Privacy
This site collects very little, holds none of it itself, and runs nothing that follows you. What it does collect, and what you can ask us to do about it, is below.
What this page covers
How personal data is handled on nextneta.online, including the enquiry form on the contact page.
It is not a contract for work. Anything the studio builds for you is agreed separately in writing, and that agreement governs the project rather than this page.
What we collect
Only what you give us, plus the ordinary request data any website receives.
- The enquiry form asks for your name and email address. Your organisation and phone number are optional. You also choose which requirement the enquiry is about and write the message yourself.
- If you email, call or message the Instagram account listed on this site, we hold whatever you send through those.
- Our host records ordinary server request data, including IP address and user agent, in order to serve and protect the site.
- The site runs no analytics, no advertising and no tracking scripts, and sets no cookies of its own.
Why we hold it
To read your enquiry, answer it, and have the conversation that follows from it. That is the whole purpose.
We do not add you to a mailing list, we do not profile you, we do not use your enquiry to train anything, and we do not sell, rent or trade it.
Where it actually goes
An enquiry is not stored on this site. It is composed into an email and delivered to our mailbox, which means these providers handle it on the way:
- Vercel — hosting and delivery of this site, and the server that runs the form.
- Resend — delivery of the enquiry email to our mailbox.
- Google — our mailbox is a Gmail account, so a delivered enquiry is stored there as an email at nextneta.bussiness@gmail.com.
What the site itself keeps
No database stands behind this site. Nothing you type into the form is written to disk.
The one thing the server holds is a short-lived count, in memory, of how many submissions have recently come from an IP address. It exists to blunt automated abuse, it is never written to disk, and it is lost whenever the server restarts. It is best-effort friction, not a security control, and this page does not pretend otherwise.
Processing outside India
The providers named above operate outside India as well as within it, so your enquiry may be processed outside India.
The DPDP Act's provisions on transfer outside India are one of the items in the review list at the end of this page. We are not going to assert a conclusion on it that has not been checked.
How long we keep it
An enquiry stays in our mailbox while we are in contact and for as long as we may need to refer back to it.
A fixed retention period has not been set. Setting one is on the review list below. In the meantime you can ask us to delete your enquiry at any time, and we will.
What you can ask us to do
Under the Digital Personal Data Protection Act 2023 you can:
- Ask what personal data of yours we hold and what we have done with it.
- Ask us to correct, complete or update anything inaccurate.
- Ask us to erase it, except where we are required to keep it.
- Nominate someone to exercise these rights on your behalf if you die or become unable to exercise them yourself.
- Raise a grievance with us, and escalate it to the Data Protection Board of India if we do not resolve it.
How to ask
Write to nextneta.bussiness@gmail.com. Say what you want and we will act on it.
The DPDP Act also requires a published grievance contact and a response window. Naming one is on the review list below; until it is named, the address above is the only channel and it is read by the two of us.
Security
The form is submitted over HTTPS and the enquiry is handed straight to the mail provider. The site keeps no copy.
We are not going to claim the arrangement cannot be compromised, because nobody can honestly claim that about any arrangement.
Children
The enquiry form is not meant for anyone under eighteen, and we do not knowingly collect a child's personal data. The DPDP Act places specific obligations on processing a child's data; if you believe we hold any, write to the address above and we will delete it.
Changes
This page will change, not least once the review below has happened. The version in force is whichever one is published here.
What this page has not settled.
This policy has not been reviewed by a lawyer. It describes what the site actually does today, which is a different thing from a compliant policy. These are the open items, published here rather than hidden:
The notice and consent wording required by sections 5 and 6 of the DPDP Act 2023, including whether the single consent checkbox on the enquiry form is correctly scoped to the stated purpose.
Whether NextNeta is a Data Fiduciary for these purposes and whether any Significant Data Fiduciary obligation applies.
A named grievance contact and a published response window, as section 13 requires.
A fixed retention period for enquiries, and the erasure duty that follows from it.
Processing outside India by the providers named above, against the restrictions in force at launch.
The processors' legal names and their data-processing terms, which this page deliberately does not guess at.
Whether this notice has to be made available in a language other than English.