This Privacy Policy describes how [LEGAL ENTITY NAME] (trading as Kyosys, “we”, “us”, or “our”), located at [REGISTERED ADDRESS], India, collects and handles your personal data when you visit this website or contact us about our services.

We collect only what we need to run our agency and talk to you. That includes:

• Contact & quote forms: your name, email address, phone number, company name (optional), and the message or project details you share with us.
• Admin session: when our team signs in to the website's admin area, we store an essential session cookie so they stay signed in.
• Cookie consent choice: whether you accepted or declined our cookie banner, stored in your own browser so we don't ask again.
• Technical data: basic information your browser shares automatically (such as page views, device type, and browser), which our hosting provider logs for security and reliability.

We do not collect sensitive personal data, and we set no tracking or advertising cookies. Ever. See our Cookie Policy for details.

In line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), we process your data only on lawful grounds — primarily your free, informed consent and our legitimate need to respond to you:

• To reply to your enquiries and prepare project quotes.
• To manage the client relationship if you hire us (contracts, invoices, delivery).
• To keep the site secure, reliable, and working (hosting logs, admin sessions).

Our contact and quote forms include a consent checkbox. Ticking it is your consent; you can withdraw that consent at any time by writing to us (see “Your rights” below), and we'll stop processing your data accordingly.

We do not sell your data. We share it only with the processors we need to run the website and our agency, each bound by their own privacy commitments:

• Vercel — website hosting and delivery.
• Neon (PostgreSQL) — the database where form submissions are stored.
• Resend — email delivery for enquiry notifications.

We will also share data if the law requires it (for example, a court order) or to protect our legal rights.

• Enquiry & quote data: kept for up to 24 months from your last contact, so we can follow up and refer back to earlier conversations.
• Client project data: kept for 7 years after a project ends, for tax and legal record-keeping.
• Admin session cookies: expire when the browser session ends or after 30 days, whichever comes first.

After these periods, we delete the data or anonymise it so it can no longer identify you.

Under the DPDP Act, you have the right to access the personal data we hold about you, ask for corrections, request deletion (erasure), withdraw your consent, and nominate someone to act on your behalf in case of your death or incapacity. You can also complain to the Data Protection Board of India if you feel we haven't handled your request fairly.

To exercise any of these rights, email our grievance contact at [GRIEVANCE EMAIL]. We aim to respond within 30 days.

If you have a question or complaint about how we handle your data, contact our Grievance Officer:

• Email: [GRIEVANCE EMAIL]
• Phone: [GRIEVANCE PHONE]
• Address: [REGISTERED ADDRESS]

We take every grievance seriously and will acknowledge yours within 7 days.

This website and our services are meant for adults. We do not knowingly collect data from children under 18. If you believe a child has shared data with us, contact us and we will delete it promptly.

We use reasonable safeguards — encrypted connections (HTTPS), access-controlled databases, and limited team access — to protect your data. Some of our processors (for example, hosting and email infrastructure) may store or process data outside India; we choose providers with strong security practices.

We may update this policy as our practices or the law change. The “Last updated” date at the top always shows the current version, and significant changes will be noted here. Continued use of the site after changes means you accept the updated policy.