Privacy Policy

Welcome to Yari Infotech. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

Personal data, or personal information, means any information about an individual from which that person can be identified.

• Identity Data: includes first name, last name, username or similar identifier.
• Contact Data: includes email address and telephone numbers.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location.
• Usage Data: includes information about how you use our website, products and services.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We store data using secure, encrypted cloud infrastructure.

We use the following providers to operate this website. They process personal data on our behalf, only for these purposes:

• Supabase — database, administrator sign-in and file storage (project briefs, bookings, enquiries, attachments).
• Resend — delivery of transactional email such as booking confirmations and enquiry notifications.
• Meta (WhatsApp Business) — WhatsApp messages you choose to exchange with us, and booking messages where you provide a phone number.
• Hostinger — hosting of this website and its server logs.
• Cloudflare — content delivery and security filtering, where enabled.

Some data is kept only in your browser: your cookie choice, display preferences such as theme and currency, and drafts of a project brief you start on this site, which are stored in a local database on your device until you submit or discard them.

With your consent to analytics, we collect page performance measurements and anonymous usage events. Without that consent we collect only error reports needed to keep the site working. These carry a random per-tab identifier and no contact details, and links that act as access keys (for example booking-management links) are removed before anything is recorded.

Browser drafts of a project brief expire 30 days after they were last saved. Retention periods for enquiries, bookings and submitted briefs held on our systems are being finalised; until then they are kept no longer than needed to respond to you and to meet our legal obligations, and you can ask us to erase them at any time.

In accordance with the Digital Personal Data Protection Act 2023 of India, we acknowledge our responsibilities as a Data Fiduciary:

• Consent: We process personal data only with your explicit consent or for legitimate uses as defined by the Act.
• Data Principal Rights: You have the right to access, correct, and erase your personal data.
• Grievance Redressal: We provide a mechanism for you to raise grievances regarding the processing of your personal data.
• Data Protection Officer: We have designated personnel to ensure compliance with the Act.

Under certain circumstances, you have rights under data protection laws (including GDPR and DPDP Act) in relation to your personal data. You may request to:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data.
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Withdraw consent at any time.