement when our processing changes. The date at the bottom shows the latest version.