Privacy Policy

The short version

We collect the details you type into the consultation form, and nothing else about you personally. We use them to reply to you and to do the work you engage us for. We do not sell them, we do not profile you, and we do not add you to a mailing list you did not ask for. This site sets no advertising or analytics cookies.

Who this covers

This policy applies to anreralabs.com and to enquiries you send us through it. Anrera Labs is the controller of the personal data described here, which means we decide why it is collected and what happens to it.

What we collect

• Details you give us. Your name, business name and city, what you need help with, and your WhatsApp number, submitted through the consultation form.
• What you send afterwards. Messages, files, briefs and account access you choose to share with us over WhatsApp or by any other channel while we work together.
• Technical records. The ordinary server logs created when any website is visited: the time of the request, the page requested, a truncated IP address, and the browser and device type. These are produced by our hosting provider for security and reliability, not assembled into a profile of you.
• Client project data. Where you engage us, we may hold access to systems you own, such as analytics, ad accounts or a CRM. That data stays yours; we hold it only as long as the engagement runs.

What we do not collect

• No advertising identifiers, cross-site trackers or fingerprinting.
• No location beyond the city you type in yourself.
• No special category data: nothing about health, beliefs, politics or biometrics.
• No payment card details. Where payments apply, a provider handles them and we never see the card.

Why we use it, and on what basis

• To answer your enquiry and prepare your consultation. Basis: steps taken at your request before entering a contract.
• To deliver work you engage us for. Basis: performance of our contract with you.
• To keep the site secure and working. Basis: our legitimate interest in running a service that is not abused.
• To meet tax and accounting obligations. Basis: legal obligation.

If you do not become a client, we do not repurpose your details for anything else. We never sell or rent personal data, and we do not use it to train models.

How the consultation form works

Submitting the form opens WhatsApp on your device with your details written into a draft message. Nothing is transmitted to us until you press send in WhatsApp, at which point WhatsApp's own terms and privacy policy apply to that message alongside this one. The form also contains a hidden field that only automated software fills in; if it is filled, the submission is discarded and nothing is sent.

If you would rather not use WhatsApp, you can reach us through the link on the contact page and ask for an alternative channel.

Cookies and similar technologies

This site currently sets no cookies at all — no analytics, no advertising, no third-party embeds. It stores one item in your browser's local storage, anrera-theme, which remembers whether you chose the light or dark appearance. That value never leaves your device and is not personal data.

If we add analytics later, this page will be updated before it goes live and you will be asked to consent before any non-essential cookie is set. You will be able to change or withdraw that consent at any time.

Who else processes your data

• Our hosting and CDN provider serves you these pages and produces the technical logs described above.
• WhatsApp (Meta) carries any message you send us through it.
• Our accountant and payment provider, where an engagement produces an invoice.

These are processors acting on our instructions, or independent controllers in their own right where the law treats them that way. We do not share your details with advertisers, data brokers or list vendors.

International transfers

We work with clients in India, Europe, the United Kingdom, the United States and the Gulf, and some of the providers above operate outside your country. Where personal data moves out of the UK or the European Economic Area, it is covered by an adequacy decision or by standard contractual clauses with the provider concerned.

How long we keep it

• Enquiries that do not become projects: deleted within twelve months.
• Client project records: kept for the engagement plus the period tax and contract law requires, then deleted.
• Access to your own systems: removed at the end of the engagement, or sooner if you ask.
• Server logs: rotated by our host, typically within thirty days.

Security

The site is served over HTTPS only, with a strict content security policy and no third-party scripts. Access to enquiries and client systems is limited to people who need it, protected by strong authentication. No system is perfectly secure, and if a breach ever affects your personal data we will tell you and the relevant authority within the timescales the law sets.

Your rights

You can ask us to:

• Tell you what we hold about you, and give you a copy.
• Correct anything inaccurate or incomplete.
• Delete it, where we have no continuing reason to keep it.
• Restrict or object to how we use it.
• Provide it in a portable format, or send it to someone else.
• Withdraw consent, where consent is what we relied on.
• Nominate someone to exercise these rights if you are unable to.

Ask through the contact page and we will action it within thirty days. These rights are given by the UK and EU GDPR and, in India, by the Digital Personal Data Protection Act 2023. If you are unhappy with our response you can complain to your data protection authority: the Information Commissioner's Office in the UK, your national supervisory authority in the EU, or the Data Protection Board of India.

Children

This site is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, tell us and we will delete it.

Automated decisions

We do not make decisions about you by automated means, and we do not profile you. Where we use AI in delivery work, a person reviews the output before it reaches you or your customers.

Grievances

If something about how we handle your data concerns you, raise it through the contact page and it will be acknowledged within 48 hours and resolved within thirty days. The founder handles these directly; there is no support queue to get lost in.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. Material changes will be flagged on the site before they take effect.

Contact

Anrera Labs · Message us on WhatsApp

Note for the site owner: this describes how the site currently behaves and is written to be accurate, not to be legal advice. Before launch, have it checked against your registered entity, add your registered address and the name of a grievance officer (required under India's IT Rules once you are handling user data at scale), and confirm the retention periods match what you actually do. Update it again the moment analytics, a CRM or a payment gateway is added — the cookies section in particular becomes wrong the day analytics goes live. Reachable contact is currently WhatsApp only; the email address returns automatically once our WhatsApp number is configured in src/data/site.ts.