This Privacy Policy explains how EqualStack Technologies [LEGAL_ENTITY_SUFFIX] ("we", "us") collects and uses personal data when you visit https://equalstack.tech or contact us. We are the data controller under the EU/UK General Data Protection Regulation (GDPR) and the data fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act).
Who we are
EqualStack Technologies [LEGAL_ENTITY_SUFFIX], [STREET_ADDRESS], Surat, Gujarat, [POSTAL_CODE], India. Contact for privacy matters: [EMAIL].
What we collect
- Information you give us: your name, email, company, phone number, project details, and CVs or links you send through our contact, quote and careers forms, or by email.
- Newsletter: your email address, if you subscribe.
- Technical data: IP address, browser type and pages visited, collected by our hosting provider for security and, only with your consent, by analytics tools.
We do not knowingly collect data from children under 18.
Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) | Basis (DPDP Act) |
|---|---|---|
| Reply to enquiries and prepare quotes | Legitimate interests / steps before a contract | Consent and legitimate uses |
| Assess job applications | Legitimate interests / steps before a contract | Consent |
| Send the newsletter | Consent | Consent |
| Analytics to improve the site | Consent | Consent |
| Keep the site secure and prevent abuse | Legitimate interests | Legitimate uses |
| Meet legal obligations | Legal obligation | Compliance with law |
Who we share it with
We use trusted processors only to run our business: website hosting (for example Vercel), email delivery (for example Resend), analytics (Google Analytics or Plausible, only with consent) and our business email and CRM tools. Each is bound by a data processing agreement. We never sell your data.
International transfers
We are based in India and some processors are in the US or EU. Where data leaves the EEA or UK, we rely on adequacy decisions or Standard Contractual Clauses. Transfers out of India follow the DPDP Act and any restrictions notified by the Government of India.
How long we keep it
- Enquiries and quotes: up to 24 months after our last contact, unless we start working together.
- Job applications: up to 12 months, so we can consider you for future roles. Ask us to delete them sooner at any time.
- Newsletter: until you unsubscribe.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent at any time. Under the DPDP Act you can also nominate someone to exercise your rights and seek grievance redressal.
To exercise any right, email [EMAIL]. We respond within 30 days. If you're not satisfied, you can complain to your local data protection authority or, in India, the Data Protection Board of India.
Grievance officer (India)
Name: [GRIEVANCE_OFFICER_NAME]. Email: [EMAIL]. We acknowledge grievances within 48 hours and resolve them within the time required by law.
Security
We use encryption in transit, access controls, least-privilege access and reputable providers. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires it.
Cookies
See our Cookie Policy for details and how to change your choices.
Changes
We may update this policy. The "Last updated" date shows the latest version, and significant changes will be highlighted on this page.