Privacy Policy.

1. Who We Are

Clay Design and Technologies ("ClayDesign", "we", "our", "us") is a design studio registered in India, operating at Bengaluru, Karnataka. We provide web design, brand identity, UI/UX design, and SEO services to clients globally.

This Privacy Policy explains how we collect, use, and protect personal information when you visit claydesign.in, interact with us via email, phone, WhatsApp, or social media, or engage us for creative services.

The data controller for all personal data processed under this policy is Clay Design and Technologies. For any questions, contact us at privacy@claydesign.in.

2. Data We Collect

Information you provide directly

• Name, email address, phone number, and company name when you fill in our contact form or enquiry form
• Project briefs, files, brand assets, and other materials you share with us during an engagement
• Payment information (processed securely by our payment provider; we do not store card details)
• Communication records including emails, WhatsApp messages, and video call notes

Information collected automatically

• IP address, browser type and version, operating system, referring URLs
• Pages visited, time spent on page, clicks and scroll depth (via Google Analytics)
• Device type (desktop, mobile, tablet) and screen resolution

3. How We Use Your Data

We use personal data only for legitimate business purposes and never sell it to third parties. Specifically, we use it to:

• Respond to your enquiries and deliver the services you request
• Send project updates, invoices, and service-related communications
• Improve our website experience based on aggregate analytics data
• Send occasional newsletters or updates (only with your explicit consent — unsubscribe any time)
• Comply with legal, accounting, and regulatory obligations
• Protect against fraud and maintain security of our systems

Our legal basis under applicable data protection law includes: (a) contract performance when delivering services; (b) legitimate interest for analytics and security; and (c) consent for marketing communications.

4. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use the following categories:

Essential cookies

Required for the website to function correctly. These cannot be disabled. They include session state cookies and security tokens.

Analytics cookies

We use Google Analytics (GA4) to understand how visitors interact with our site. This data is anonymised and aggregated; it does not personally identify you. You can opt out via the Google Analytics Opt-Out Browser Add-on.

Preference cookies

These remember your settings, such as language preferences. They persist across sessions but hold no personally identifying information.

You can manage cookie preferences in your browser settings. Blocking analytics cookies will not affect the functionality of the site.

5. Third-Party Services

We work with a small number of trusted third-party providers who may process your data on our behalf:

• Google Analytics — website usage analytics (anonymised)
• Google Workspace — email and document storage
• Razorpay / Stripe — payment processing (we never see raw card data)
• Notion — project management (project briefs and notes)
• Loom — screen recording for client reviews

All third-party providers are bound by data processing agreements and comply with applicable data protection regulations. We do not allow any third party to use your personal data for their own marketing or commercial purposes.

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected:

• Client project files and communications: 5 years after project completion (for warranty and legal purposes)
• Invoices and financial records: 7 years (statutory requirement under Indian taxation law)
• Website enquiries that did not result in a project: 12 months
• Analytics data: 26 months (Google Analytics default)
• Marketing consent records: until consent is withdrawn

After these periods, data is securely deleted or anonymised. You may request earlier deletion at any time (see Your Rights below).

7. Your Rights

You have the following rights over your personal data:

• Access — request a copy of all personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no lawful basis for us to retain it
• Restriction — ask us to limit processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on your prior consent, at any time

To exercise any of these rights, email privacy@claydesign.in. We will respond within 30 days. We may need to verify your identity before processing the request.

8. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. These include:

• HTTPS encryption on all web pages and form submissions
• Access controls limiting who within our team can view client data
• Regular backups stored in encrypted cloud environments
• No storage of payment card data on our own servers

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you have concerns about a specific communication, please contact us directly.

9. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Contact & Changes

If you have any questions about this Privacy Policy or how we handle your data, please contact:

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will reflect any changes. For material changes, we will notify active clients by email.