Privacy Policy

Last Updated: November 9, 2026

This policy explains what personal data TechFlecks collects when you use techflecks.com, why we collect it, who we share it with, and the rights you have. It is a standalone notice, separate from our Terms & Conditions. To change your cookie choices at any time, use .

1. Who We Are

TechFlecks ("we", "us", "our") is a sole proprietorship operated by Shani Sinojiya in India. We decide how and why your personal data is processed, so we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the GDPR and similar laws.

Grievance Officer / Data Protection Officer / Privacy Officer: Shani Sinojiya, privacy@techflecks.com.

2. Data We Collect

We collect only what we need. We do not collect sensitive data such as health, financial, biometric or government ID information.

DataWhen / howSource
Name, email address, service of interest, messageWhen you submit the contact formYou
IP address and browser user agentWhen you submit the contact form (spam and abuse prevention)Your device
Email addressWhen you subscribe to the newsletterYou
Pages viewed, clicks, scrolls, session recordings, device and browser type, approximate location, referring siteOnly if you allow Analytics cookies (Google Analytics, Microsoft Clarity)Your device
Advertising cookie IDs and ad interactionsOnly if you allow Advertising cookies (Google AdSense, blog pages)Your device
Referring website domain, added to the page address as campaign (UTM) parametersWhen you arrive from another website or one of our other domainsYour browser’s Referer header
Your cookie choices and when you made themWhen you use the cookie banner or Cookie SettingsYou
Server logs (IP address, URL, time, user agent)Automatically, for every request to our hosting providerYour device

If you apply for a job, you do so by email or through an external form linked on the job page. Any data you send is used only to assess your application.

3. How and Why We Use Data

PurposeDataLegal basis
Reply to your enquiry and send a confirmation emailContact form dataSteps you ask for before a contract; legitimate interest in answering enquiries; your consent (DPDP)
Prevent spam, bots and abuse of the contact form (Cloudflare Turnstile, rate limiting)IP address, email address, Turnstile tokenLegitimate interest in security; legitimate use (DPDP)
Send the newsletterEmail addressConsent
Understand how the site is used and improve itAnalytics dataConsent
Show ads on blog pagesAdvertising cookie dataConsent
Measure which websites send us visitorsReferring domain (UTM parameters)Legitimate interest; it is analysed only if you allow Analytics
Remember your cookie choicesConsent recordLegal obligation; strictly necessary
Operate, secure and troubleshoot the websiteServer logsLegitimate interest; strictly necessary

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

4. Cookies and Tracking

When you first visit, a banner asks for your choice. Only strictly necessary storage is used until you opt in, and "Reject" is as easy as "Accept". You can change your mind at any time in (also linked in the footer). We use Google Consent Mode v2, so Google tags run in a cookieless, denied state until you consent.

Global Privacy Control: if your browser sends a GPC signal, we automatically switch off Advertising and show "Opt-out signal honored" in Cookie Settings.

Name / providerCategoryPurposeDurationData sent to
techflecks_consent (cookie) and techflecks_consent_v2 (local storage)Strictly necessaryStores your cookie choices12 monthsStays in your browser
Cloudflare TurnstileStrictly necessary (contact page only)Tells humans from bots on the contact formSessionCloudflare, Inc. (USA)
Google Analytics 4 (_ga, _ga_*) via Google Tag ManagerAnalyticsVisitor statisticsUp to 13 monthsGoogle LLC (USA)
Microsoft Clarity (_clck, _clsk, CLID)AnalyticsHeatmaps and session replays (form inputs masked)Up to 13 monthsMicrosoft Corporation (USA)
Google AdSense (__gads, __gpi, IDE and similar)AdvertisingShows and measures ads on blog pagesUp to 13 monthsGoogle LLC (USA)

You can also block or delete cookies in your browser settings, although some parts of the site may then not work. Google explains how it uses data at policies.google.com/technologies/partner-sites.

5. Newsletter

  • What we collect: only your email address.
  • Why: to send the TechFlecks engineering newsletter, about once a month. We do not use it for anything else.
  • Legal basis: your consent, given when you subscribe.
  • Sharing: your email is shared only with the email delivery provider that sends the newsletter for us, under a contract that limits its use to that service. We never sell or rent the list.
  • Unsubscribe: use the link in any newsletter, or email privacy@techflecks.com. We stop sending straight away and delete your address within 30 days, unless we need to keep it on a suppression list so we do not email you again.

6. Who We Share Data With

We do not sell your personal data. We share it only with service providers (data processors) that act on our instructions:

ProviderServiceLocation
Vercel Inc.Website hosting, server logs, rate-limit store (Vercel KV / Redis)USA and global edge network
Resend (Plus Five Five, Inc.)Sending contact-form and newsletter emailsUSA
Cloudflare, Inc.Turnstile bot protectionUSA / global
Google LLCAnalytics, Tag Manager, AdSense (only with consent)USA
Microsoft CorporationClarity analytics (only with consent)USA
Sanity ASContent management for blog and careers pages (no visitor data)EU / USA

When you allow Advertising cookies, Google acts as an independent controller for its advertising purposes. We may also disclose data if the law requires it, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.

7. International Transfers

We are based in India, and our providers mainly process data in the United States and the European Union. Your data may therefore be processed outside your country. Where the law requires it, we rely on safeguards such as:

  • the EU Standard Contractual Clauses (with the UK Addendum and the Swiss amendments);
  • the EU-US, UK-US and Swiss-US Data Privacy Framework, where the provider is certified;
  • the ANPD standard clauses for Brazil.

Under India's DPDP Act, we do not transfer data to any country the Government of India has restricted.

8. How Long We Keep Data

DataRetention
Contact form enquiries and the related emailsUp to 24 months after our last communication, then deleted
Rate-limit records (IP address, email address)1 hour, then automatically deleted
Newsletter email addressUntil you unsubscribe (plus a minimal suppression record)
Analytics and advertising dataUp to 13 months
Cookie consent record12 months, then we ask again
Server logsPer the hosting provider’s standard log retention (typically days to weeks)

We delete or anonymise data once its purpose is served, unless the law requires us to keep it longer.

9. Security and Breaches

We use HTTPS everywhere, security headers, bot protection, rate limiting and access controls on our service accounts. No method of transmission or storage is completely secure, but we work to protect your data.

If a personal data breach occurs, we will notify the competent authorities as the law requires (for example, within 72 hours under the GDPR and the DPDP Rules). We will inform affected users without undue delay.

10. Your Rights

Depending on where you live, you have some or all of these rights:

  • Access: get a summary or copy of your data.
  • Correction: fix, complete or update your data.
  • Deletion: have your data erased.
  • Restriction and objection: limit or object to processing, including for direct marketing.
  • Portability: receive your data in a portable format.
  • Withdraw consent at any time, through , the unsubscribe link, or by email.
  • Opt out of sale, sharing and targeted advertising, including through Global Privacy Control.
  • Nominate someone to exercise your rights if you die or become incapacitated (India).
  • Non-discrimination: we will not treat you differently for using your rights.

How to make a request: email privacy@techflecks.com. We may ask you to confirm your request from the email address we hold, to verify that it is you. An authorised agent may act for you with your written permission. We reply within 30 days (45 days where US state law allows), and requests are free. If we refuse a request, we explain why and how to appeal.

11. Complaints

Please contact our Grievance Officer at privacy@techflecks.com first. We acknowledge complaints within 7 days and aim to resolve them within 30 days. You also have the right to complain to a data protection authority. For example:

  • the Data Protection Board of India;
  • your EU/EEA supervisory authority;
  • the UK Information Commissioner (please complain to us first);
  • the Swiss FDPIC;
  • the California Privacy Protection Agency;
  • the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec;
  • Brazil's ANPD;
  • the Office of the Australian Information Commissioner (OAIC);
  • Singapore's PDPC;
  • New Zealand's Privacy Commissioner;
  • South Africa's Information Regulator;
  • the Nigeria Data Protection Commission.

12. Region-Specific Information

The rest of this policy applies to everyone. This section adds the rights and disclosures required where you live. If a local law gives you more protection than this policy, that law applies.

India: Digital Personal Data Protection Act, 2023

TechFlecks is a Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

  • Consent: where we rely on consent (analytics, advertising, newsletter), it is free, specific, informed and given by a clear action. You can withdraw it as easily as you gave it, through or the unsubscribe link, or by emailing us. Withdrawal does not affect processing done before it.
  • Your rights: a summary of your personal data and of our processing; the identities of others we have shared it with; correction, completion, updating and erasure; grievance redressal; and the right to nominate another person to exercise your rights if you die or become incapacitated.
  • Grievance Officer: Shani Sinojiya, privacy@techflecks.com. We acknowledge grievances within 7 days and resolve them within 30 days.
  • Data Protection Board of India: if you are not satisfied with our response, you may complain to the Board after using our grievance process.
  • Language: on request, we will provide this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
  • Breaches: we will inform the Board and affected users of a personal data breach as required by the Rules.

European Economic Area, United Kingdom and Switzerland

These rules apply under the EU General Data Protection Regulation (GDPR), the UK GDPR with the Data Protection Act 2018 and the Data (Use and Access) Act 2025, and the Swiss Federal Act on Data Protection (nFADP).

  • Controller: TechFlecks (see "Who We Are"). We have not appointed an EU or UK representative under Article 27, because our processing is occasional and low risk. Contact us directly at privacy@techflecks.com.
  • Legal bases: listed for each purpose in the table in section 3.
  • Your rights: access, rectification, erasure, restriction, data portability and objection (including an absolute right to object to direct marketing). You can also withdraw consent at any time, and you have the right not to be subject to solely automated decisions. We make no such decisions.
  • Cookies: non-essential cookies are set only with your prior opt-in consent, and rejecting them is as easy as accepting them.
  • Complaints: please contact us first. UK residents: we acknowledge complaints within 30 days. You may also complain to your local supervisory authority, the UK Information Commissioner, or the Swiss Federal Data Protection and Information Commissioner (FDPIC).

United States: California and other state privacy laws

This section applies to residents of California (CCPA as amended by the CPRA). It also applies to residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, to the extent those laws apply to us.

Category (last 12 months)ExamplesSourceDisclosed toSold / shared
IdentifiersName, email, IP address, cookie IDsYou; your deviceHosting, email, security and analytics providersShared for ads only if you allow Advertising cookies
Internet or network activityPages viewed, referrer, interactionsYour deviceGoogle, Microsoft ClarityShared for ads only if you allow Advertising cookies
Approximate geolocationCountry or city derived from IPYour deviceGoogle, Microsoft ClarityNo sale
Commercial / professional informationService you are interested in, message contentYouEmail provider (Resend)No
  • We do not sell personal information for money. Letting Google AdSense set advertising cookies may count as "sharing" for cross-context behavioral advertising, or as "targeted advertising". This happens only if you turn on Advertising in , and you can switch it off at any time. That switch is our "Do Not Sell or Share My Personal Information" control.
  • Global Privacy Control: we treat a GPC signal from your browser as a valid opt-out of sale, sharing and targeted advertising. When we detect it, Cookie Settings shows "Opt-out signal honored".
  • Sensitive personal information: we do not collect it.
  • Your rights: to know or access, delete, correct and port your data; to opt out of sale, sharing, targeted advertising and profiling; and to be free from discrimination for using these rights.
  • How to make a request: email privacy@techflecks.com or use the contact form. We verify your request by matching the email address we hold. An authorized agent may act for you with your signed permission. We respond within 45 days.
  • Appeals: if we deny your request, reply to our decision to appeal. If the appeal is denied, you may contact your state Attorney General.

Canada, including Quebec

  • This section covers the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25. Our person in charge of the protection of personal information is Shani Sinojiya, privacy@techflecks.com.
  • Tracking and profiling technologies are off by default. They are turned on only if you choose to enable them.
  • You may access and correct your information, withdraw consent and, in Quebec, request data portability and de-indexing. You may complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.
  • Your information may be stored and processed outside Canada (see section 7).

Brazil (LGPD)

  • Data protection officer (Encarregado): Shani Sinojiya, privacy@techflecks.com.
  • Your rights: confirmation that we process your data; access; correction; anonymization, blocking or deletion; portability; information about who we share data with; withdrawal of consent; and review of automated decisions.
  • Transfers: international transfers follow LGPD Article 33 and the ANPD standard contractual clauses where required.
  • Complaints: you may complain to the ANPD.

Asia-Pacific

  • Australia (Privacy Act 1988, APPs): you may access and correct your information. Complaints go to us first, then to the Office of the Australian Information Commissioner (OAIC). We do not make automated decisions that significantly affect you. Your information may be disclosed to recipients in India, the United States and the EU.
  • New Zealand (Privacy Act 2020): you may access and correct your information and complain to the Privacy Commissioner. We do not collect personal information about you from third parties other than as described in section 2.
  • Singapore (PDPA): our Data Protection Officer is Shani Sinojiya, privacy@techflecks.com. You may access and correct your data and withdraw consent. Complaints may go to the PDPC.
  • Japan (APPI): the business operator is TechFlecks, represented by Shani Sinojiya (see "Who We Are"). The external services our pages send data to are listed in section 4. You may request disclosure, correction, suspension of use, deletion, or that we stop providing your data to third parties.
  • South Korea (PIPA): our Chief Privacy Officer is Shani Sinojiya, privacy@techflecks.com. The items we collect, purposes, retention periods, outsourced processors and overseas transfers are set out in sections 2 to 8. You can refuse cookies through or your browser.
  • China (PIPL): we do not target individuals in mainland China. If you use our site from there, you have the rights to know, decide, access, copy, correct, delete and port your data, and to have our processing rules explained to you.

Middle East and Africa

  • UAE (PDPL) and Saudi Arabia (PDPL): we process data on the bases described in section 3. You may access, correct, delete or restrict your data, withdraw consent, and object to processing. Saudi residents may complain to SDAIA.
  • South Africa (POPIA): our Information Officer is Shani Sinojiya, privacy@techflecks.com. We send newsletters only with your opt-in consent. You may complain to the Information Regulator.
  • Nigeria (NDPA 2023): you have rights of access, correction, deletion, restriction, portability and objection, and you may complain to the Nigeria Data Protection Commission.

13. Children

Our website and services are not directed at anyone under 18. We do not knowingly collect personal data from children, track them, or target advertising at them. If you believe a child has given us personal data, contact privacy@techflecks.com and we will delete it.

14. Changes to This Policy

We review this policy at least once every 12 months and update it when our practices or the law change. The "Last Updated" date at the top shows when it last changed. If we make material changes, we will show a notice on the site. Where the law requires it, we will ask for your consent again.

15. Contact Us

TechFlecks

Sole proprietorship operated by Shani Sinojiya, India

Grievance Officer / Data Protection Officer: Shani Sinojiya

Privacy requests: privacy@techflecks.com

General enquiries: hello@techflecks.com

Related

See also our Terms & Conditions.