Privacy Policy
1. Who we are
EknaviQ ("we", "us", "our") is a data solutions company providing consulting, engineering and managed services. We operate as a fully remote business and can be reached at:
- General and business enquiries: contact@eknaviq.com
- Recruitment and careers: hr@eknaviq.com
- Telephone: +91 83740 42158
For the purposes of applicable data protection law, EknaviQ is the data controller for information submitted through this website.
2. What we collect
We collect only information you choose to give us. Specifically:
| Data | Where from | Required? |
|---|---|---|
| Full name | Contact form | Yes |
| Email address | Contact form | Yes |
| Phone number | Contact form | No |
| Company name | Contact form | No |
| Enquiry type and area of interest | Contact form | Yes |
| Your message | Contact form | Yes |
| CV or professional details | Only if you email them to us | No |
What we do not collect
- We do not use advertising or cross-site tracking cookies.
- We do not build behavioural profiles or run automated decision-making. We measure aggregate website traffic (see section 6), but we cannot link it to you as an individual or recognise you across visits.
- We do not collect special category data, and ask that you do not send it.
- We do not ask for payment card details through this website.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Replying to your enquiry and discussing possible work | Legitimate interests, and steps prior to entering a contract |
| Assessing a job or contractor application | Legitimate interests, and steps prior to entering a contract |
| Keeping records of business correspondence | Legitimate interests, and legal obligation where applicable |
| Protecting the website from abuse and attack | Legitimate interests |
We do not send marketing email unless you have separately and explicitly asked us to. Replying to your own enquiry is not marketing.
4. Who else processes your data
We keep our supply chain deliberately small. We use the following processors, each of which handles data on our instructions:
| Provider | Role | What it sees |
|---|---|---|
| Zoho Corporation | Business email hosting | Email content and correspondence |
| Web3Forms | Contact form delivery | Form fields, in transit to our inbox |
| Cloudflare, Inc. | DNS, hosting, security and DDoS protection | Technical connection data such as IP address |
| Snowflake Inc. | Data warehouse where we store and analyse enquiry records | The details you submit in the enquiry form |
We do not sell, rent or trade your personal data to anyone. We may disclose information where we are legally required to do so.
How we store enquiries
When you submit the enquiry form, the details are delivered to our inbox and a copy is recorded in our own Snowflake data warehouse. We do this so we can answer basic questions about our business — how many enquiries we receive, and which services people ask about — without reading through an inbox.
Two things are worth stating plainly. First, we never record your IP address in the warehouse. It is replaced with a salted one-way hash before storage, which lets us detect abuse without identifying you. Second, access is restricted by role: staff analysing enquiry volumes see your email domain only, with the local part, your phone number and the body of your message masked. Only an administrator responding to your enquiry can see the full detail.
International transfers
Because we and our providers operate globally, your data may be processed outside your country of residence. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
5. Server logs and security data
Our hosting and security provider automatically records technical information such as IP address, browser type, requested page and timestamp. This is used only to keep the site available and to detect abuse. It is retained for a short period by that provider and is not used to identify or profile you.
6. Cookies and website analytics
This website sets no cookies. There is no advertising pixel and no cross-site tracker. That is why you see no cookie consent banner — there is nothing to consent to.
We do measure our own website traffic, and we want to be precise about how, because “no cookies” is often used to imply “no measurement”. We record page views in our own Snowflake warehouse. For each view we store the page visited, the referring site, any campaign tag in the link you followed, your country, your device category, roughly how long the page was open and how far you scrolled.
To group the pages of a single visit together we generate a random session identifier and keep it in sessionStorage. This is not a cookie: your browser discards it the moment you close the tab, it is never sent to any other website, and it contains nothing about you. We accept the trade-off that comes with this — we genuinely cannot tell whether you have visited before.
We never store your IP address. It is converted at the network edge into a one-way hash using a salt that changes every day, so the same visitor produces a different value tomorrow. This lets us count visits and spot abuse while making it impossible for us to follow an individual over time.
We also keep technical request logs — the page requested, the response code, timing, and whether the request came from a bot — so we can find broken links and detect attacks. These contain the same hashed identifier and no name, email or IP address.
If you set “Do Not Track” in your browser, we record nothing at all. We honour it, and no measurement is required for the site to work for you.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become active discussions | Up to 24 months, then deleted |
| Website traffic and page-view records | Up to 14 months, then deleted |
| Technical request logs | Up to 90 days, then deleted |
| Client and project correspondence | Duration of the relationship, plus up to 7 years where required for legal, tax or accounting purposes |
| Unsuccessful job or contractor applications | Up to 12 months, unless you ask us to keep you on file |
| Technical server logs | Short-term, as set by our hosting provider |
8. How we protect it
- The entire website is served over HTTPS with HSTS enforced.
- A strict Content-Security-Policy is applied to mitigate script injection.
- Email accounts are protected with multi-factor authentication.
- Domain records are protected with DNSSEC and registrar transfer lock.
- Access to enquiry data is limited to the people who need it to reply to you.
No system is perfectly secure. If you believe you have found a security issue, please contact us — see security.txt.
9. Your rights
Depending on where you live, you may have the right to:
- Ask what personal data we hold about you and receive a copy
- Have inaccurate data corrected
- Have your data deleted
- Object to or restrict our processing
- Receive your data in a portable format
- Withdraw consent, where we relied on consent
- Complain to your local data protection authority
To exercise any of these, email contact@eknaviq.com. We will respond within 30 days. We will not charge you or treat you differently for asking.
10. Children
This website and our services are intended for business use by adults. We do not knowingly collect data from anyone under 18. If you believe a child has submitted information, contact us and we will delete it.
11. Changes to this policy
If we change how we handle personal data, we will update this page and revise the "last updated" date above. Material changes affecting people who have already contacted us will be communicated by email where practical.
12. Contact
Questions, requests or complaints about privacy:
contact@eknaviq.com
+91 83740 42158