Privacy

Who we are

BlubyTechRoots (BlubyTechRoots) is a technology studio based in Byndoor, Karnataka, India. For anything in this notice, reach us at hello@blubytechroots.in.

What we collect

There are exactly two ways this website collects anything.

1. When you contact us

If you submit the enquiry form, we receive the name, email address, company, project type, budget range and message you chose to send. We use these only to reply to you and to discuss the work you asked about.

Our lawful basis is your consent, given by submitting the form, and our legitimate interest in responding to business enquiries. The same itemised notice appears beside the form itself, so you see it before you send anything.

You can withdraw that consent at any time, and withdrawing is as easy as giving it: email hello@blubytechroots.in with “Data request” in the subject. We stop processing and delete the enquiry. The only consequence is that the conversation ends — there is no penalty, and no service you lose.

2. Anonymous traffic measurement

We use Cloudflare Web Analytics to understand which pages people find useful. It is cookieless: it sets no identifiers, does not fingerprint your device, and cannot follow you to other websites. It records aggregate page views, referrers, country and browser type. None of it identifies you, and this is why the site shows no cookie banner: there are no cookies to consent to.

What we do not do

• We do not sell, rent or trade your personal data. Ever.
• We do not run advertising or retargeting pixels.
• We do not build behavioural profiles or score visitors.
• We do not use your enquiry to add you to a marketing list.

Who processes data on our behalf

We keep the list of third parties deliberately short. Each one is bound by contract to process data only on our instructions:

• Cloudflare: hosting, content delivery, bot protection (Turnstile) and the cookieless analytics described above.
• Resend: delivers your enquiry to our inbox as an email.

Both may process data outside India. Transfers are covered by the providers' standard contractual clauses.

How long we keep things

• Enquiries: kept for up to 24 months so we can pick up a conversation where it left off, then deleted. If we start a project together, the retention period in that contract applies instead.
• Analytics: aggregate only, retained by Cloudflare on a rolling basis. Nothing in it is linked to you.

Your rights

Under India's Digital Personal Data Protection Act 2023 and, where it applies, the EU GDPR, you can ask us to:

• tell you what data of yours we hold, and give you a copy;
• correct anything inaccurate, or complete anything missing;
• delete it;
• stop processing it, or object to processing;
• act on a withdrawal of consent — as easily as it was given, and with no penalty for withdrawing;
• recognise someone you have nominated to exercise these rights on your behalf if you die or become incapacitated.

How to make a request

Email hello@blubytechroots.in with “Data request” in the subject line. The more of this you include, the faster we can answer without coming back to you:

• The email address you used to contact us. It is the only thing we hold that identifies you, so it is how we find your data. If you wrote to us from a different address, tell us both.
• What you want us to do — a copy, a correction, erasure, or withdrawal of consent. If it is a correction, tell us what the right value is.
• If you are acting for someone else — as their nominee, guardian or legal representative — say so, and say on whose behalf.

We will normally act on the request itself. We ask for proof of identity only where we genuinely cannot tell that the request comes from you — for example, a request sent from an address we have never seen about data held under a different one. We will not ask for government ID, and we will never ask for more than is needed to be sure.

Timelines: we acknowledge within 3 working days and resolve within 30 days. There is no charge. If we have to refuse part of a request — for example, where we must keep a record to comply with tax or contract law — we will tell you which part, and why.

Grievances

If something we have done with your data is wrong, or our answer to a request was not good enough, raise it with us first — it is the fastest route to a fix, and we would rather hear it from you than from a regulator.

• Who: The founder, BlubyTechRoots, Byndoor, Karnataka, India
• How: hello@blubytechroots.in, subject “Grievance”
• When you'll hear back: acknowledged within 3 working days, resolved within 30 days

You do not have to come to us first, and nothing here limits your right to go straight to a regulator. If you are unhappy with our response — or we do not respond — you can complain to the Data Protection Board of India, or, if the GDPR applies to you, to your local supervisory authority.

This notice in another language

This notice is published in English. The DPDP Act gives you the right to receive it in any language listed in the Eighth Schedule to the Constitution of India. Email hello@blubytechroots.in naming the language and we will send it to you — at no charge, and we will tell you how long it will take.

Security

The site is served over HTTPS only, with a strict Content Security Policy and modern security headers. Enquiries travel encrypted in transit and land in a mailbox protected by multi-factor authentication. No system is perfect; if we ever suffer a breach affecting your data, we will notify you and the relevant authority as the law requires.

Children

This site is aimed at businesses and is not directed at children under 18. We do not knowingly collect their data.

Changes

If this notice changes materially, we'll update the effective date at the top and, where we hold your contact details and the change affects you, tell you directly.