Summary: We respect your privacy. We collect only what is needed to provide our services, never sell your data, and store everything securely. Read below for full details.
1. Introduction
Hanora Studio (“we”, “our”, “us”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website or use our web development services.
By using this website or engaging our services, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Contact Forms: Name, phone/WhatsApp number, email address, company name, project details, budget range
- WhatsApp Communication: Messages, files, and media shared during project discussions
- Project Engagement: Business requirements, content, images, logos, and other materials you provide for website development
- Payment Information: UPI ID, bank details, or payment receipts (we do not store full card numbers)
2.2 Information Collected Automatically
- Device Information: Device type (mobile/tablet/desktop), browser type
- Usage Data: Pages visited, time spent on pages, referring website
- Session Data: A randomly generated session identifier (no cookies used for tracking)
2.3 Information We Do NOT Collect
- We do not use third-party tracking cookies
- We do not collect location data, IP addresses, or biometric data
- We do not collect data from minors (under 18 years)
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|
| Respond to project inquiries | Name, phone, email, message | Consent / Legitimate interest |
| Deliver web development services | All project-related data | Contractual necessity |
| Send project updates & invoices | Phone, email | Contractual necessity |
| Improve our website | Anonymous usage analytics | Legitimate interest |
| Showcase completed work | Project name & screenshots (with permission) | Consent |
4. Data Storage & Security
4.1 Where We Store Data
- Contact form submissions are stored securely in our database hosted on Supabase (cloud infrastructure with encryption at rest and in transit)
- Project files may be stored on Google Drive, GitHub, or local development machines
- Communications are stored within WhatsApp’s encrypted platform
4.2 Security Measures
- Encryption: All data transmitted via our website uses HTTPS/TLS encryption
- Access Control: Database access is restricted to authenticated administrators only via Row Level Security (RLS)
- Input Sanitization: All user inputs are sanitized to prevent XSS and injection attacks
- Rate Limiting: Contact forms have anti-spam protections including rate limiting and bot detection
- No Plain-Text Secrets: API credentials are obfuscated and not stored in plain text
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in these circumstances:
- Service Providers: With hosting providers (Netlify, Supabase) and domain registrars solely to deliver our services
- Legal Requirements: If required by law, court order, or government regulation under Indian law
- Business Transfer: In the event of a merger, acquisition, or sale of business assets (you would be notified)
- With Your Consent: When you explicitly authorize us to share information (e.g., adding your project to our portfolio)
6. Data Retention
- Contact Inquiries: Retained for 2 years after last communication, then deleted
- Project Data: Retained for 1 year after project completion, then archived or deleted per your request
- Analytics Data: Aggregated and anonymized after 6 months
- Payment Records: Retained for 7 years as required by Indian tax law (Income Tax Act, 1961)
- Portfolio Samples: Retained until you request removal
7. Your Rights
You have the following rights regarding your personal data:
- Right to Access: Request a copy of all data we hold about you
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Right to Withdraw Consent: Withdraw consent for data processing at any time
- Right to Data Portability: Receive your data in a commonly used, machine-readable format
- Right to Object: Object to processing of your data for analytics or marketing purposes
To exercise any of these rights, contact us via WhatsApp at +91 8482961442. We will respond within 30 days.
8. Third-Party Services
| Service | Purpose | Data Shared |
|---|
| Supabase | Database & Authentication | Contact form data, analytics |
| Netlify | Website hosting & CDN | None (static files only) |
| Google Fonts | Typography | Browser request headers |
| WhatsApp (Meta) | Client communication | Messages & shared files |
| CDN providers (cdnjs, unpkg) | JavaScript libraries | Browser request headers |
Each third-party service operates under its own privacy policy. We encourage you to review them.
9. Cookies & Local Storage
Our website does not use tracking cookies. We use:
- Session Storage: A temporary session ID for anonymous analytics (cleared when you close the browser)
- Local Storage: Supabase authentication token (only if you log in as admin)
No personal data is stored in cookies or local storage for regular visitors.
10. Children’s Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
11. International Data Transfers
Your data may be processed on servers located outside India (e.g., Supabase cloud infrastructure). By using our services, you consent to such transfers. We ensure all service providers maintain adequate data protection standards.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For significant changes, we will notify you via WhatsApp or email. Continued use of our website after changes constitutes acceptance of the updated policy.
13. Grievance Officer
In accordance with the Information Technology Act, 2000 and rules made thereunder, the Grievance Officer for the purpose of this Privacy Policy is:
Umesh Pardeshi
Hanora Studio
Nandurbar, Maharashtra 425412, India
WhatsApp: +91 8482961442
Response Time: Within 30 days of receiving a complaint
14. Applicable Law
This Privacy Policy is governed by the laws of India, including:
- Information Technology Act, 2000
- Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
- Digital Personal Data Protection Act, 2023 (as applicable)
Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Nandurbar District, Maharashtra, India.