Privacy policy

01

Who is responsible

Sandesh Bhat is an individual freelancer based in Sirsi, Karnataka, India, and is responsible for the personal information handled for this website (https://sandeshbhat.in) and direct business enquiries. For privacy questions and requests, contact sandeshbhat2424@gmail.com.

This policy covers this portfolio and direct enquiries. If a client project involves handling personal information on a client's instructions, the project agreement and any required data processing agreement describe that separate role.

02

Information handled

The enquiry form collects your name, email address, selected service, optional business name and message. The server checks the submission and sends an email through Resend to the published contact inbox. No enquiry database is configured on this website. Email, telephone and WhatsApp links open the communication service you choose; information sent through them is handled to respond to you.

The form uses a hidden spam-check field and a temporary, hashed submission identifier for a limited per-server submission count. The identifier uses a hosting-provided network address where available, otherwise the supplied email address. It is not used for advertising. The website has no account registration, mailing-list signup or payment checkout.

• Contact and project information you provide: your name, contact details, business details, messages, requirements, correspondence and attachments.
• For agreed projects: the minimum contract, invoice and transaction records needed to deliver the work and meet record-keeping obligations. Do not send payment-card details, passwords or unnecessary sensitive information through the form or email.
• Hosting and security information: Vercel may process network and request information, such as an IP address, requested URL and technical logs, to deliver and protect the site.
• If you opt in: Vercel Web Analytics measures page visits and general information about browsers, devices, approximate location and referral sources.
• A privacy preference, its version and its save and expiry times are stored in this browser. No contact details are stored with that choice.

03

Purposes and legal grounds

Information is used to answer enquiries, prepare proposals, deliver accepted work, manage invoices, resolve issues and protect this website. It is not used to send unrelated promotional messages without the permission required by law.

Where the EU or UK GDPR applies, responding to a requested proposal and delivering work rely on steps towards a contract or performance of a contract; required records rely on legal obligations; proportionate security and business administration rely on legitimate interests, balanced against your rights. Optional analytics relies on your consent. Other applicable laws may use different grounds, including consent or permitted uses for information you voluntarily provide. Where consent is required, it must be obtained before that processing.

You can browse without providing contact information and without enabling analytics. Contact and project details may be necessary to answer a specific request or perform agreed work.

04

Optional Vercel Analytics

Analytics is off by default and is loaded only after you allow it in Cookie settings. Rejecting it does not restrict the website. Global Privacy Control and Do Not Track signals keep it off, even when a previous preference allowed it.

The integration removes query strings and URL fragments from page-view URLs, measures only known public pages, and sends no custom events. It does not use advertising cookies or session replay. Vercel describes its measurements as aggregated and its visitor hash as discarded after 24 hours; that is not a promise that all hosting logs or aggregate reports expire after 24 hours.

Withdrawing consent stops future analytics events. It does not undo earlier lawful processing or necessarily identify historical aggregate measurements as yours.

05

Providers and disclosures

Vercel provides hosting and, if allowed, analytics. Resend processes the enquiry email, including the information submitted in the form, to deliver it to the Gmail contact inbox. Resend and the inbox provider may retain email content and delivery records under their service settings and policies. Your chosen telephone or messaging provider may also handle communications. LinkedIn and WhatsApp have their own privacy practices when you follow their links.

Information may be disclosed to service providers needed for an agreed engagement, professional advisers where needed, or authorities where disclosure is legally required. Project-specific providers and access requirements should be identified in the project agreement before access is granted.

Personal information is not sold or shared for cross-context behavioural advertising. There are no advertising pixels in this website, and no solely automated decisions with legal or similarly significant effects are made about visitors.

06

International processing

The freelancer is based in India. Hosting and communication providers may process information in India, the United States and other locations used by their infrastructure and service providers. The actual locations depend on the service and its configuration.

Where applicable law restricts international transfers, a permitted transfer mechanism and any required assessment or contractual safeguards are needed. Depending on the law and destination, these may include an adequacy decision or approved contractual clauses. Contact the privacy address for information about the providers and safeguards relevant to your engagement. This notice does not itself create a transfer agreement or certify a provider's compliance.

07

Retention and security

Enquiry correspondence is kept while needed to answer and follow up on the enquiry. Project records are kept while needed to deliver the work, provide agreed support, resolve disputes and meet applicable tax, accounting or legal obligations. Records that no longer serve those purposes should be deleted or anonymised; a legal preservation requirement may extend retention. You can ask what retention requirement applies to your records.

Privacy preferences expire after 180 days or when you clear browser storage. An expired or invalid preference is ignored, and analytics remains off until a fresh choice. If browser storage is blocked, a choice lasts only for the current visit. Provider log and report retention depends on their settings and terms.

Access should be limited to people and services that need it, with appropriate account and device protections. Internet transmission and storage cannot be guaranteed completely secure. Relevant incidents must be assessed and reported where applicable law requires.

08

Your privacy rights

Depending on the law that applies to you, you may request access, a copy, correction, deletion, restriction, portability, objection to certain uses, withdrawal of consent, or information about disclosures. Some jurisdictions also provide rights to nominate another person, appeal a refused request or seek review. These rights have legal conditions and exceptions; required financial or dispute records may need to be retained.

People in the EEA, UK and Switzerland can raise concerns with their relevant data protection authority. If applicable, residents of California and other US states can request the privacy rights provided by their state law, including relevant opt-outs and appeals. Rights under Brazil's LGPD, Canada's applicable privacy laws, South Africa's POPIA, Australia and New Zealand's privacy laws, and India's applicable data protection rules depend on their scope and commencement. Other local rights remain available.

Email sandeshbhat2424@gmail.com with your request and enough information to locate the relevant correspondence. Only proportionate identity checks will be requested. Requests and complaints will be handled within the deadline required by applicable law, with an explanation of any lawful refusal or extension. You may contact your local regulator without contacting the freelancer first. Exercising your rights will not result in unlawful discrimination.

09

Children and updates

The services are intended for adults and organisations; the site is not directed at children and does not knowingly solicit children's personal information. If a child has supplied information, contact the privacy address so it can be reviewed and removed where appropriate.

The date at the top identifies the latest policy revision. Material changes to optional processing require a fresh choice where applicable. Changes to this notice do not remove existing legal rights.