Privacy Policy

This Privacy Policy explains how DONGOLABS LLP ("dongolabs", "we", "us") collects, uses, and protects personal data through dongolabs.com and when we scope or deliver work. DONGOLABS LLP is the controller responsible for personal data handled under this policy.

Registered office: Office No. 80, 2nd Floor, Jaipur Electronics Market, Jaipur, Rajasthan, IN. Contact: [email protected] or [email protected].

This policy covers personal data you give us (for example through the contact form, email, or a call) and data collected automatically when you browse the Site. It does not cover third-party sites we link to, which have their own policies.

• Enquiry data — name, email, company, region, and message you send us.
• Client data — the information needed to perform an engagement, as set out in the relevant SOW.
• Usage data — pages viewed, device type, browser, approximate region, and the campaign or referrer that brought you here. Aggregate, cookieless statistics are collected for all visitors under legitimate interests; cookie-based analytics and marketing measurement are collected only where you have consented.
• Technical data — IP address and security logs held briefly by our hosting provider to keep the Site online and safe.
• Cookies — described in our Cookie Policy. Essential cookies are always on; analytics and marketing cookies are set only with your consent where the law requires it.

• To respond to enquiries and scope potential work.
• To deliver and improve the services you engage us for.
• To operate, secure, and improve the Site.
• To understand, in aggregate, which pages are useful.
• To measure which campaigns and ads lead to enquiries, where you have allowed marketing cookies.
• To meet legal or contractual duties where they apply.

We do not sell your personal data, and we do not show third-party advertising on this Site. Where you allow marketing cookies, Google and Meta measurement tags help us attribute an enquiry to the campaign that produced it; see our Cookie Policy for the specific providers.

Our processing relies on the following, depending on where you are:

• India (DPDP Act 2023). We process on the basis of your consent and our legitimate uses, including providing the services you request and keeping the Site secure. Measurement runs on arrival with notice and an opt-out.
• EEA / UK / Switzerland (GDPR / UK GDPR / FADP). Prior consent for optional cookies and marketing; legitimate interests for running a secure site, answering enquiries you start, and cookieless aggregate measurement; and contract where we need data to deliver work you have asked us to begin. Nothing optional is set before you opt in.
• United States (e.g. CCPA/CPRA). An opt-out regime: measurement runs by default with notice, and you may opt out at any time. We do not "sell" or "share" personal information as those terms are defined, and we honour the rights described below.
• Australia and elsewhere. Notice-based, with the same opt-out available.

You may withdraw consent at any time without affecting processing that was lawful before withdrawal.

We use a small set of processors to run the Site and receive messages (for example hosting, email delivery, and form handling). Each may process data only on our instructions under appropriate terms. Where you allow analytics or marketing cookies, usage data is also shared with our measurement providers — Plausible, Google, and Meta — as described in our Cookie Policy; Google and Meta act as independent controllers for parts of that processing. We do not share the contents of your enquiry with third parties for their own marketing. Where legally required, we use appropriate safeguards for any cross-border transfer.

DONGOLABS LLP is established in India and serves clients in the US, UK, Australia, the Middle East, and elsewhere. If personal data is transferred across borders, we rely on lawful transfer mechanisms (such as standard contractual clauses under the GDPR/UK GDPR) where they apply.

Enquiry data is kept until the conversation ends and a reasonable follow-up window passes — typically no longer than 24 months if no engagement begins. Active client files follow the retention set in your contract. Analytics, where used, are kept in aggregated or short-lived form. Security logs are rotated on a shorter cycle by our host.

Subject to applicable law, you may have rights to access, correct, export, delete, or restrict your personal data, to object to certain processing, and (where consent is the basis) to withdraw consent. Residents of India, the EEA, the UK, California, and other jurisdictions may exercise these rights. To do so, email [email protected]; we may ask you to verify your identity. We respond without undue delay and within statutory timeframes.

If you are unhappy with how we handle your data, contact [email protected] so we can help. You may also contact your local authority — for example the Data Protection Board of India, an EEA supervisory authority, or the UK ICO — as applicable.

We use HTTPS, access controls, and sensible hosting defaults. No transmission or storage method is perfectly secure; if we learn of a breach affecting your rights, we will notify you and regulators as the law requires.

The Site is not directed at anyone under 16, and we do not knowingly collect their personal data. If you believe a child has contacted us, write to [email protected] and we will delete what we can identify.

We will post updates here with a new "last updated" date. Material changes affecting how we use personal data will be called out more clearly where we have a practical way to reach you.

This policy is a practical template prepared for DONGOLABS LLP. It is not legal advice. Data protection law differs by jurisdiction and changes over time — have it reviewed by qualified counsel before relying on it, especially for cross-border transfers and regulated sectors.