This page is a draft and is being reviewed by our legal adviser.
Who we are
This website belongs to Prismodyne Private Limited, a product and engineering studio in Hyderabad, India. In this policy, "we", "us" and "our" mean Prismodyne Private Limited.
We decide how the personal data described here is used. In UK data protection terms, that makes us the controller of it.
To contact us about anything in this policy, email contact@prismodyne.com.
What we collect
When you write to us
Visitors have no accounts on this website, and it does not store anything you type. The only accounts are for our own staff, who sign in to publish articles on the blog.
The contact form does not send anything to us by itself. When you press the button, it opens a new message in your own email app with your answers filled in. Nothing reaches us unless you send that email.
So the only personal data we receive through this website is what you choose to email us. That is usually your name, your email address, the name of your business, and what you need. If you add more, such as a phone number or a budget, we receive that too.
Please do not send us sensitive information, such as passwords, bank or card details, or health information. We do not need it to reply to you.
When you visit the site
This site is hosted on AWS Amplify, a service of Amazon Web Services (AWS). Like any web server, it receives some technical details with every request your browser makes. These include your IP address, the page you asked for, the date and time, and your browser's user-agent string, which says which browser and type of device you use. They may also include the page that linked you here.
AWS uses these details to deliver the site and keep it secure. We do not use them to identify you or to build a profile of you. We may look at them to fix a fault or deal with misuse of the site.
Cookies and browser storage
The public pages of this site set no cookies. The admin area, used only by our staff to publish articles, sets cookies that keep them signed in.
The site keeps one marker in your browser's session storage so that its opening animation plays only once per visit. The marker holds no information about you, is never sent to us, and is deleted when you close the tab.
Fonts
The fonts on this site are served from our own hosting. Your browser does not contact Google Fonts or any other font service when you load a page.
Analytics
We do not use any analytics or visitor-tracking tools on this site at present.
Why we use it, and on what basis
- To reply to you. When you email us, we use what you send to answer your question and, if you ask, to discuss a project with you. You give us these details yourself, for that purpose.
- To do work you have hired us for. If you become a client, we use your details to do the work and to manage our agreement with you.
- To keep records the law requires. If you become a client, we keep contracts and invoices because Indian company and tax law requires it.
- To run the site safely. Our hosting provider processes the technical details above to deliver the site and protect it from misuse.
We do not use your details for advertising. We do not add you to a mailing list. We do not sell your data.
For how these purposes map to the law in India and the UK, see The law we follow in India and If you are in the United Kingdom.
How long we keep it
- Enquiries that do not lead to work. We delete them 24 months after our last contact with you.
- Client records. We keep them for as long as Indian company and tax law requires us to keep business records, and then delete them.
- Hosting logs. AWS keeps these under its own retention rules.
You can ask us to delete your details sooner. See Your rights and how to use them.
Who we share it with
We share personal data only with the services we need to run our business, and only for the purposes in this policy:
- Our email provider, which stores and delivers our email, including any message you send us.
- Our hosting provider, AWS, which serves this website and handles the technical details described above.
These providers process data on our behalf, under their own terms and security measures. We will also share personal data if the law requires it, for example with a court or a government authority that has the legal power to ask for it.
Where your data is processed
We are based in India, so we read and answer your email in India.
Our providers may store and process data in other countries. This website is hosted by AWS in the United States and delivered through AWS's network of servers around the world. Our email provider may also store email outside India.
Wherever your data is processed, we apply the protections described in this policy.
How we protect it
This site is served over an encrypted connection (HTTPS). It has no visitor accounts and no stored form submissions, so there is very little personal data about visitors on the site itself.
Your emails are held by our email provider, under its security measures. Only the people at Prismodyne who need to read your message, or to do the work you ask for, can see it.
If we learn of a breach that affects your personal data, we will tell you, and the authorities the law requires us to tell.
Your rights and how to use them
You can ask us to:
- tell you what personal data we hold about you, and how we use it;
- correct it if it is wrong or incomplete;
- delete it, unless the law requires us to keep it;
- stop using it for a purpose you previously agreed to.
If you are in the UK, you also have the rights listed under If you are in the United Kingdom. In India, from the date the Digital Personal Data Protection Act's provisions apply, you can also nominate someone to use these rights for you if you die or are unable to.
Your right to object. Where we use your data because it is in our legitimate interests, you can object to that at any time. We will stop unless we have a strong reason to continue that outweighs your interests, or we need the data for a legal claim.
How to ask. Email contact@prismodyne.com and say what you would like us to do. Asking costs nothing. We may need to confirm who you are before we act. We will reply within one month.
How to complain
If you are unhappy with how we have handled your data, please tell us first, using the contact in Grievance officer. We will try to put it right.
In India
Write to our grievance officer. From the date the Digital Personal Data Protection Act's provisions apply, currently scheduled for 13 May 2027, if you are not satisfied with our answer you can complain to the Data Protection Board of India.
In the United Kingdom
You can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint. You do not have to contact us first, although we would like the chance to help.
Grievance officer
Until a grievance officer is named, write to contact@prismodyne.com.
The law we follow in India
Today, how we handle personal data is governed by section 43A of the Information Technology Act 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.
The Digital Personal Data Protection Act 2023 and the Digital Personal Data Protection Rules 2025 will govern it from the date their provisions apply. That date is currently scheduled for 13 May 2027, and may change. When they apply, we will update this policy.
Under these laws, when you email us you give us your details voluntarily, for a specific purpose: to get a reply. We use them for that purpose, and for the other purposes in Why we use it, and on what basis.
If you are in the United Kingdom
We offer our services to businesses in the UK, so the UK General Data Protection Regulation (UK GDPR) applies to how we handle personal data of people in the UK. We are the controller of that data.
The lawful bases we rely on are:
- Legitimate interests, to reply to people who contact us and to keep this site running safely.
- Steps before a contract, when you ask us about a project, and contract, when you become a client.
- Legal obligation, for the business records the law requires us to keep.
As well as the rights in Your rights and how to use them, you can ask us to limit how we use your data, and to give you the data you provided in a common, machine-readable format.
When you write to us from the UK, your details are transferred to India so that we can reply, and to our providers as described in Where your data is processed.
You can complain to the Information Commissioner's Office at any time. See How to complain.
Children
This site is for businesses. It is not meant for children, and we do not knowingly collect personal data from anyone under 18. If you think a child has sent us their details, tell us and we will delete them.
Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change affects how we use data we already hold about you, we will tell you by email where we can.