Privacy policy

The data controller for this website is Gaarnika Solutions (Marthala Pragna, sole proprietor), contactable at hello@gaarnika.com.

If you are in the European Economic Area or the United Kingdom and you are not satisfied with how a request has been handled, you may complain to your national supervisory authority. In the UK that is the Information Commissioner's Office.

An EU and a UK representative under Article 27 have not yet been appointed. See the note at the end of this policy.

Contact form

Your name, email address, company name if you give one, the enquiry type you select, and the message you write.

IP address

Recorded briefly in memory to rate-limit the contact form. It is not written to a database, not linked to your submission, and is discarded when the rate-limit window expires.

Analytics

Aggregate page views and performance measurements via Vercel Analytics and Vercel Speed Insights. Both are cookieless and neither identifies you or follows you to other websites.

Theme preference

If you switch between light and dark, that choice is stored in your browser's local storage. It never leaves your device and is never sent to us.

This site sets no cookies, runs no advertising or marketing trackers, and does not build profiles of visitors.

Answering your enquiry

To reply and, if it goes further, to take steps at your request before entering a contract. Legal basis: performance of a contract or steps prior to it, and our legitimate interest in responding to business enquiries.

Preventing abuse

To stop automated submissions flooding the form. Legal basis: our legitimate interest in keeping the service available and our inbox usable.

Understanding usage

To see which pages are read and whether the site is fast. Legal basis: our legitimate interest in measuring an audience without identifying individuals, using data that is aggregate and cookieless.

Remembering your theme

Stored because you asked for it by clicking the toggle, and only on your own device.

Enquiries that do not proceed

24 months, then deleted

Enquiries that become engagements

Retained for the engagement, then as long as tax and contractual records require

Rate-limiting IP records

Minutes to hours. In memory only, never persisted

Analytics

Aggregate only, per the retention of the analytics provider

We keep the number of third parties deliberately small. Each is a processor acting on our instructions, not a party free to use your data for its own purposes.

Vercel

Hosting, content delivery, and the cookieless analytics described above. United States, with a global edge network.

Resend

Delivers the contact form message to our inbox. United States.

Email provider

Stores the resulting message. TO CONFIRM: provider once the studio email is set up

Your data is never sold, never rented, and never shared for anyone else's marketing.

The studio operates from India. Our processors are in the United States. If you are in the EEA or the UK, this means your data is handled outside your jurisdiction.

India is not the subject of a European Commission adequacy decision. Where a restricted transfer occurs, it must rest on an appropriate safeguard such as Standard Contractual Clauses, and we rely on the terms our processors offer for that purpose.

TO CONFIRM: whether signed Data Processing Agreements are in place with Vercel and Resend, and which transfer mechanism each relies on.

Depending on where you live, you have some or all of the following rights. We apply them to everyone rather than checking your location first, because the administrative saving from doing otherwise is not worth the discourtesy.

• Ask what we hold about you, and receive a copy
• Have inaccurate information corrected
• Have your data deleted
• Object to processing based on legitimate interests, including this site's analytics
• Ask us to restrict processing while a dispute is resolved
• Receive your data in a portable format
• Withdraw consent where consent was the basis, without affecting what happened before
• Not be subject to a decision made solely by automated means. We make none

Exercise any of these by emailing hello@gaarnika.com. We do not charge, and we do not require an account. We aim to respond within 30 days.

If you are unhappy with how your data has been handled, tell us first at hello@gaarnika.com with 'Data complaint' in the subject line.

We will acknowledge your complaint within 30 days, tell you who is looking at it, and set out what we intend to do. If you remain dissatisfied you can escalate to your data protection authority, and doing so does not require our agreement or prevent you from seeking a remedy in court.

This procedure exists because the UK Data (Use and Access) Act 2025 requires controllers to operate one, and it is good practice everywhere else.

EEA and UK

We process personal data of people in the EEA and the UK in connection with offering services to them, so the GDPR and UK GDPR apply to us despite our being established outside both.

Quebec

Quebec's Law 25 applies based on where you are, not where we are. This site uses no tracking technology requiring opt-in consent, and we do not profile visitors or make automated decisions about them.

Rest of Canada

PIPEDA principles are applied to the handling described here, including accountability, limiting collection, and access on request.

United States

We fall below the applicability thresholds of the comprehensive state privacy statutes, which generally begin at 25 million dollars of revenue or 100,000 consumers. We honour the access and deletion rights above regardless.

India

The studio is subject to the Digital Personal Data Protection Act 2023 and the Rules notified in November 2025, whose obligations are being phased in. Requests under that Act go to the same address.

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us information, email us and we will delete it.

This policy was last updated on 1 September 2026. If it changes materially we will update the date here, and we will not apply a materially different use to data already collected without a fresh basis for doing so.