← Back to Portfolio
WhatsApp Direct
Statutory Compliance: Republic of India

Privacy Policy & Data Charter

Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).

Data Fiduciary: Ujjwal (Freelance Web Developer & Ads Specialist)
Governing Jurisdiction: Mumbai, Maharashtra, India
Effective / Last Updated: October 20, 2026

01. Overview & Role as Data Fiduciary

This document governs the collection, processing, storage, and retention of personal data collected through ujjwals.app, direct inquiries, and commercial engagements by Ujjwal (“Data Fiduciary”) in accordance with Section 2(i) of the Digital Personal Data Protection Act, 2023.

02. Categories of Personal Data We Collect

We collect only necessary personal data voluntarily supplied by clients and prospective inquiries:

A. Contact & Identification Data Full name, corporate email address, phone number, and WhatsApp handle submitted via contact forms.
B. Commercial Project Requirements Business name, domain name, website project brief, technical specifications, and ad campaign goals.
C. Technical Telemetry & Device Logs IP address, browser type, operating system, and timestamp logs collected for cybersecurity and anti-DDoS defenses.
D. Invoicing & Tax Records Client billing address, GSTIN or PAN details required under Indian commercial and Goods & Services Tax statutes. No credit card or CVV details are ever stored.

03. Lawful Grounds & Purposes of Processing

In accordance with Section 4 and Section 6 of the DPDP Act, 2023, data is processed exclusively for:

  • Answering Inquiries & Providing Quotations: Responding to client project requirements.
  • Contract Performance: Building custom websites, full-stack applications, and managing Google/Meta ad campaigns.
  • System Security & Fraud Prevention: Protecting web infrastructure against cyber intrusions under Section 7.
  • Statutory Compliance: Maintaining tax invoices under Indian commercial law.

04. Zero-Sale Guarantee & Third-Party Processors

STRICT NO-SALE COMMITMENT: Personal data is never sold, traded, or rented to data brokers or third parties. Data is processed solely through enterprise-grade infrastructure providers (Cloudflare, Vercel, Google Workspace, WhatsApp Business API) bound by strict confidentiality.

05. Reasonable Security Practices (SPDI Rules)

In compliance with Section 8(5) of the DPDP Act and Rule 5 of the SPDI Rules 2011, technical safeguards include 256-bit TLS 1.3 encryption in transit, multi-factor authenticated systems, and automated access auditing.

06. Statutory Rights of the Data Principal

Under Chapter III (Sections 11–14) of the DPDP Act 2023, you have the right to:

  • Right to Access: Request a summary of your personal data being processed.
  • Right to Correction & Erasure: Rectify inaccurate details or request deletion of data.
  • Right of Grievance Redressal: Submit grievances to the designated Grievance Officer.
  • Right to Nominate: Nominate an individual to exercise data rights in the event of incapacity.
Mandatory Statutory Designation

07. Grievance Redressal Officer (India)

In accordance with Section 13 of the Digital Personal Data Protection Act, 2023 and Rule 5(9) of the Information Technology Rules:

Officer Name: Ujjwal
Official Title: Grievance & Data Protection Officer
Official Email: thegangstaguy001@gmail.com
Phone / WhatsApp: +91 83404 87605
Jurisdiction & Address: Mumbai, Maharashtra, India — PIN 400001

Statutory SLA: Grievances will be acknowledged within 48 hours and resolved within 30 calendar days. Unresolved complaints may be escalated to the Data Protection Board of India (DPBI) under Section 18 of the DPDP Act.