Privacy Policy

This Privacy Policy explains how Nanda Das Simitha ("I", "me", "my") collects, uses and protects information you provide through this website. I am committed to handling your information lawfully, transparently and securely, in line with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. Who I am

I am Nanda Das Simitha, founder of Synex Digital Studio based in Manchester, United Kingdom. For any privacy enquiries, contact nandadsimitha@gmail.com.

2. Information I collect

• Enquiry data — name, email address, optional company, project budget and message you submit via the contact form.
• Technical data — IP address, browser type, device, referring URL and timestamps collected automatically by hosting infrastructure for security and reliability.
• Cookies & analytics — see the Cookie Policy.

3. How I use your information

• To respond to your enquiry and discuss a potential engagement.
• To maintain a record of communications and project leads.
• To improve the site's performance, security and content.
• To comply with legal obligations.

4. Lawful basis

I rely on your consent when you submit the contact form, and on my legitimate interests (running and securing this website) for technical logs. Where required, additional consent is requested for non-essential cookies.

5. Sharing

I do not sell your personal data. Information may be processed by carefully selected service providers acting as processors on my behalf (for example, hosting and database providers such as Supabase). All processors are bound by written agreements and appropriate safeguards.

6. International transfers

Where data is transferred outside the UK, I rely on adequacy decisions or Standard Contractual Clauses with additional safeguards as appropriate.

7. Retention

Enquiry data is retained for up to 24 months from the last interaction unless a longer period is needed for a live engagement or legal obligations.

8. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection and to withdraw consent. To exercise any right, email nandadsimitha@gmail.com. You may also complain to the UK Information Commissioner's Office (ICO).

9. Security

I apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and row-level security on stored records.

10. Changes

I may update this policy from time to time. The "Last updated" date at the top reflects the latest revision.