Privacy notice
This explains what personal data Joltwise Digital Solutions collects, why, who else sees it, how long we keep it, and how to make us delete it. It is written to India's Digital Personal Data Protection Act 2023 and the Rules made under it in 2025, and, because we work with clients in the EU and UK, to the GDPR as well.
- Page
- Privacy notice
- Orbit
- 05 — ringed
- Written to
- DPDP Act 2023 + GDPR
- Cookies set
- None
- Data sold
- None
Who is responsible
Joltwise Digital Solutions, of Jalandhar, Punjab, India, decides why and how the data described here is processed. In DPDP language we are the Data Fiduciary; in GDPR language, the controller. You are the Data Principal or data subject.
We do not use cookies
This site sets no cookies at all. Not ours, not anyone else's. It stores nothing in your browser's local or session storage. There is no analytics, no advertising pixel, no tracking of any kind, and no profile of you is built or bought.
That is why you are not being asked to accept anything. A consent banner here would be managing choices that do not exist.
The fonts are served from our own server rather than a font CDN, so loading a page does not disclose your IP address to a third party in order to render text.
What we collect
If you send us the contact form
The form asks for:
- Your name and email address: required, because we cannot reply without them.
- Company, website and budget: optional. Leave them blank and the form still sends.
- Your message: whatever you choose to write. Please do not put anything sensitive in it; it travels by ordinary email.
If you use the questionnaire at /start
It asks up to three multiple-choice questions about the problem you are trying to solve, then:
- Your name and email address: required, for the same reason.
- Company and phone number: optional.
- Anything else you want to tell us: an optional free-text box. It becomes the only thing we have to go on if you answer “none of these fit”, which is the one case where we ask you to fill it in.
The three questions are multiple choice, so what reaches us is which option you picked, not anything you typed. We use the answers to work out what kind of work your problem points at before we reply, and for nothing else. The same spam check and the same rate limiting apply as to the contact form, and it arrives in the same inbox by the same route.
Automatically, when the form is submitted
- Your IP address, used to rate-limit submissions so the form cannot be used to send bulk mail. It is stored only as an irreversible SHA-256 hash, in a counter that expires one hour after your submission. If a submission is rejected (rate limit, spam check) the address is also written to the server's error log.
- A spam-check token from Cloudflare Turnstile, which confirms the form was filled by a person. Verifying it discloses your IP address and some technical signals about your browser to Cloudflare. Turnstile is used precisely because it sets no cookies and builds no profile.
Simply by visiting
Our host records standard web-server logs: IP address, time, page requested, browser string. Every web server does this; they exist to keep the site running and secure, and we do not analyse them to learn anything about you.
That is the complete list for both forms. We collect nothing else, and there is no account to create, no newsletter, and no purchase.
Why, and on what legal basis
| What | Why | Basis |
|---|---|---|
| Form contents | To read your enquiry and reply to it | Your consent, given by sending the form (DPDP s.6). Under the GDPR, also steps taken at your request before a contract — Art. 6(1)(b) |
| Questionnaire answers | To work out what kind of work your problem needs, before we reply | Your consent, given by sending the form (DPDP s.6). Under the GDPR, also steps taken at your request before a contract — Art. 6(1)(b) |
| IP address, spam token | To stop the form being abused to send spam | Necessary to provide the service you asked for. GDPR Art. 6(1)(f), our legitimate interest in a working contact form |
| Server logs | Keeping the site available and secure | GDPR Art. 6(1)(f), legitimate interest |
Who else sees it
Three companies, each doing one job for us and nothing else with it:
- IONOS (Germany) hosts the site and holds the server logs.
- Cloudflare (United States) runs the Turnstile spam check.
- Resend (United States) delivers the enquiry to our inbox and sends your confirmation.
We do not sell personal data, we do not share it for anyone else's marketing, and we do not use it to train machine-learning models.
Data leaving India and the EU
Because Cloudflare and Resend are in the United States, your message and IP address are processed there. The DPDP Act permits transfer to any country the Central Government has not restricted. For visitors in the EU or UK, those transfers rely on the European Commission's Standard Contractual Clauses, which both providers offer.
How long we keep it
- Rate-limiting counters: one hour, then they expire.
- Enquiry and questionnaire emails: 24 months from your last message to us, unless we are working together, in which case for as long as the work and our tax records require.
- Server logs: as long as our host retains them, on their ordinary schedule.
Ask us to delete your enquiry sooner and we will.
Your rights
Under the DPDP Act you may:
- ask what personal data of yours we hold and what we have done with it;
- have it corrected, completed, updated or erased;
- withdraw your consent at any time, as easily as you gave it;
- nominate someone to exercise these rights if you die or become incapacitated;
- raise a grievance with us and have it answered.
If the GDPR applies to you, you additionally have the right to restrict processing, to object to it, and to receive your data in a portable form.
Ask by emailing info@joltwisedigitalsolutions.com. We will not charge you and we will answer within 30 days. We may ask one question to confirm you are the person you say you are.
If we get it wrong
Tell us first, at info@joltwisedigitalsolutions.com, marked for the attention of our privacy contact. If we do not resolve it, you can complain to the Data Protection Board of India. If you are in the EU or UK, you may instead complain to your national supervisory authority.
If personal data is ever breached, we will tell the Board and everyone affected, without delay and in the form the Rules require.
Children
This is a business site and is not directed at children. We do not knowingly collect data from anyone under 18. If a child has sent us something through the form, tell us and we will delete it.
Security
The site is served over HTTPS only. The contact form is rate-limited, spam-checked, and validates everything it receives. Credentials for the mail service are held outside the public web root and are never in the site's source code. No system is perfect, and we do not claim otherwise.
Changes
If this notice changes we will update the date at the top. If a change materially affects what we do with data we already hold, we will tell the people affected rather than rely on you re-reading this page.