Privacy Policy
Your privacy matters. This page explains what data we collect, why we collect it, and how you can control it.
Last updated: October 8, 202601 Who We Are (Data Controller)
Smart RWD Web ("we", "us", "our") operates the website https://smartrwdweb.com and provides AI-integrated web development, responsive design, and custom software services.
We are the data controller responsible for the personal data you share with us through this website. Our contact details are provided in Section 14.
02 Data We Collect
We collect the following categories of personal data:
- Contact form data — your first name, last name, email address, phone number, company name, subject, and message.
- Technical data — IP address, browser type and version, operating system, referring URL, and pages visited (collected via server logs and analytics).
- Cookie data — as described in Section 4.
- Communication data — any emails or messages you send us after submitting a form.
We do not collect special categories of data (such as health, religious, or biometric information), and we do not knowingly collect data from children under 16 (see Section 12).
03 Legal Basis for Processing (GDPR)
Under the EU General Data Protection Regulation (GDPR), we must have a lawful basis for processing your data. We rely on:
- Consent (Art. 6(1)(a)) — for non-essential cookies, marketing emails, and any optional data you provide.
- Contract (Art. 6(1)(b)) — to respond to your inquiry, provide a quote, or deliver services you have requested.
- Legal obligation (Art. 6(1)(c)) — to retain records required by tax and commercial law.
- Legitimate interest (Art. 6(1)(f)) — for basic website security, spam prevention, and analytics that use anonymized data.
05 How We Use Your Data
We use your personal data only for the purposes listed below:
- To respond to your inquiry or provide a quote
- To deliver services you have engaged us for
- To send transactional emails (e.g., confirmation of your message)
- To improve our website, services, and user experience
- To detect and prevent spam, fraud, and abuse
- To comply with legal and regulatory obligations
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
06 Who We Share Data With
We share data only with trusted service providers (data processors) necessary to operate our website and business:
- Hostinger — web hosting provider
- Google reCAPTCHA — spam and abuse prevention
- Email service providers — to send and receive transactional emails
- Analytics providers (only with consent) — to understand site usage
- Law enforcement or regulators — when legally required
All processors are bound by contracts that require them to protect your data and use it only for the agreed purposes.
07 How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 24 months from the date of submission |
| Transactional emails | 24 months |
| Analytics data | 14 months (per provider's default retention) |
| Server access logs | 90 days |
| Invoices and tax records | Up to 8 years (as required by law) |
When the retention period ends, we delete or anonymize the data.
08 International Data Transfers
Smart RWD Web is based in India. When you interact with our website from the EU/UK, your data is transferred to and processed in India and potentially in other countries where our service providers operate.
For transfers of EU/UK personal data outside the European Economic Area, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Your explicit consent, where required
You may request a copy of the safeguards we use by contacting us at the address in Section 14.
09 Your Rights Under GDPR
If you are in the EU/EEA, the UK, or Switzerland, you have the following rights:
| Right | What It Means |
|---|---|
| Access | Request a copy of the personal data we hold about you. |
| Rectification | Ask us to correct inaccurate or incomplete data. |
| Erasure ("Right to be Forgotten") | Request deletion of your personal data where there is no legal reason for us to keep it. |
| Restriction | Ask us to pause processing while a dispute is resolved. |
| Portability | Receive your data in a structured, machine-readable format. |
| Object | Object to processing based on legitimate interest or direct marketing. |
| Withdraw Consent | Withdraw consent for cookie or marketing processing at any time. |
| Lodge a Complaint | File a complaint with your local data protection authority. |
How to Exercise Your Rights (Including Erasure)
1. Email info@smartrwdweb.com with the subject line "Data Rights Request".
2. Include your full name, the email you used on our site, and the specific right you wish to exercise.
3. We will verify your identity and respond within 30 days (extendable to 90 days for complex requests, with notice).
There is no charge for exercising your rights. We may ask for additional information to confirm your identity before processing the request.
10 Your Rights Under India's DPDP Act
If you are in India, you have rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), including:
- Right to access information about your personal data
- Right to correction and erasure
- Right to grievance redressal
- Right to nominate another person to exercise your rights
To exercise these rights, contact us using the details in Section 14.
11 Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS/TLS encryption for all traffic
- Secure password hashing for any stored credentials
- Regular software updates and security patches
- Access controls and least-privilege principles
- Spam and abuse prevention (Google reCAPTCHA v3)
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12 Children's Privacy
Our website and services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
13 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised.
Material changes will be notified via a prominent notice on our website and, where required, by email.
14 Contact & Data Protection Officer
For any questions about this Privacy Policy, or to exercise your data rights, please contact:
If you are in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority. A list of EU authorities is available at edpb.europa.eu.