Privacy Notice | Cazzcent

The short version

We collect only what you type into our forms, and use it only to reply to you about your project.
We do not sell or share your data for advertising, we send no marketing unless you ask, and we use no tracking or advertising cookies.
We delete enquiries that do not become projects after 24 months.
You can see, correct, download or delete your data, or withdraw consent, at any time by writing to support@cazzcent.com.

Who we are

Cazzcent Technologies, Jalgaon, Maharashtra, India ("Cazzcent", "we", "us") decides how the data described here is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary; under the EU and UK GDPR we are the controller; under US state laws we are the business.

Contact for anything about your data, including our Grievance Officer under the DPDP Act: support@cazzcent.com, +91 75884 99988, or by post to Cazzcent Technologies, Jalgaon, Maharashtra, India.

What we collect

What you give us through the quick enquiry or the project planner: your name, phone or WhatsApp number, email address, business name, industry, city, website, what you need, budget range, timeline, the features you want, your notes and how you prefer to be contacted. We do not ask for, and ask you not to send, sensitive data such as health, financial account, government ID or biometric details.

What is recorded with it: a reference number, the date and time, the page the form was sent from, any campaign tags in the link that brought you here (for example utm_source), the referring site, and a record that you ticked the consent box with the wording you agreed to.

What we do not collect: we do not use analytics, advertising pixels, fingerprinting or session recording, and we do not store your IP address with your enquiry. Our web server keeps standard access logs (IP address, browser, time, page) for security for up to 30 days, and the form briefly counts submissions per network address for up to 10 minutes to stop spam.

Why we use it, and our legal basis

To reply to your enquiry and prepare a plan and quote. Basis: your consent, given when you tick the box on the form (DPDP Act section 6; GDPR Art. 6(1)(a)), and steps you ask us to take before a contract (GDPR Art. 6(1)(b)).
To deliver a project you sign up for. Basis: performance of our contract with you (GDPR Art. 6(1)(b)); a legitimate use under DPDP Act section 7.
To keep this website secure and stop spam. Basis: our legitimate interest in a working, safe site (GDPR Art. 6(1)(f)).
To keep business, tax and accounting records for clients. Basis: legal obligation (GDPR Art. 6(1)(c); DPDP Act section 7).

We never use your data for automated decisions that affect you. We rank enquiries by budget and timeline only to decide which to answer first, and a person reads every one.

Withdrawing consent

You can withdraw your consent at any time, as easily as you gave it: email support@cazzcent.com or reply "withdraw" to any message from us. We will stop using your data for that purpose and delete it unless the law requires us to keep it. Withdrawal does not affect anything we did with your consent before.

Who receives it

Only the Cazzcent team. To run the site and our email we use service providers who process data on our instructions and under contract: our web hosting provider (where the website and its database run), Google Workspace (our business email, and a private Google Sheet where our team tracks enquiries), and, if you choose WhatsApp, Meta's WhatsApp service under its own terms. Photos on this site are loaded from Unsplash, which receives your IP address and browser details when images load, as with any image host. We do not sell your personal data and we do not share it for cross-context behavioural advertising. We disclose data to authorities only when the law requires it.

Where it is stored and international transfers

Our team is in India. If you are outside India, your data will be transferred to India, and our providers may store it in other countries (Google, for example, runs data centres worldwide). Where the GDPR or UK GDPR applies, we protect these transfers with the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful safeguard; you can ask us for a copy. We do not transfer data to any country the Government of India has restricted under the DPDP Act.

How long we keep it

Enquiries that do not become a project: deleted 24 months after our last contact, or sooner if you ask.
Client project records and invoices: for as long as Indian tax and company law requires (currently up to 8 years), then deleted.
Server security logs: up to 30 days.
Data in your own browser (below): until you clear it.

Your rights

Wherever you live, you can ask us to:

tell you what data we hold about you, how we use it and who we shared it with (access);
correct, complete or update it (correction);
delete it (erasure);
give you a copy in a portable, machine-readable format (portability);
stop or limit using it, or object to our use based on legitimate interests (restriction and objection);
withdraw consent at any time.

India (DPDP Act): you also have the right to grievance redressal by our Grievance Officer and to nominate another person to exercise your rights if you die or become unable to. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

EU, EEA and UK (GDPR): you may complain to your local data protection authority, or to the UK Information Commissioner's Office.

United States (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws): you have the rights to know, access, correct, delete and port your data, and to opt out of sale, sharing, targeted advertising and profiling. We do none of these, so there is nothing to opt out of, and we honour Global Privacy Control signals regardless. We collect no sensitive personal information. We will not treat you differently for using your rights. An authorised agent may make a request for you with your signed permission. If we decline a request you may appeal by replying to our answer.

Everywhere else (including Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, Singapore's PDPA, South Africa's POPIA and the UAE's PDPL): we apply the same rights and safeguards described here.

To use any right, email support@cazzcent.com from the address you used, or tell us your reference number. We may ask for a little information to confirm it is you. We reply within 30 days, free of charge.

Cookies and browser storage

This site sets no cookies for visitors and uses no analytics or advertising trackers, so there is nothing to consent to. It stores a few small items in your own browser, only to make the features you use work. They never leave your device:

cz_theme (local storage): whether you chose light or dark mode. Kept until you clear it.
cz_pl and cz_pt (session storage): whether the opening animation already played, so it does not repeat on every page. Cleared when you close the tab.
cz_brief_draft (local storage): an unfinished project planner brief, so you do not lose it if you close the tab. Deleted when you send it, and you can clear it at any time with the button below.

If we ever add analytics or advertising tools, they will stay off until you agree to them in a consent banner, and this notice will be updated first.

Security

The site is served over HTTPS, forms are checked on the server and filtered for spam, access to enquiries is limited to our team with individual logins, and our providers are bound by contract to protect your data. If a breach ever affected your data, we would tell you and the authorities the law requires us to tell (including the Data Protection Board of India and, where the GDPR applies, the supervisory authority within 72 hours).

Children

Our services are for businesses and this site is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has sent us details, write to us and we will delete them.

Changes

We update this notice when our practices or the law change. The version and date are at the top. If a change affects how we use data you already gave us, we will tell you and ask again where consent is needed.