This policy explains what personal information we collect on this website, why we collect it, who handles it, and how you can control it. It applies to visitors in every country, and covers the GDPR (EU and UK), India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and privacy rules for US residents.
1. Who we are
GeekyBones Lab Private Limited is responsible for your personal information on this website. We are the “controller” under the GDPR and the “data fiduciary” under the DPDP Act.
Plot No 986, Ground Floor, Sector 82, JLPL Industrial Area, Sahibzada Ajit Singh Nagar, Punjab 160055, India
General enquiries: contact@geekybones.com
Privacy questions, requests and complaints (our grievance contact): privacy@geekybones.com
2. What we collect
When you contact us. If you send us a message through a form, we receive what you enter: your name, email address, company, the type of help you need, your project stage and your message. We also record the page you sent it from and your IP address, which we keep with the enquiry to help us spot spam and abuse. Your name, a valid email address and a message are needed so we can reply. Everything else is optional.
When you subscribe. If you sign up for our newsletter or updates, we collect your email address, your name if you give it, the date you signed up and the page you signed up from.
Automatically. When you visit the site, our hosting provider, Cloudflare, receives basic technical details such as your IP address, browser type, country, the pages you request and the time. We use this to deliver the site, keep it secure and understand how it is used.
3. Cookies and analytics
We don’t set advertising or tracking cookies, and we don’t use third-party analytics tools such as Google Analytics.
We use Cloudflare’s analytics to see how many people visit and which pages they read. This service processes visitors’ IP addresses and basic browser details to produce those reports. We use the results as overall figures and don’t use them to follow or identify individual visitors.
Our contact form uses Cloudflare Turnstile to tell people from bots. It checks signals from your browser and your IP address, and it may use limited browser storage to do so.
4. Newsletter and updates
We send occasional emails about our work, new articles and our services. You can receive them in two ways: by subscribing to our newsletter or updates, or by ticking the updates box on our contact form. If you don’t tick the box, we use the details in your enquiry only to reply to it. We only use the email address you gave us for the emails you asked for.
- What you get: news about our work, articles and updates about our services. We don’t send advertising for other companies.
- How often: occasionally, not on a fixed schedule.
- How to stop: every email has an unsubscribe link. You can also email privacy@geekybones.com. We stop sending promptly, and in any case within 10 business days.
- What we keep: your email address stays on the list until you unsubscribe. After that we keep only enough (your address on a “do not email” list) to make sure we don’t email you again.
- Who sees it: your address is never sold or shared for marketing. Our email provider sends the messages on our behalf.
- Who we are: every email shows our company name and postal address.
5. Why we use your information
We use your information for these purposes:
- To reply to your enquiry and discuss working together. In the EU and UK, because you asked us to and because we have a legitimate interest in answering business enquiries. In India, on the basis of your consent, which you give when you send the form.
- To send you our newsletter and updates. In the EU, UK and India, on the basis of your consent, which you can withdraw at any time by unsubscribing.
- To keep the site and form secure and block spam and abuse, including by keeping your IP address with an enquiry. Our legitimate interest in protecting the site.
- To understand how the site is used, using overall analytics figures. Our legitimate interest in improving the site.
We do not sell your information, we do not share it for marketing, and we do not make decisions about you by automated means.
6. Who we share it with
These providers process information on our behalf. We use them only to run the site and answer you.
- Cloudflare hosts and delivers this website and protects it from attacks. It provides our analytics, the Turnstile bot check and request limits, and hosts the database where we store enquiries, including the IP address kept with each one.
- Resend is the email service that delivers your enquiry to our team and the newsletters and updates we send. It handles the details you entered in the form, because they are in the email, and the email addresses we send to.
We may also share information if the law requires it, or to protect our rights or the safety of others.
7. Where it is processed
Our providers operate around the world, so your information may be processed in countries other than your own, including the United States and India, where we are based. Where the law requires it, we rely on safeguards such as standard contractual clauses in our providers’ terms.
8. How long we keep it
We keep enquiries for as long as we need to respond and to manage any relationship that follows, and for as long as the law requires. We review stored enquiries from time to time and delete the ones we no longer need. We keep newsletter subscriptions until you unsubscribe, as described in section 4. Analytics figures are kept by Cloudflare for the period its service provides.
9. Your rights
If you are in the EU or UK
You have the right to:
- access the personal information we hold about you and get a copy
- correct information that is wrong or incomplete
- ask us to delete it, restrict how we use it, or object to our use of it
- receive your information in a portable format
- withdraw your consent at any time, where we rely on it, including by unsubscribing from our emails
Under India’s DPDP Act
You have the right to:
- get a summary of the personal data we process and how we use it
- have your data corrected, completed, updated or erased
- withdraw your consent at any time, including by unsubscribing from our emails. This does not affect what we did before you withdrew it
- have your complaints dealt with, and nominate another person to use these rights for you if you cannot
To use any of these rights, email privacy@geekybones.com. We may ask you to confirm who you are, and we will reply within the time the law allows.
10. If you live in the United States
The United States has no single privacy law. Several states, including California, have their own, and they apply to some businesses. We follow the same approach for everyone, whatever state you live in.
- We don’t sell your personal information, and we don’t share it for advertising that follows you across websites.
- What we collect: identifiers (your name, email address and IP address), business details you give us (such as your company and what you need), your message, and basic visit data such as pages viewed. It comes from you and from your browser. We use it for the purposes in section 5 and share it only with the providers in section 6.
- Your choices: depending on where you live, you may have the right to know what we hold about you, to ask us to correct or delete it, and not to be treated differently for using these rights. Email privacy@geekybones.com. We may need to confirm who you are, and you can use an authorized agent. We will reply within the time your state’s law allows.
- Do Not Track and Global Privacy Control: we don’t track visitors across websites or use advertising cookies, so we treat everyone the same, whether or not your browser sends one of these signals.
- Email: our newsletter and update emails identify us, show our postal address, and include an unsubscribe link that we honor within 10 business days, as US email law (CAN-SPAM) requires.
- California “Shine the Light”: we don’t give personal information to other companies for their own direct marketing.
11. Complaints
Please contact us first at privacy@geekybones.com, which is our grievance contact for privacy matters, and we will try to put things right. If you are in the EU or UK, you can also complain to your local data protection authority. In India, if we have not resolved your complaint, you can take it to the Data Protection Board of India.
12. Other things to know
Children. This website is for businesses and is not meant for anyone under 18. We do not knowingly collect personal information from children. If you think a child has sent us information, tell us and we will delete it.
Security. We use reasonable security measures to protect your information, including encrypted connections (HTTPS) and protection by our hosting provider. No method of sending or storing data is completely secure, so we can’t guarantee absolute security.
Links to other sites. This site links to other websites, such as our social media pages. They have their own privacy policies, and we are not responsible for how they handle your information.
Changes to this policy. If we change how we handle your information, we will update this page and the date at the top.