Privacy Policy

1. Who we are

Ziync is a web development practice based in Chennai, India. We build websites, web applications and the WhatsApp platform BNex.

For the EU/UK General Data Protection Regulation we are the data controller for personal data collected through this website. Under India's Digital Personal Data Protection Act 2023 we are the Data Fiduciary. Our contact details are in section 12.

2. What we collect

We collect only what a given interaction requires. In practice that means:

• Contact form: your name, email address and anything you choose to type — typically a phone number, company name and a description of your project. Only name, email and message are required.
• Blog subscription: your name and email address, together with which article you subscribed from and the page you were on.
• Browsing: if — and only if — you accept analytics cookies, we receive aggregated usage data: pages viewed, approximate location derived from IP address, referring source, device and browser type, and session duration. Analytics never gives us your name or email.
• Writing to us directly: your email address and the contents of your message, held in our business mailbox.

We do not collect special-category data such as health, religion or biometrics, we do not buy personal data from third parties, and we never ask for payment card details through this website.

3. Why we use it, and our legal basis

Each purpose rests on a specific legal basis under GDPR Article 6:

• Replying to your enquiry and preparing a proposal — steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
• Delivering a project you engaged us for — performance of a contract.
• Sending blog updates you asked for — your consent, withdrawable at any time via the unsubscribe link in every email or the unsubscribe page.
• Understanding how the site is used — your consent, given through the cookie banner. Analytics stays switched off until you accept it.
• Meeting accounting, tax and legal obligations — compliance with a legal obligation.

We do not sell your personal data and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies and your choices

This site runs its own consent banner rather than leaving the decision to your browser settings. Two points are worth being precise about:

• Analytics is denied by default. Advertising and analytics storage are set to “denied” before any measurement runs. Nothing about your visit is recorded until you actively accept.
• Declining is a real option. If you decline, that choice is stored on your device and honoured on later visits.

Regardless of your choice, one small record is kept on your device so we do not ask again on every page: your accept/decline decision. It holds no identifier and is shared with no one. Clearing your browser's site data removes it; you will simply be asked once more.

5. Who processes it on our behalf

We rely on a small number of established providers. Each receives only what its function requires, under its own data-processing terms:

6. Where your data goes

We are based in India and the providers above operate globally, so personal data may be transferred to and processed in countries outside your own, including the United States and the European Union. Where data originates in the EEA or UK, those transfers rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism. This website is provisioned in the Asia‑Southeast region.

7. How long we keep it

• Enquiries that do not become projects: kept while the conversation is live, then removed within 24 months.
• Client project records: kept for the engagement and afterwards for as long as business and tax records must be retained.
• Blog subscriptions: kept until you unsubscribe, after which your address is suppressed so we do not contact you again.
• Analytics data: retained on the provider's rolling window and only where you consented.

8. Security

Data in transit is encrypted with TLS. Access to enquiry and subscription records is limited to those who need it to respond to you, and credentials are held in managed secret storage rather than in source code. No method of transmission or storage is completely secure. If a breach affecting your data occurs, we will tell you and the relevant authority promptly.

9. If you use BNex

BNex is a separate product that businesses use to manage their own WhatsApp conversations. Who is responsible for what:

• The business is the controller. When you message a company using BNex, that company decides what happens to the conversation. Their privacy notice governs it.
• We are the processor. We hold and route that data on the business's instructions and do not use it for our own purposes.
• Meta is the underlying platform. Messages travel over the WhatsApp Business Platform and are subject to Meta's terms in addition to ours.

To have a conversation with a business deleted or exported, contact that business first. If they ask us to act, we will.

10. Your rights

Depending on where you live, you may have some or all of the following rights:

• To be told what personal data we hold about you, and to receive a copy
• To have inaccurate data corrected
• To have your data erased
• To restrict or object to processing, including direct marketing
• To receive your data in a portable format
• To withdraw consent at any time, without affecting processing already carried out
• To complain to a supervisory authority — in India the Data Protection Board; in the EU or UK, your national authority

Write to the address in section 12 and we will respond within 30 days. We will not charge you for exercising these rights.

11. Children

This site and our services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Contact us

For any question about this policy, or to exercise a right described above:

13. Changes to this policy

If we change how we handle personal data we will update this page and the date at the top. Material changes affecting people who have subscribed or engaged us will also be communicated by email. Continuing to use the site after an update means you accept the revised policy.