Legal

Privacy Policy

This explains what personal data I collect through harnoorsingh.in and my services, why, how long I keep it, who else handles it and what rights you have. I've tried to write it in plain English.

Last updated:

1. Who I am

This website and the services on it are run by Harnoor Singh, an individual (sole proprietor) trading as Upward Web by Harnoor Singh, based in Ludhiana, Punjab, India ("I", "me"). Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), I am the Data Fiduciary for the personal data described here: I decide why and how it is used.

Contact for anything in this policy, including complaints: harnoor459456@gmail.com, or WhatsApp +91 79733 53244.

2. What I collect

  • Contact form: your name, business name, phone/WhatsApp number, type of business, the package you're interested in and your message.
  • Review form: your name, business name, website link (optional), star rating, review text and a photo or logo if you choose to upload one.
  • WhatsApp, email and phone enquiries: your number or email address and whatever you choose to send me, such as business details, photos and content for your website.
  • Client account (if you sign up): your name, email address, a password (stored only as a secure hash by my login provider, never visible to me), the date you accepted these terms, and your project name, status and notes. If you use "Continue with Google", Google shares your name, email address and profile picture link with me.
  • Technical data: when you visit the site, my hosting provider automatically receives your IP address, browser type and the pages requested, like any web server. Fonts load from Google's servers, so Google also receives your IP address.
  • Cookies and similar storage: see the Cookie Policy. I don't use advertising cookies, and no analytics run unless you allow them.

I don't ask for sensitive information such as health records, bank details or ID numbers through this website. Please don't send them through the forms. If you're a doctor or clinic, don't send me patient data.

3. Why I use it

I use your personal data only to:

  • reply to your enquiry and give you a quote (based on your consent, which you give by contacting me);
  • design, build, launch and maintain your website, and run your client account (to perform our agreement);
  • publish your review on the site, only after you submit it and I approve it (your consent);
  • send invoices and keep financial records (to meet legal obligations, such as tax law);
  • keep the website secure and working, for example by blocking spam form submissions (a legitimate use allowed by the DPDP Act).

I don't sell your personal data, and I don't use it for advertising.

4. Who I share it with

I use a small number of service providers (Data Processors) who handle data on my behalf, only for the purposes above:

  • Netlify (website hosting and the contact and review forms). Netlify stores form submissions on its servers, which may be outside India.
  • Supabase (client login and account data). Data is stored in the region I chose: [CONFIRM: Supabase region, e.g. Mumbai, India].
  • Google (Google Fonts on every page; "Continue with Google" if you choose it; Gmail for email).
  • WhatsApp (Meta), when you message me on WhatsApp.
  • GitHub (where the website's code is kept). Approved reviews you allow me to publish are stored there as part of the site.

I may also share data if the law requires it, for example with a government authority or court. Some of these providers store data outside India; the DPDP Act allows this except to countries the Government of India has restricted.

5. How long I keep it

  • Enquiries that don't become a project: [CONFIRM: e.g. 12 months] after our last conversation, then deleted.
  • Client project data and messages: for as long as I'm working on or maintaining your website, plus [CONFIRM: e.g. 2 years] afterwards, in case you need help with it.
  • Client account: until you ask me to delete it, or [CONFIRM: e.g. 2 years] after your project ends, whichever is first.
  • Reviews: while they're published on the site, or until you ask me to remove yours.
  • Invoices and payment records: as long as Indian tax law requires.

6. Your rights

Under the DPDP Act you have the right to:

  • Access: ask for a summary of the personal data I hold about you and how I use it, and who I've shared it with.
  • Correction: ask me to correct, complete or update inaccurate or incomplete data.
  • Erasure: ask me to delete your data when it's no longer needed for the purpose you gave it for, unless the law requires me to keep it (for example, invoices).
  • Withdraw consent at any time, as easily as you gave it. This doesn't affect anything done before you withdrew it, and if I need the data to deliver your website, I may not be able to continue that work.
  • Grievance redressal: complain to me first (see below), and if you're not satisfied, to the Data Protection Board of India.
  • Nominate someone to exercise these rights for you in case of death or incapacity.

To use any of these rights, email harnoor459456@gmail.com from the address you used with me, or message me on WhatsApp. I may ask you to confirm your identity. I'll reply within [CONFIRM: e.g. 30 days].

7. Cookies

The site uses only what's needed to work (your cookie choice and, if you log in, your login session). Optional analytics or marketing tools only run if you allow them. Details and controls are in the Cookie Policy, and you can change your choice any time with the "Cookie settings" link at the bottom of every page.

8. Security

I use HTTPS on the whole site, strict security settings in the browser, spam protection on forms, and a login provider that stores passwords only as secure hashes. Each client can see only their own project. No website is perfectly secure, but if a breach ever affects your personal data, I will inform you and the Data Protection Board of India as the DPDP Act requires.

9. Children

This website and my services are for businesses and adults. I don't knowingly collect personal data from anyone under 18. If you think a child has sent me their details, please tell me and I'll delete them.

10. Grievance contact

Grievance contact: Harnoor Singh
Email: harnoor459456@gmail.com
WhatsApp +91 79733 53244
Address: [ADD YOUR BUSINESS POSTAL ADDRESS IN LUDHIANA]

11. Changes to this policy

If I change this policy, I'll update the date at the top. If the change matters for how your data is used, I'll tell clients directly by email or WhatsApp.

WhatsApp me