Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• ·Contact information: name, email address, phone number, company name
• ·Project details submitted through our contact form or email
• ·Payment information (processed securely via third-party payment processors — we do not store card data)
• ·Communications you send us via email, phone, or chat
• ·Newsletter subscription email addresses

1.2 Information Collected Automatically

• ·IP address, browser type, operating system, and referring URLs
• ·Pages visited, time spent, and clickstream data via analytics tools
• ·Device identifiers and session tokens
• ·Cookie data (see Section 3)

2. How We Use Your Information

• ·To respond to inquiries, provide quotes, and deliver contracted services
• ·To communicate project updates, status reports, and invoices
• ·To send newsletters or marketing emails (only with your consent, unsubscribe any time)
• ·To analyze website usage and improve user experience
• ·To comply with legal obligations and enforce our agreements
• ·To detect and prevent fraud, security incidents, and abuse

Our legal bases for processing personal data under GDPR include: performance of a contract, legitimate interests, consent (for marketing), and legal obligations.

3. Cookies

We use the following types of cookies on our website:

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling some cookies may affect site functionality.

4. Third-Party Service Providers

We share data with trusted third-party providers only to the extent necessary to deliver our services. These include:

• ·Cloud hosting providers (AWS, Vercel, GCP) — for website and application hosting
• ·Analytics providers (Google Analytics, Plausible) — for usage analytics
• ·Email and CRM platforms (e.g., Mailchimp, HubSpot) — for communication
• ·Payment processors (Stripe, Razorpay) — for invoicing and payment
• ·Video platforms (YouTube) — for embedded testimonial videos
• ·Project management tools (Jira, Notion, Slack) — used internally for delivery

All third parties are contractually required to protect your data and use it only for the specific purpose for which it was shared. We do not sell personal data.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email us at info@ispecia.com. We respond within 30 days.

6. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law. Client project data is retained for 7 years for accounting and legal purposes. Marketing email lists are reviewed annually and inactive contacts are removed. You may request deletion at any time.

7. International Data Transfers

iSpecia is based in India. If you are located in the EU or UK, your data may be transferred to and processed in India. We apply appropriate safeguards including standard contractual clauses (SCCs) where required by GDPR. By using our services, you consent to this transfer.

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+), access controls, regular security audits, and employee training. No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data with commercially reasonable measures.

9. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email to known contacts. Continued use of the website after changes constitutes acceptance.