Privacy
What this site collects, why, who else sees it, how long we keep it, and what you can control.
Who we are
This site is run by Shivam Ojha, trading as ConsulShivTech, a sole proprietorship based in India (“we”). We are the controller (under India’s Digital Personal Data Protection Act 2023, the data fiduciary) for the personal data described here.
For any privacy request, use the contact form and start your message with “Privacy request”. We reply within 30 days, and we may ask you to confirm your identity from the email address we hold.
What we collect and why
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Contact form: name, email, stage, budget, message | To reply to you | Our legitimate interest in answering enquiries; steps you ask for before a contract | 24 months after our last exchange, unless you hire us |
| Payment: name, email, phone number, card network, last four digits, country, payment status | To take payment for the discovery call and keep accounts | Contract; legal obligation (tax and accounting records) | 8 years, the period Indian tax law requires |
| Your agreement to the terms, with its time | To show what you agreed to if a payment is disputed | Contract; our legitimate interest in defending claims | 8 years, with the payment record |
| Brief: your idea, stage, budget, launch date and any document link | To prepare for your call | Contract | 90 days after you send it, unless you hire us |
| Booking: the details you enter in Google Calendar | To hold the call | Contract | 12 months after the call, unless you hire us |
| Chat messages | To answer your question | Our legitimate interest in answering enquiries | Not stored by us |
If you hire us, the records above become part of the engagement and are kept for the engagement plus 8 years. We never sell personal data or use it for advertising.
Cookies
This site sets no cookies of its own.
Analytics (Plausible)
We use Plausible Analytics to count page views, clicks on the booking button, payment steps, video plays and views of the booking calendar. Plausible sets no cookies, stores no personal data and does not track you across sites. Its data is hosted in the EU.
Payments (Razorpay)
The discovery call is paid in advance on Razorpay’s secure payment page. Your card details go to Razorpay and its card networks and never touch this site. We receive the payment details listed above, under Razorpay’s privacy policy.
Your brief and documents
After paying, you can describe your idea and share a link to your documents. The brief passes through our server to Formspree, which delivers it to us by email. The documents stay wherever you host them, and you control who can open the link. You can revoke access at any time. Share only what you are comfortable sharing before an NDA.
Contact form (Formspree)
Messages from the contact form pass through our server to Formspree, which delivers them to us by email.
Booking calendar (Google Calendar)
After payment, the scheduling page can show a Google Calendar booking page. It does not load until you press “Load calendar”. Once it loads, Google may set cookies and receives your IP address and browser details, under Google’s privacy policy. If you book, Google Calendar stores the details you enter and sends them to us. You can use the new-tab link instead, and the site does not remember your choice.
Chat assistant (Google Gemini)
The chat assistant sends the messages you type to Google’s Gemini API to generate replies. We do not store the conversation. Do not enter personal or confidential information in the chat.
Hosting (Cloudflare)
The site is served by Cloudflare, which processes technical request data such as IP addresses to deliver and protect the site.
Transfers outside your country
We work from India, and the services above run in India, the EU and the US. Where UK or EU data protection law applies, transfers rely on the providers’ standard contractual clauses or an adequacy decision.
Your rights
Depending on where you live, including under the UK GDPR, the EU GDPR and India’s Digital Personal Data Protection Act 2023, you can ask to:
- see the personal data we hold about you, and get a copy;
- correct it or complete it;
- delete it, unless the law requires us to keep it (for example, payment records);
- restrict or object to how we use it;
- withdraw consent where we rely on it;
- nominate someone to act for you (India).
Use the contact form as described above. If you are not satisfied with our answer, you can complain to your data protection authority: the ICO in the UK, your national authority in the EU, or the Data Protection Board of India.
Children
This site and our services are for adults running a business. We do not knowingly collect data from anyone under 18.
Changes
If we change this notice, the date below changes. Material changes apply only to data collected after the change.
Last updated 23 September 2026.