Privacy Policy

Extradigitz Infomedia Solutions ("we", "us" or "our") operates this website. We are a digital marketing agency based at House Number 443, First Floor, Sector-20, Kaithal - Dhand Rd, HUDA, Haryana 136027.

You can reach us at solutions@extradigitz.com or on +91 74197 71523.

This site is a static website. There are no accounts, no logins, no payments and no newsletter.

(a) Information you send us

If you use the enquiry form on our contact page we receive whatever you choose to type into it:

• your name;
• your business or brand name (optional);
• your email address;
• your phone number (optional);
• your message;
• the fact that you ticked the consent box, together with the date and time you ticked it.

The form is delivered straight to our business email inbox, and this website saves no copy of your enquiry in any database. The email then sits in that inbox, where our email provider holds it like any other email we receive, under the same security and retention rules as the rest of our mail. The form also contains a hidden field that only automated spam robots fill in; if it is completed we discard the submission without reading or storing it.

(b) Information collected automatically

Like any website, our web server records your IP address in its ordinary access logs when it serves you a page. This is standard server logging done by our hosting provider and is used to run the site and investigate abuse.

The enquiry form additionally places a keyed cryptographic hash (HMAC-SHA-256) of your IP address in a temporary file on the server, purely so we can limit that one form to 5 submissions per 10 minutes. The hash cannot be turned back into an IP address without a separate secret key. An entry is dropped once it is more than 10 minutes old, and that clearing happens the next time the form is used, so an entry can outlive the 10 minutes if nobody submits the form again. We never write your actual IP address into that file.

(c) Analytics, only if you accept

If — and only if — you accept analytics cookies, we load Google Analytics to see which pages are useful. It records the pages you visit, the pages you arrive from and general device and browser information. It also records a small number of specific interactions: when you click a phone or WhatsApp link, which free calculator tool you use, and when you successfully send an enquiry.

We do not run Google advertising or remarketing features. The advertising storage signals in Google's consent framework stay switched off for everyone, permanently, whether you accept or reject.

If you reject or never answer, Google Analytics is not loaded at all, no analytics cookie is set, and no event is recorded.

If you later change your mind and press Reject, we switch analytics off again and delete the _ga and _ga_<container-id> cookies straight away.

Two other things are worth knowing. Our fonts are self-hosted, so loading this page never contacts Google Fonts. And the Google Map on the contact page does not load at all until you press "Load map" — if you would rather not, you can use the "Open in Google Maps" link instead, or do neither.

We only rely on two bases.

• Your consent — for the enquiry form, and for Google Analytics. Without the consent tick we discard the enquiry; without the analytics choice we do not load Google Analytics at all.
• Our legitimate interests — keeping the site running and secure. That covers the web server's access logs, the hashed rate-limiting value described in section 2, and the spam and abuse protections on the form (we check that the request came from this site, that the hidden field was left empty, that a real person took a few seconds to fill the form in, and that no more than 5 submissions arrive from the same place in 10 minutes).

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects for you.

• Google — receives your visit data if you accept analytics cookies, and receives a request from your browser if you press "Load map" on the contact page. Google's own handling of that data is covered by Google's Privacy Policy.
• Our hosting and email provider (Hostinger) — hosts this website and carries the enquiry emails to our inbox, so it necessarily handles the technical data needed to do both.
• WhatsApp (Meta) — only if you choose to press one of our WhatsApp buttons or links, which opens WhatsApp with a pre-written message. Nothing is sent until you do that.
• Other social platforms — only if you choose to follow or contact us on them. Each of those platforms then handles your data under its own policy, not ours.

We do not sell, rent or trade your personal information. We do not share it with advertisers.

We are based in India, but some of the providers above process data on servers outside India. In particular, Google may process analytics data and map-embed data outside India. Our website and the enquiry emails you send us are stored on Hostinger servers located in India. Where information is transferred abroad, it is transferred to providers who are bound to protect it under their own published policies and applicable law.

• Rate-limiting hash — an entry is dropped once it is more than 10 minutes old. Clearing happens the next time the form is used, so an entry can sit on the server longer than 10 minutes if nobody uses the form again.
• Your consent choice — stays in your own browser until you change it or clear your browser storage.
• Analytics cookies — up to 2 years, unless you reject, in which case we delete them immediately.
• Enquiry emails — kept in our business email inbox for 12 months from the date of your enquiry. After that 12 months we delete the email. You can ask us to delete an enquiry sooner at any time using the details in section 8.

If you are in India

Under the Digital Personal Data Protection Act, 2023 you have the right to ask us for access to your personal data, to have inaccurate data corrected, to have your data erased, to withdraw consent at any time, and to raise a grievance with us and have it resolved.

If you are in the EU or the UK

Under the GDPR and the UK GDPR you have the right to ask for access to your personal data, rectification, erasure, restriction of processing, to object to processing, to portability of your data, to withdraw consent at any time, and to complain to your local supervisory authority.

To exercise any of these rights, email solutions@extradigitz.com with the subject "Privacy request". We will need to verify it is really you, and we will respond within the time the applicable law requires.

To change your analytics choice, press Cookie settings at the bottom of any page. That reopens the choice so you can accept or reject, and if you reject we delete the analytics cookies immediately.

This site is a business website. It is not directed at children under 18, we do not knowingly collect information from them, and we do not knowingly collect information from anyone under 18 through the enquiry form. If you believe a child has sent us information, email us and we will delete it.

The site is served over HTTPS and sends a Strict-Transport-Security header valid for one year, so browsers refuse to connect to it over an unencrypted connection after the first secure visit. We also send X-Content-Type-Options, X-Frame-Options, a Content-Security-Policy restricting framing, a strict Referrer-Policy, and a Permissions-Policy that disables the camera, microphone, geolocation and payment APIs.

The enquiry form has a number of anti-spam and anti-abuse measures:

• requests are accepted only from this website's own domain;
• a hidden field that traps automated submissions;
• a minimum time check, so a form completed instantly is rejected as automated;
• a hashed per-IP rate limit of 5 submissions per 10 minutes, kept in a temporary file on the server, with entries cleared on the next use of the form;
• size limits and per-field character limits on everything submitted;
• control characters are stripped from every field, and the message is emailed as plain text with a validated Reply-To address, so submitted text cannot be used to inject additional email headers;
• the server never reports internal errors to the browser.

No system is perfect. If you think something has gone wrong, email us straight away and we will investigate and delete what should not have been kept.

We may update this policy from time to time, for example when we change what the site does or what we collect. The date at the top of this page always shows when it was last changed. If the change affects how we use information you have already given us, we will ask you again before relying on the new version.

If you are unhappy with how we have handled your information, or you want to raise a formal grievance under the Digital Personal Data Protection Act, 2023, contact us at solutions@extradigitz.com with the subject "Grievance". Grievance Officer: Shivam Gupta, Extradigitz Infomedia Solutions, email solutions@extradigitz.com. We will acknowledge your grievance and work to resolve it.