Privacy Policy

1. Information I Collect

1.1 Information You Provide

When you contact me or use my services, you may provide:

• Contact Information: Name, email address, phone number, company name
• Project Details: Business requirements, technical specifications, project scope
• Communication Records: Messages sent through contact forms, emails, or scheduling systems

1.2 Information Automatically Collected

When you visit my website, I may automatically collect:

• Technical Information: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on pages, referring URLs, click patterns
• Cookies: Small data files stored on your device (see Cookie Policy for details)

2. How I Use Your Information

I use your information for the following purposes:

• Service Delivery: To provide consulting services, respond to inquiries, and manage projects
• Communication: To send project updates, newsletters (if subscribed), and respond to your requests
• Website Improvement: To analyze usage patterns and improve website functionality
• Legal Compliance: To comply with applicable laws and regulations
• Marketing: To send relevant content about my services (only with your consent)

3. Legal Basis for Processing (GDPR)

If you are in the EU/EEA, I process your personal data based on:

• Consent: When you provide explicit consent (e.g., newsletter signup)
• Contract: When necessary to fulfill a service agreement
• Legitimate Interests: To improve services and communicate relevant information
• Legal Obligation: When required by law

4. How I Share Your Information

I do not sell your personal information. I may share your data with:

• Service Providers: Hosting (Netlify), email (Google Workspace), scheduling (Calendly), analytics (Google Analytics)
• Professional Advisors: Lawyers, accountants, or consultants when necessary
• Legal Requirements: When required by law or to protect legal rights

All third parties are contractually obligated to protect your data.

5. Data Security

I implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure (Netlify)
• Regular security updates and monitoring
• Access controls and password protection

However, no method of transmission over the Internet is 100% secure. I cannot guarantee absolute security.

6. Data Retention

I retain your personal information only as long as necessary:

• Project Data: Retained for the duration of the project and up to 7 years for legal/tax purposes
• Marketing Data: Until you unsubscribe or withdraw consent
• Analytics Data: Retained for 26 months (Google Analytics default)

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise your rights, contact me at: privacy@pavankakarrot.com

8. Cookies and Tracking

I use cookies and similar technologies for analytics and functionality. See my Cookie Policy for detailed information.

You can manage cookie preferences through your browser settings or the cookie banner on this website.

9. Third-Party Links

My website may contain links to third-party websites (LinkedIn, Medium, etc.). I am not responsible for their privacy practices. Please review their privacy policies.

10. Children's Privacy

My services are not directed to individuals under 18. I do not knowingly collect personal information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction. I ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (EU)
• Privacy Shield certification (where applicable)
• Adequate data protection agreements

12. Changes to This Policy

I may update this Privacy Policy periodically. The "Last Updated" date will reflect changes. Continued use of my website after updates constitutes acceptance.

13. Contact Information

For privacy-related questions or to exercise your rights, contact:

14. Supervisory Authority

If you are in the EU/EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.