Privacy policy

This website collects almost nothing. It sets no cookies, runs no analytics, and loads no third-party scripts. The only personal information we receive is what you choose to type into the contact form.

We do not sell personal data, and we do not share it with advertisers. Ever.

iSquare Labs operates this website and is the data fiduciary (under India's Digital Personal Data Protection Act, 2023) and data controller (under the UK and EU GDPR) for the information described here.

You can reach us about anything in this policy at info@isquarelabs.com.

Information you give us. When you submit the contact form we receive the fields you complete: your name, work email address, company name, the practice you are interested in, an indicative budget range, and the message you write. Nothing in that form is mandatory beyond your name, email address and message.

Information collected automatically. Our web server keeps standard request logs for security and diagnostics. These contain your IP address, the time of the request, the page requested, the HTTP status returned, and your browser's user-agent string.

We do not use cookies, local storage, session storage, fingerprinting, analytics, advertising pixels or session-recording tools on this website. See the Cookie policy for detail.

• To answer your enquiry and, if it goes further, to scope and price the work. Legal basis: taking steps at your request prior to entering a contract, and our legitimate interest in responding to business enquiries.
• To keep the site available and secure — detecting abuse, diagnosing faults, and investigating incidents. Legal basis: our legitimate interest in operating a secure service.
• To comply with legal obligations where they apply to us.

We do not use your information for automated decision-making or profiling, and we do not send marketing email to people who have only made an enquiry.

• Contact enquiries: 24 months from your last contact with us, then deleted. If the enquiry becomes an engagement, the relevant records are retained under that contract instead.
• Server logs: 30 days, then overwritten.

You can ask us to delete your enquiry sooner. We will do so unless we are required to keep it.

We use a small number of service providers who process data on our instructions and are not permitted to use it for their own purposes:

• Amazon Web Services — hosting and infrastructure. The server for this website is in the Asia Pacific (Seoul) region.
• Web3Forms — delivers contact form submissions to our inbox as email, and keeps a copy in their dashboard for 30 days. Your browser sends the submission to them directly when you press Send; they receive nothing about visitors who never use the form, and they set nothing in your browser.
• Our email provider, for receiving and replying to enquiries.

We may disclose information where the law requires it, or to establish or defend legal claims. We do not sell, rent or trade personal data.

This website and its logs are hosted in the Asia Pacific (Seoul) region. If you contact us from the EEA or the UK, your information is transferred outside that region. Where such a transfer requires a safeguard, we rely on the appropriate mechanism with the provider concerned, including Standard Contractual Clauses.

If you are in India, the DPDP Act 2023 gives you the right to access a summary of your personal data and our processing of it, to correct or complete inaccurate data, to have data erased, to nominate another person to exercise your rights, and to a grievance-redressal process.

If you are in the EEA or the UK, the GDPR gives you the rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing carried out on the basis of legitimate interests.

To exercise any of these, email info@isquarelabs.com. We will respond within 30 days. There is no charge, and you do not need to use a particular form of words.

If you are not satisfied with our response, you may complain to the Data Protection Board of India, or — in the EEA or UK — to your local supervisory authority. We would rather you came to us first so we can put it right.

The site is served only over HTTPS with a valid certificate, and HTTP requests are redirected to it. We apply the usual transport-security and content-type headers, keep the underlying platform patched, and restrict administrative access to the server.

No system is perfectly secure. If you believe you have found a vulnerability in this website, please email info@isquarelabs.com and give us a reasonable opportunity to fix it before disclosing it publicly. We will not pursue anyone who reports in good faith.

This is a business website and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us information, contact us and we will delete it.

If we change how we handle personal data — for example by introducing analytics — we will update this page and change the date at the top before the change takes effect.

For any question, request or complaint about privacy, including matters our Grievance Officer handles under the DPDP Act, write to info@isquarelabs.com with "Privacy" in the subject line.