Who We Are

Ernyg Tech is a creative design and web development studio based in Kerala, India. We operate at ernyg.com. For the purposes of data protection law, Ernyg Tech is the data controller for personal data collected through this site.

What We Collect

We collect personal data only when you choose to contact us. Through the contact form at /contact, we may collect:

We do not use tracking pixels, behavioral advertising scripts, or tools that build individual user profiles. We do not collect sensitive personal data such as financial information, health data, or government identifiers.

If you contact us directly by email, we retain that correspondence for the purposes described below.

How We Use It

We use the data you provide to:

• Respond to your inquiry and assess your project requirements
• Prepare and send a proposal or quote
• Communicate with you throughout an active project engagement
• Maintain records of client relationships and project history

We do not use your data for unsolicited marketing. We do not sell it. We do not share it with third parties for advertising.

Legal Basis for Processing

For users in India:We process your personal data under India's Digital Personal Data Protection Act, 2023 (DPDPA). Our legal basis is consent, given voluntarily when you submit the contact form, and the performance of a contract where a project engagement follows.

For users in the European Economic Area: Our legal basis under the General Data Protection Regulation (GDPR) is your consent, given when you submit the contact form, and legitimate interests in responding to genuine business inquiries.

For users in California: We do not sell personal information as defined under the California Consumer Privacy Act (CCPA). California residents hold the rights described in Section 07 below.

Data Storage and Security

Your data is stored securely. We use HTTPS across the entire site. Contact form submissions are transmitted over encrypted connections. We take reasonable technical and organisational measures to protect your data from unauthorised access, alteration, or disclosure.

We are a small studio. Your data is not passed through enterprise CRMs, marketing platforms, or automated decision-making systems. It is accessed only by the Ernyg team members handling your inquiry or project.

We do not transfer personal data outside of India except where necessary to communicate with clients located abroad, and only to the extent required to respond to or fulfill the engagement.

Data Retention

We retain contact form submissions and client correspondence for up to 24 months from the date of last communication. If no project engagement follows an initial inquiry, we delete the data sooner. You may request deletion at any time by contacting us at contact@ernyg.com.

Project-related records (scoping documents, proposals, signed agreements) may be retained for up to 7 years for legal and accounting purposes, in line with applicable Indian law.

Your Rights

Depending on your jurisdiction, you hold some or all of the following rights over your personal data:

Right to access: You may request a copy of the personal data we hold about you.

Right to correction: You may request that we correct inaccurate or incomplete data.

Right to erasure: You may request that we delete your personal data, subject to any legal obligations that require us to retain it.

Right to restriction: You may request that we limit how we process your data while a dispute is resolved.

Right to data portability: You may request your data in a structured, machine-readable format.

Right to withdraw consent: You may withdraw consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

Right to object: You may object to processing based on legitimate interests.

Right to lodge a complaint: If you are based in the EEA, you have the right to lodge a complaint with your local data protection authority. In India, you may raise a grievance with us directly (see Section 10) or with the Data Protection Board of India once it is constituted under the DPDPA.

To exercise any of these rights, email contact@ernyg.com. We will respond within 30 days.

Cookies

We use only session cookies that are strictly necessary for the website to function. We do not use advertising cookies, analytics cookies that identify individual users, or third-party tracking scripts.

Because we use no non-essential cookies, no cookie consent banner is required. If this changes, we will update this policy and implement appropriate consent mechanisms.

Third-Party Links

Our site contains links to our social media profiles (LinkedIn, Instagram, Facebook), client sites, and other external resources. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies.

Grievance Officer (India — DPDPA)

In accordance with India's Digital Personal Data Protection Act, 2023, our designated point of contact for data grievances is:

We will acknowledge grievances within 7 days and resolve them within 30 days of receipt.

Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from someone under 18, contact us immediately at contact@ernyg.com and we will delete it without delay.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in a revised "Last updated" date at the top of the page. We encourage you to review this page periodically. Continued use of the site after changes are posted constitutes acceptance of the updated policy.