Privacy Policy
Last Updated: November 9, 2026
This policy explains what personal data TechFlecks collects when you use techflecks.com, why we collect it, who we share it with, and the rights you have. It is a standalone notice, separate from our Terms & Conditions. To change your cookie choices at any time, use .
1. Who We Are
TechFlecks ("we", "us", "our") is a sole proprietorship operated by Shani Sinojiya in India. We decide how and why your personal data is processed, so we are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the GDPR and similar laws.
Grievance Officer / Data Protection Officer / Privacy Officer: Shani Sinojiya, privacy@techflecks.com.
2. Data We Collect
We collect only what we need. We do not collect sensitive data such as health, financial, biometric or government ID information.
| Data | When / how | Source |
|---|---|---|
| Name, email address, service of interest, message | When you submit the contact form | You |
| IP address and browser user agent | When you submit the contact form (spam and abuse prevention) | Your device |
| Email address | When you subscribe to the newsletter | You |
| Pages viewed, clicks, scrolls, session recordings, device and browser type, approximate location, referring site | Only if you allow Analytics cookies (Google Analytics, Microsoft Clarity) | Your device |
| Advertising cookie IDs and ad interactions | Only if you allow Advertising cookies (Google AdSense, blog pages) | Your device |
| Referring website domain, added to the page address as campaign (UTM) parameters | When you arrive from another website or one of our other domains | Your browser’s Referer header |
| Your cookie choices and when you made them | When you use the cookie banner or Cookie Settings | You |
| Server logs (IP address, URL, time, user agent) | Automatically, for every request to our hosting provider | Your device |
If you apply for a job, you do so by email or through an external form linked on the job page. Any data you send is used only to assess your application.
3. How and Why We Use Data
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your enquiry and send a confirmation email | Contact form data | Steps you ask for before a contract; legitimate interest in answering enquiries; your consent (DPDP) |
| Prevent spam, bots and abuse of the contact form (Cloudflare Turnstile, rate limiting) | IP address, email address, Turnstile token | Legitimate interest in security; legitimate use (DPDP) |
| Send the newsletter | Email address | Consent |
| Understand how the site is used and improve it | Analytics data | Consent |
| Show ads on blog pages | Advertising cookie data | Consent |
| Measure which websites send us visitors | Referring domain (UTM parameters) | Legitimate interest; it is analysed only if you allow Analytics |
| Remember your cookie choices | Consent record | Legal obligation; strictly necessary |
| Operate, secure and troubleshoot the website | Server logs | Legitimate interest; strictly necessary |
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.
7. International Transfers
We are based in India, and our providers mainly process data in the United States and the European Union. Your data may therefore be processed outside your country. Where the law requires it, we rely on safeguards such as:
- the EU Standard Contractual Clauses (with the UK Addendum and the Swiss amendments);
- the EU-US, UK-US and Swiss-US Data Privacy Framework, where the provider is certified;
- the ANPD standard clauses for Brazil.
Under India's DPDP Act, we do not transfer data to any country the Government of India has restricted.
8. How Long We Keep Data
| Data | Retention |
|---|---|
| Contact form enquiries and the related emails | Up to 24 months after our last communication, then deleted |
| Rate-limit records (IP address, email address) | 1 hour, then automatically deleted |
| Newsletter email address | Until you unsubscribe (plus a minimal suppression record) |
| Analytics and advertising data | Up to 13 months |
| Cookie consent record | 12 months, then we ask again |
| Server logs | Per the hosting provider’s standard log retention (typically days to weeks) |
We delete or anonymise data once its purpose is served, unless the law requires us to keep it longer.
9. Security and Breaches
We use HTTPS everywhere, security headers, bot protection, rate limiting and access controls on our service accounts. No method of transmission or storage is completely secure, but we work to protect your data.
If a personal data breach occurs, we will notify the competent authorities as the law requires (for example, within 72 hours under the GDPR and the DPDP Rules). We will inform affected users without undue delay.
10. Your Rights
Depending on where you live, you have some or all of these rights:
- Access: get a summary or copy of your data.
- Correction: fix, complete or update your data.
- Deletion: have your data erased.
- Restriction and objection: limit or object to processing, including for direct marketing.
- Portability: receive your data in a portable format.
- Withdraw consent at any time, through , the unsubscribe link, or by email.
- Opt out of sale, sharing and targeted advertising, including through Global Privacy Control.
- Nominate someone to exercise your rights if you die or become incapacitated (India).
- Non-discrimination: we will not treat you differently for using your rights.
How to make a request: email privacy@techflecks.com. We may ask you to confirm your request from the email address we hold, to verify that it is you. An authorised agent may act for you with your written permission. We reply within 30 days (45 days where US state law allows), and requests are free. If we refuse a request, we explain why and how to appeal.
11. Complaints
Please contact our Grievance Officer at privacy@techflecks.com first. We acknowledge complaints within 7 days and aim to resolve them within 30 days. You also have the right to complain to a data protection authority. For example:
- the Data Protection Board of India;
- your EU/EEA supervisory authority;
- the UK Information Commissioner (please complain to us first);
- the Swiss FDPIC;
- the California Privacy Protection Agency;
- the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec;
- Brazil's ANPD;
- the Office of the Australian Information Commissioner (OAIC);
- Singapore's PDPC;
- New Zealand's Privacy Commissioner;
- South Africa's Information Regulator;
- the Nigeria Data Protection Commission.
12. Region-Specific Information
The rest of this policy applies to everyone. This section adds the rights and disclosures required where you live. If a local law gives you more protection than this policy, that law applies.
India: Digital Personal Data Protection Act, 2023
TechFlecks is a Data Fiduciary under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
- Consent: where we rely on consent (analytics, advertising, newsletter), it is free, specific, informed and given by a clear action. You can withdraw it as easily as you gave it, through or the unsubscribe link, or by emailing us. Withdrawal does not affect processing done before it.
- Your rights: a summary of your personal data and of our processing; the identities of others we have shared it with; correction, completion, updating and erasure; grievance redressal; and the right to nominate another person to exercise your rights if you die or become incapacitated.
- Grievance Officer: Shani Sinojiya, privacy@techflecks.com. We acknowledge grievances within 7 days and resolve them within 30 days.
- Data Protection Board of India: if you are not satisfied with our response, you may complain to the Board after using our grievance process.
- Language: on request, we will provide this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
- Breaches: we will inform the Board and affected users of a personal data breach as required by the Rules.
European Economic Area, United Kingdom and Switzerland
These rules apply under the EU General Data Protection Regulation (GDPR), the UK GDPR with the Data Protection Act 2018 and the Data (Use and Access) Act 2025, and the Swiss Federal Act on Data Protection (nFADP).
- Controller: TechFlecks (see "Who We Are"). We have not appointed an EU or UK representative under Article 27, because our processing is occasional and low risk. Contact us directly at privacy@techflecks.com.
- Legal bases: listed for each purpose in the table in section 3.
- Your rights: access, rectification, erasure, restriction, data portability and objection (including an absolute right to object to direct marketing). You can also withdraw consent at any time, and you have the right not to be subject to solely automated decisions. We make no such decisions.
- Cookies: non-essential cookies are set only with your prior opt-in consent, and rejecting them is as easy as accepting them.
- Complaints: please contact us first. UK residents: we acknowledge complaints within 30 days. You may also complain to your local supervisory authority, the UK Information Commissioner, or the Swiss Federal Data Protection and Information Commissioner (FDPIC).
United States: California and other state privacy laws
This section applies to residents of California (CCPA as amended by the CPRA). It also applies to residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, to the extent those laws apply to us.
| Category (last 12 months) | Examples | Source | Disclosed to | Sold / shared |
|---|---|---|---|---|
| Identifiers | Name, email, IP address, cookie IDs | You; your device | Hosting, email, security and analytics providers | Shared for ads only if you allow Advertising cookies |
| Internet or network activity | Pages viewed, referrer, interactions | Your device | Google, Microsoft Clarity | Shared for ads only if you allow Advertising cookies |
| Approximate geolocation | Country or city derived from IP | Your device | Google, Microsoft Clarity | No sale |
| Commercial / professional information | Service you are interested in, message content | You | Email provider (Resend) | No |
- We do not sell personal information for money. Letting Google AdSense set advertising cookies may count as "sharing" for cross-context behavioral advertising, or as "targeted advertising". This happens only if you turn on Advertising in , and you can switch it off at any time. That switch is our "Do Not Sell or Share My Personal Information" control.
- Global Privacy Control: we treat a GPC signal from your browser as a valid opt-out of sale, sharing and targeted advertising. When we detect it, Cookie Settings shows "Opt-out signal honored".
- Sensitive personal information: we do not collect it.
- Your rights: to know or access, delete, correct and port your data; to opt out of sale, sharing, targeted advertising and profiling; and to be free from discrimination for using these rights.
- How to make a request: email privacy@techflecks.com or use the contact form. We verify your request by matching the email address we hold. An authorized agent may act for you with your signed permission. We respond within 45 days.
- Appeals: if we deny your request, reply to our decision to appeal. If the appeal is denied, you may contact your state Attorney General.
Canada, including Quebec
- This section covers the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25. Our person in charge of the protection of personal information is Shani Sinojiya, privacy@techflecks.com.
- Tracking and profiling technologies are off by default. They are turned on only if you choose to enable them.
- You may access and correct your information, withdraw consent and, in Quebec, request data portability and de-indexing. You may complain to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.
- Your information may be stored and processed outside Canada (see section 7).
Brazil (LGPD)
- Data protection officer (Encarregado): Shani Sinojiya, privacy@techflecks.com.
- Your rights: confirmation that we process your data; access; correction; anonymization, blocking or deletion; portability; information about who we share data with; withdrawal of consent; and review of automated decisions.
- Transfers: international transfers follow LGPD Article 33 and the ANPD standard contractual clauses where required.
- Complaints: you may complain to the ANPD.
Asia-Pacific
- Australia (Privacy Act 1988, APPs): you may access and correct your information. Complaints go to us first, then to the Office of the Australian Information Commissioner (OAIC). We do not make automated decisions that significantly affect you. Your information may be disclosed to recipients in India, the United States and the EU.
- New Zealand (Privacy Act 2020): you may access and correct your information and complain to the Privacy Commissioner. We do not collect personal information about you from third parties other than as described in section 2.
- Singapore (PDPA): our Data Protection Officer is Shani Sinojiya, privacy@techflecks.com. You may access and correct your data and withdraw consent. Complaints may go to the PDPC.
- Japan (APPI): the business operator is TechFlecks, represented by Shani Sinojiya (see "Who We Are"). The external services our pages send data to are listed in section 4. You may request disclosure, correction, suspension of use, deletion, or that we stop providing your data to third parties.
- South Korea (PIPA): our Chief Privacy Officer is Shani Sinojiya, privacy@techflecks.com. The items we collect, purposes, retention periods, outsourced processors and overseas transfers are set out in sections 2 to 8. You can refuse cookies through or your browser.
- China (PIPL): we do not target individuals in mainland China. If you use our site from there, you have the rights to know, decide, access, copy, correct, delete and port your data, and to have our processing rules explained to you.
Middle East and Africa
- UAE (PDPL) and Saudi Arabia (PDPL): we process data on the bases described in section 3. You may access, correct, delete or restrict your data, withdraw consent, and object to processing. Saudi residents may complain to SDAIA.
- South Africa (POPIA): our Information Officer is Shani Sinojiya, privacy@techflecks.com. We send newsletters only with your opt-in consent. You may complain to the Information Regulator.
- Nigeria (NDPA 2023): you have rights of access, correction, deletion, restriction, portability and objection, and you may complain to the Nigeria Data Protection Commission.
13. Children
Our website and services are not directed at anyone under 18. We do not knowingly collect personal data from children, track them, or target advertising at them. If you believe a child has given us personal data, contact privacy@techflecks.com and we will delete it.
14. Changes to This Policy
We review this policy at least once every 12 months and update it when our practices or the law change. The "Last Updated" date at the top shows when it last changed. If we make material changes, we will show a notice on the site. Where the law requires it, we will ask for your consent again.
15. Contact Us
TechFlecks
Sole proprietorship operated by Shani Sinojiya, India
Grievance Officer / Data Protection Officer: Shani Sinojiya
Privacy requests: privacy@techflecks.com
General enquiries: hello@techflecks.com
Related
See also our Terms & Conditions.