Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Contact forms: When you submit an enquiry, quote request, or contact form, we collect your name, email address, phone number (if provided), company name, and the content of your message.
• Cookies and analytics: We use Google Analytics to understand how visitors use our website. This collects anonymised data about pages visited, session duration, referral sources, and device type. See Section 4 for details.
• IP addresses: Our hosting provider (Cloudflare) automatically logs IP addresses as part of normal web server operation and DDoS protection. We do not use IP addresses to personally identify visitors.
• Communications: If you email us directly, we retain the email for correspondence and follow-up purposes.

We do not collect sensitive personal data (such as financial information, health data, or government ID numbers) through this website.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to enquiries: To reply to your contact form submissions, answer questions, and provide the information or proposals you have requested.
• Improving our services: Anonymised analytics data helps us understand which pages and services generate the most interest, enabling us to improve our website content and user experience.
• Sending relevant updates: With your explicit consent, we may send you updates about our services, case studies, or industry insights. You can withdraw consent at any time by emailing info@unicrats.com or clicking the unsubscribe link in any email we send.
• Legal obligations: To comply with applicable Indian law and any lawful requests from regulatory authorities.

We do not use your data for automated decision-making or profiling.

3. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We share data only with the following service providers, each bound by confidentiality obligations or data processing agreements:

• Web3Forms: Our contact forms are processed through Web3Forms, which receives form submissions and routes them to our inbox. Web3Forms does not store your data beyond the immediate transmission.
• Google Analytics: Anonymised website usage data is shared with Google LLC for analytics purposes. Google Analytics is configured with IP anonymisation enabled. See Google's Privacy Policy for details.
• Cloudflare: Our website is served and protected by Cloudflare, which processes connection metadata as part of its CDN and security services. See Cloudflare's Privacy Policy.

We may disclose personal information if required by law, court order, or to protect the rights and safety of Unicrats or others.

4. Cookies

Cookies are small text files stored on your device by your browser. We use the following types of cookies:

• Google Analytics cookies (_ga, _gid, _gat): Track anonymised session and behavioural data to help us understand website usage. These are analytics cookies and are retained for up to 2 years.
• Preference cookies: May store your UI preferences (such as cookie consent status) to improve your browsing experience. These are first-party cookies retained for up to 12 months.
• Cloudflare cookies (__cf_bm): Set by Cloudflare for bot management and security purposes. These are session-level cookies.

How to opt out: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can also block or delete all cookies through your browser settings; however, some website functionality may be affected.

5. Data Retention

• Enquiry data: Contact form submissions and associated email correspondence are retained for 3 years from the date of submission, after which they are securely deleted unless a client relationship has been established (in which case our client data retention policies apply).
• Analytics data: Anonymised Google Analytics data is retained indefinitely as it contains no personal identifiers. Raw analytics data is retained in Google Analytics for the default 26-month period.
• Server logs: Cloudflare connection logs are retained per Cloudflare's standard retention policy, typically for a short period sufficient for security and operational purposes.

6. Your Rights

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR gives you the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to our legal obligations.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing.

Indian residents also have rights under the Digital Personal Data Protection Act 2023 (DPDP Act), including the right to access, correct, and erasure of personal data.

To exercise any of these rights, email us at info@unicrats.com. We will respond within 30 days.

7. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure:

• SSL/TLS encryption: All data transmitted to and from unicrats.com is encrypted in transit via HTTPS.
• Access controls: Access to stored enquiry data is restricted to authorised Unicrats staff on a need-to-know basis.
• Secure infrastructure: Our website is hosted on infrastructure protected by Cloudflare's security services including DDoS protection, WAF, and bot management.

No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Transfers

Unicrats is based in Mumbai, India. Your data may be processed in India by our team and by our service providers (Google Analytics, Cloudflare, Web3Forms), whose servers may be located outside India.

For users in the European Union or United Kingdom, where data is transferred to India or other countries not recognised as providing adequate data protection under GDPR, we rely on the EU Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure your data is protected to the standard required by European law.

9. Children

Our website and services are not targeted at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@unicrats.com and we will delete it promptly.

10. Contact

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about our data practices, please contact us:

We aim to respond to all privacy-related enquiries within 30 days. If you are an EU/UK resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.