Privacy Policy
Last updated
Summary
We collect the minimum we need to reply to your enquiry, we do not sell it, and we delete it when it is no longer needed. There is no advertising tracker on this site.
Who is responsible for your data
Shruj Enterprise, A 80/5, East Nathu Colony, Mandoli Road, Shahdara, New Delhi, Delhi 110093, India. GSTIN 07CDKPG1129H1ZR. For any privacy question or request, contact contact@shruj.com.
What we collect
Information you give us
When you submit the contact form, a product demo request or an early-access request, we store:
- Your name
- Your email address
- Your phone number, if you provide one
- Your organisation name, if you provide one
- The topic, indicative budget and message you send
- The page you submitted from, and the date and time
We also record a one-way hash of your IP address and your browser's user-agent string, solely to detect spam and abuse. The hash cannot be reversed to recover your IP address.
Information collected automatically
Our web server keeps standard access logs (requested URL, timestamp, response code, approximate location at city level) for security and capacity planning. These logs are retained for a limited period and then deleted.
Analytics. If Google Analytics 4 is enabled, it sets cookies and records aggregated usage data.
It is configured with IP anonymisation. It is not loaded at all until a measurement ID is configured —
see analytics.ga4_measurement_id in includes/config.php.
Advertising trackers. We do not run advertising pixels, remarketing tags or social media trackers on this website.
Why we use it
| Purpose | Basis |
|---|---|
| Replying to your enquiry and preparing a proposal | Your request / consent |
| Protecting the site against spam and abuse | Our legitimate interest in a working service |
| Understanding which pages are useful | Consent, where analytics is enabled |
| Meeting accounting and tax obligations after a sale | Legal obligation |
We do not use your information for automated decision-making or profiling.
Where it is stored
Contact form submissions are written to a private file on our web server that is not reachable over the internet, and, if email delivery is configured, sent to our business mailbox. Both are hosted by Hostinger (shared hosting).
If you contact us on WhatsApp, the conversation is handled by WhatsApp under their privacy policy, independently of this website.
Who we share it with
We do not sell, rent or trade your personal information. We share it only with processors that make the service work:
- Hosting provider — serves the website and stores the enquiry files
- Email provider — delivers enquiry notifications to us
- Google — only if Analytics is enabled, for aggregated reporting
We will disclose information if legally required to, and will tell you unless prohibited from doing so.
How long we keep it
- Enquiries that do not become clients — up to 24 months, then deleted
- Client project records — for the duration of the engagement plus the period required for tax and accounting
- Server access logs — a limited retention period, then deleted
- Spam-prevention rate-limit records — one hour
Your rights
Regardless of where you live, we extend the same rights to everyone. You can ask us to:
- Access a copy of the personal data we hold about you
- Correct anything inaccurate
- Delete it, where we are not obliged to keep it
- Withdraw consent for any processing based on consent
- Object to processing based on legitimate interests
- Port it — we will provide a machine-readable export
Email contact@shruj.com and we will respond within 30 days. We may ask you to verify your identity first. If you are in India and dissatisfied, you may complain to the Data Protection Board of India. If you are in the EU or UK, you may complain to your national supervisory authority.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
shruj_session | Keeps your form submission secure and shows you validation errors. Strictly necessary. | Session |
shruj-theme (local storage) | Remembers whether you chose light or dark mode. Not sent to the server. | Until cleared |
_ga, _ga_* | Google Analytics, only when enabled. Distinguishes visitors for aggregated reporting. | Up to 2 years |
You can clear or block these in your browser settings. Blocking the session cookie will prevent the contact form from working.
Security
Traffic is served over HTTPS. Form submissions require a per-session CSRF token and are protected by spam controls. Passwords anywhere in our systems are hashed, never stored in readable form. Access to production data is limited to those who need it.
No system is perfectly secure. If a breach affects you, we will notify you and the relevant authority as required by law.
Children
This website is intended for business use and is not directed at children. We do not knowingly collect data from anyone under 18.
Changes to this policy
We will update the date at the top whenever this policy changes. Material changes affecting how we use existing data will be communicated to affected contacts directly.
Contact
Shruj Enterprise
A 80/5, East Nathu Colony, Mandoli Road, Shahdara, New Delhi, Delhi 110093, India
contact@shruj.com