1. Who we are
This website, lakelinedata.com, is operated by Lakeline Data Private Limited (CIN U62011TS2026PTC224778), a private limited company incorporated under the Companies Act, 2013, with its registered office at 5-497, Near Hitec City, Izzathnagar, Khanamet, Kondapur, Serilingampally, K.V. Rangareddy, Hyderabad – 500084, Telangana, India ("Lakeline Data", "we", "us"). For the personal data described in this policy we are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (the "DPDP Act").
Questions about this policy or your data: [email protected]. General enquiries: [email protected].
2. What this policy covers
This policy covers personal data collected through this website: when you browse it, contact us through it, or email us at an address published on it. It does not cover data we process for clients under a signed engagement. That data is governed by the contract with the client, and for it we usually act on the client's instructions.
3. Personal data we collect
Data you give us:
- Contact form: your name, email address, company (optional), the service you are interested in, and your message.
- Emails you send us: your email address, name, and whatever you choose to include.
Data collected automatically:
- Technical data needed to deliver and protect the site: IP address, browser and device type, the page requested, referring page, and date and time. Our hosting and network providers process this for every visit.
- Only if you consent to analytics: pages viewed, clicks on key buttons (for example “Talk to us”), approximate country (derived by Vercel and Cloudflare from your IP address), device, browser and operating system, and a random identifier that recognises repeat visits. Mixpanel is configured so that it does not store your IP address.
- Only if you consent to performance measurement: page-load timings (Core Web Vitals) with the page, device type and approximate country.
We do not ask for, and do not want, sensitive personal data such as financial, health, biometric or government identity information. Please do not include it in a message.
Our admin area is used only by our own staff. Signing in to it uses Google, which shares the staff member's name and email address with us.
4. Why we use it
| Purpose | Data | Legal basis (DPDP Act) |
|---|---|---|
| Replying to your enquiry and any follow-up conversation | Contact form and email data | Data you provide voluntarily for that purpose (section 7(a)), and your consent |
| Delivering the site, preventing abuse, and keeping it secure | Technical data | Processing needed to give you the page you request (section 7(a)); keeping logs where the law requires it |
| Understanding which pages are useful and improving the site | Analytics data | Your consent, which you can withdraw at any time (section 6) |
| Finding and fixing slow pages | Performance data | Your consent, which you can withdraw at any time (section 6) |
| Meeting legal obligations and responding to lawful requests | Any of the above, as required | A duty under law, or an order of a court or the government (sections 7(d) and 7(e)) |
We do not sell personal data, use it for advertising, or build profiles to make automated decisions about you.
5. Cookies and similar technologies
We use a small amount of browser storage that the site needs to work. Analytics and performance tools load only after you agree to them in the cookie banner, and you can change your choice at any time from “Cookie settings” in the footer. Details of every item are in our Cookie Policy.
6. Who processes data for us
We use the service providers below. Each acts on our instructions as a Data Processor and processes data only to provide its service to us.
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Vercel Inc. | Website hosting; Web Analytics and Speed Insights (with consent) | Technical data; analytics and performance data | United States, with a global edge network |
| Cloudflare, Inc. | DNS, content delivery, security filtering, email routing and delivery, media storage; Web Analytics (with consent) | Technical data; contact form submissions in transit; analytics data | Global network, headquartered in the United States |
| Mixpanel, Inc. | Product analytics (with consent) | Analytics data and a random visitor identifier | United States |
| Resend (Plus Five Five, Inc.) | Back-up email delivery for contact form messages, used only if the primary route fails | Contact form submissions | United States |
| Google LLC | Sign-in for our own staff on the admin area | Staff name and email address | United States |
| GitHub, Inc. | Storage and version history of website content edited by our staff | Staff names and email addresses in the edit history; no visitor data | United States |
| Upstash, Inc. | Fast storage of published website content | Website content only; no visitor data | Region chosen by us |
We may also disclose personal data where the law requires it, for example to a court, regulator or law-enforcement agency acting under legal authority, or to protect our rights or the safety of others.
7. Transfers outside India
Some providers above process data outside India, mainly in the United States. The DPDP Act permits such transfers except to countries the Central Government restricts by notification. We use providers that apply contractual and technical safeguards, and we will stop or move a transfer if the law requires it.
8. How long we keep it
- Enquiries and related emails: up to 24 months after our last communication, unless they lead to an engagement, in which case the engagement contract and our legal record-keeping obligations apply.
- Analytics data: kept for up to 12 months and used by us in aggregated form. If you withdraw consent, no new data is collected.
- Technical and security logs: kept for at least the period the law requires (currently 180 days under CERT-In directions, and one year under the DPDP Rules once in force), then deleted.
- Your cookie choice: kept in your browser until you clear it or we ask again after a material change.
When data is no longer needed for its purpose or for a legal obligation, we delete it or make it anonymous.
9. How we protect it
The site is served only over HTTPS. Access to enquiries and to the admin area is limited to authorised staff and protected by sign-in with an allow-list. We choose providers with recognised security practices and review access regularly.
No system is perfectly secure. If a personal data breach occurs, we will tell affected people without delay what happened, its likely impact, what we are doing about it and what they can do, and we will report it to the Data Protection Board of India and to CERT-In within the times the law sets.
10. Your rights
Under the DPDP Act you have the right to:
- Get a summary of the personal data we hold about you and how we use it.
- Have inaccurate or incomplete data corrected or completed, and have data erased when it is no longer needed.
- Withdraw consent at any time. For analytics and performance, use “Cookie settings” in the footer. Withdrawal does not affect processing that happened before it.
- Have a grievance addressed by us, and if you are not satisfied, complain to the Data Protection Board of India.
- Nominate another person to exercise your rights if you die or become incapacitated.
You can withdraw consent as easily as you gave it. On request we will give you this notice in English or in any language listed in the Eighth Schedule to the Constitution. To complain to the Data Protection Board of India, use its online platform.
Please give accurate information and do not file false or frivolous complaints.
To exercise a right, email [email protected]. We may need to confirm your identity first. We aim to respond within 30 days, and always within the time the law requires.
11. Children
This website is meant for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect personal data from children. We do not track or monitor the behaviour of children, or target advertising at them. If you believe a child has sent us personal data, contact us and we will delete it.
12. Grievance Officer
The Grievance Officer, Lakeline Data Private Limited. Email: [email protected]. Address: 5-497, Near Hitec City, Izzathnagar, Khanamet, Kondapur, Serilingampally, K.V. Rangareddy, Hyderabad – 500084, Telangana, India. See our Grievance Redressal page for how complaints are handled.
13. Visitors in the EU, EEA or UK
Lakeline Data Private Limited is the controller. Our legal bases are: steps you ask us to take before a possible contract, and our legitimate interest in replying to business enquiries (Article 6(1)(b) and (f) GDPR); your consent for analytics and performance measurement (Article 6(1)(a)); and our legitimate interest in keeping the site secure (Article 6(1)(f)). You have the right to access, correct, erase, restrict and port your data, to object to processing, to withdraw consent, and to complain to your local supervisory authority. Transfers outside the EEA and UK rely on the EU–US Data Privacy Framework or Standard Contractual Clauses offered by our providers.
14. Changes to this policy
We review this policy when our practices or the law change. For changes that do not affect what you have agreed to, we update the effective date and show a notice on the site. If we want to use your data for a new purpose, collect new kinds of data, or add a new tool that needs consent, we will ask for your consent again before doing so. Past versions are available on request from [email protected].