Privacy Policy

01Operator and scope

Digi Craft Studio is the public brand operated by Nasir Khan, a sole proprietor. Digi Craft Studio is based in Punjab, India. Contact: support@digicraftstudio.in. Website: https://digicraftstudio.in.

This notice covers the Digi Craft Studio agency website, its enquiry forms, Project Cost Estimator, newsletter, first-party website analytics and related administrative processes. A separately launched product or customer system may require its own privacy notice.

02Information collected

The Contact page and sitewide enquiry forms store the name, email address, optional phone number and company, selected service, message, source page, submission reference and consent time supplied by the visitor. Authenticated studio administrators may record a status and internal follow-up notes.

The Project Cost Estimator stores selected requirements, a preliminary budget and timeline range, pricing snapshot, reference and session identifier. A submitted proposal request also stores contact details, project description, preferred contact method and consent time.

Newsletter records may include an email address, optional name, signup source, consent time, pending or active status, confirmation timestamps and unsubscribe information. After unsubscribe, the active profile is minimized to the approved suppression information.

Normal website requests involve technical information such as IP address, requested URL, browser information and request time. Security, diagnostic and administrative logs may record information reasonably needed for their stated purpose. Do not submit passwords, payment-card credentials, identity documents, health records or other unnecessary sensitive information through a public enquiry form.

03Purposes and lawful handling

Digi Craft Studio processes personal information only for identified and lawful purposes, including responding to enquiries, preparing requested estimates, delivering and administering agreed services, managing consented newsletter communications, securing and improving the website, complying with legal obligations, and establishing or protecting legal rights.

Where consent is required, it will be requested separately and may be withdrawn subject to applicable law. Information will not be used for an incompatible purpose without an appropriate legal basis or further notice. A general enquiry does not create a newsletter subscription or paid engagement.

04Cookies, storage and first-party analytics

The website uses first-party session and request-security cookies, the dcs_visitor cookie for first-party website analytics, and sessionStorage for Project Cost Estimator selections within the current browser tab. Analytics records pseudonymous visitor and session identifiers, page views, referrer or traffic information, device and browser category, and relevant interaction events. Stored analytics identifiers are hashed and are not described as anonymous.

Google Analytics, Meta Pixel, advertising trackers and unrelated third-party marketing trackers are not currently active. The Cookie Policy describes the current inventory and visitor controls. Optional tracking must not be activated until its privacy and consent requirements have been reviewed and an appropriate consent mechanism implemented where required.

05Newsletter consent and choices

Newsletter subscribers may receive design and technology insights, articles, studio news, product and project updates, service announcements, offers and promotions from Digi Craft Studio. Consent applies only to Digi Craft Studio communications; subscriber details are not sold or shared for unrelated third-party promotional use.

A subscription begins only after the visitor submits an email address and consent and confirms through the secure link sent to that address. Pending subscriptions remain inactive. Confirmation links expire 72 hours after issuance, and only the most recent valid confirmation token is accepted.

Every marketing email must include a secure one-click unsubscribe link. Unsubscribe takes effect immediately and displays confirmation. Removal may also be requested through support@digicraftstudio.in. Re-subscription requires a new double opt-in confirmation and cannot be silently caused by an import, admin action or form submission.

06Providers, sharing and locations

The production website and database use Hostinger hosting, and studio email uses Hostinger Mail. Authenticated studio administrators can access relevant business records. Email delivery sends administrator notifications and customer acknowledgements, and proposal requests may generate estimate emails and PDF attachments. WhatsApp links open a draft conversation only when selected; the website does not send the message automatically.

Digi Craft Studio uses service providers for hosting, database operations, email delivery, security and related technical functions. These providers may process information in India or other locations where the relevant provider infrastructure operates. Digi Craft Studio will review provider locations and apply contractual, technical and organizational safeguards required by applicable law. Providers may process information only for the authorized service or another lawful requirement.

Information may also be disclosed where required by law or reasonably necessary to establish, exercise or protect legal rights. Search Console and Bing Webmaster Tools are configured for ownership and reporting, but no search-indexing submission is made while website indexing is disabled.

07Retention

Enquiries that do not become paid projects are generally reviewed 12 months after the last meaningful customer interaction. Proposal requests and their linked estimates that do not become paid projects follow the same review schedule. Records no longer reasonably required for business, legal, security or dispute-related purposes are deleted or anonymized.

Unsubmitted estimator sessions and associated technical progress events are retained for up to 180 days after the last estimator activity. Individual pseudonymous first-party analytics events are retained for up to 180 days from the date each event is recorded; later activity does not restart an earlier event’s period.

Active newsletter records are retained while the subscription remains active and are limited to information needed for subscription management and consent evidence. Expired pending subscription records are deleted within 30 days after expiry, except for limited temporary security, abuse-prevention or troubleshooting needs. An unsubscribe leaves only the email address, unsubscribe date, source or method and suppression status until a new double opt-in subscription is completed.

Security, fraud-prevention, abuse-prevention and admin activity logs are retained for up to 12 months from the creation date of each record. Longer retention is exception-based. Identifying information should be minimized where a less identifying form is sufficient.

Paid-project, contract, invoice, payment, accounting and tax records follow their applicable operational and legal schedules rather than one blanket period. Records connected with an audit, investigation, claim, dispute or legal hold may be retained until the matter and applicable period end. Exceptionally retained information is reviewed at least once every 12 months, with a proportionate record of the reason and outcome where practical.

08Security, backups and incidents

Access to administrative records is restricted to authenticated administrators, and the production website uses encrypted HTTPS connections. No internet service can promise absolute security.

Production backups follow the verified retention and rotation schedule of Digi Craft Studio’s hosting arrangements. Information deleted from active systems may remain temporarily in protected backups until normal rotation overwrites it. Backups are used for security and disaster recovery and are not ordinarily restored solely to recover deleted personal information. If a backup is restored, applicable deletions and restrictions should be reapplied where reasonably practicable.

Digi Craft Studio will assess suspected personal-data incidents, take reasonable steps to contain and remediate confirmed incidents, preserve proportionate response records, and notify affected persons or competent authorities where and within the time required by applicable law.

09Privacy requests and complaints

Depending on applicable law, a person may have rights concerning access, correction, deletion, consent withdrawal and complaints. Send a request to support@digicraftstudio.in with enough information to identify the relevant interaction. Proportionate verification may be requested where reasonably necessary; unnecessary identity documents or sensitive information should not be sent.

Digi Craft Studio aims to acknowledge privacy requests and complaints within 2 business days and provide a substantive response or progress update within 7 business days. More complex matters may take longer, in which case an update will be provided. Any mandatory legal deadline takes precedence.

Nasir Khan oversees the review of complaints and will make reasonable efforts to resolve concerns. This role is not described as a formal grievance officer unless separately designated.

10Children and policy updates

The general Digi Craft Studio website and enquiry services are intended for adults and business users. Digi Craft Studio does not knowingly request personal information directly from children through these general services. If information about a child is submitted without appropriate authority, a parent or guardian may contact support@digicraftstudio.in for review.

Any future service specifically involving children requires a separate privacy and safeguarding assessment before launch. This policy will be reviewed when material practices, providers or legal requirements change.