Privacy Policy

1. Who we are

PeppyOwl is a web design and development business, a sole proprietorship firm of Kanchan registered in India with its principal place of business at Ground Floor, WZ-63, Titarpur, Tagore Garden, New Delhi, West Delhi, Delhi 110027, India.

For the purposes of applicable data protection law, including the Digital Personal Data Protection Act, 2023, Kanchan, proprietor of PeppyOwl, is the data fiduciary responsible for the personal data described in this policy. This policy applies to the website at itspeppyowl.store and to personal data we handle in the course of providing our services.

2. What information we collect

Information you give us

When you submit an enquiry form, email us, or engage us for a project, we collect the information you choose to provide. This typically includes your name, email address, phone number, company name, and the details of the project you describe.

If you become a client, we additionally collect the information needed to deliver and invoice the work — billing address, GST identification number where applicable, and any credentials or access you grant us to your systems for the purpose of the project.

Information collected automatically

When you visit this website our hosting provider and analytics tools record standard technical information: IP address, browser type and version, device type, operating system, referring page, pages viewed, and the date and time of your visit.

What we do not collect

We do not collect payment card details through this website. Where card payment is offered for invoices, it is processed directly by a payment provider and card data does not pass through our systems. We do not knowingly collect sensitive personal data, and we ask that you do not send it to us through the enquiry form.

3. How we use your information

• To respond to your enquiry and prepare a scope and quotation
• To deliver services you have engaged us for, and to communicate with you during a project
• To raise invoices, process payment, and keep accounting and tax records
• To provide post-launch support and maintenance under a care plan
• To operate, secure and improve this website
• To comply with legal, regulatory and tax obligations that apply to us

4. Legal basis for processing

We process personal data on the following bases: your consent, given when you submit a form or otherwise contact us; the performance of a contract, where we are delivering services you have engaged us for; compliance with a legal obligation, such as retaining invoices for tax purposes; and our legitimate interest in operating and securing our website and business, where that interest is not overridden by your rights.

5. Cookies and analytics

This website uses a minimal set of cookies. Strictly necessary cookies support core functionality such as security and form submission. Where analytics is enabled, we use it to understand aggregate traffic patterns — which pages are read, how visitors arrive, and where they leave.

If we run advertising campaigns, this site may include measurement tags provided by advertising platforms so we can attribute enquiries to the campaign that produced them. These tags may set cookies or similar identifiers under the platform’s own privacy terms.

You can block or delete cookies through your browser settings at any time. Blocking non-essential cookies will not prevent you from using this site or contacting us.

6. Who we share information with

We share personal data only where it is necessary, and only with the following categories of recipient:

• Service providers who support our operations — website hosting, email, form handling, cloud storage, accounting and invoicing software. These providers process data on our instructions.
• Payment providers, where you pay an invoice by card or online transfer.
• Professional advisers, such as our accountants or legal advisers, where reasonably required.
• Authorities, where we are required to disclose information by law, court order, or a valid request from a government agency.

Where we act as a data processor on a client’s behalf — for example when we have access to a client’s customer database during a build — we process that data only on the client’s documented instructions and for the duration of the engagement.

7. How long we keep it

Enquiries that do not convert into a project are retained for up to twenty-four months and then deleted. Client project records, contracts and correspondence are retained for the duration of the engagement and for up to seven years afterwards, in line with statutory record-keeping requirements in India. Website analytics data is retained according to the settings of the analytics tool in use, typically no more than twenty-six months.

8. Security

We apply reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) across this website, access control on the systems that hold client information, and multi-factor authentication on business-critical accounts. Access is limited to people who need it to do their work.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authority as required by law.

9. Your rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you
• Ask us to correct information that is inaccurate, incomplete or out of date
• Ask us to erase your personal data where we no longer have a lawful reason to keep it
• Withdraw consent you previously gave, without affecting processing already carried out
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity
• Raise a grievance about how we have handled your data

To exercise any of these rights, use the contact form or email itspeppyowl [at] gmail.com. We will respond within thirty days. We may ask you to verify your identity before acting on a request.

10. Children

Our services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under the age of eighteen. If you believe a child has provided us with personal data, contact us and we will delete it.

11. International transfers

Some of the service providers we use operate infrastructure outside India. Where personal data is transferred outside India, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable law.

12. Grievance officer and contact

If you have a question or complaint about this policy or about how we handle your personal data, contact our grievance officer:

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The revision date at the top of this page always shows when it was last changed. Material changes will be communicated to active clients directly.