On this page
In plain English
- We collect what you send us, plus how the site is used.
- We never sell your data.
- We use it to reply, to work with you and to improve the site.
- You can ask to see, correct or delete it at any time.
Who we are
This policy is issued by 3Anomaly, a business based in Pune, Maharashtra, India (“3Anomaly”, “we”, “us”, “our”). Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) we are the data fiduciary for the personal data described here. For anything in this policy, write to [email protected].
What we collect
- What you give us. Your name, email address, company, role, phone number and anything you write when you email us, use a form or message builder, or book a call.
- How you use the site. Pages visited, how you arrived, time on page, approximate location derived from your IP address, and device, browser and operating system details.
- Cookies and similar identifiers. Set by the tools below. See our Cookie Policy.
- Client information. If you become a client: billing details, contracts and the communications needed to run the engagement.
We don’t ask for sensitive information such as health, financial account or biometric data, and this site is not intended for anyone under 18.
The tools we use
| Tool | Provider | Purpose | Data involved |
|---|---|---|---|
| Google Tag Manager | Loads and manages the site’s measurement tags | IP address, to deliver scripts | |
| Google Analytics 4 | Measures how the site is used so we can improve it | Pseudonymous IDs, usage, approximate location, device | |
| Google Search Console | Shows how the site performs in Google Search | Aggregated search data only, sets no cookies | |
| HubSpot | HubSpot, Inc. | Forms, email and our customer records | Details you submit, email interactions, page views after you submit a form |
Why we use it
- To reply to your enquiry and send what you asked for.
- To scope, deliver, invoice and support client work.
- To understand how the site is used and improve it.
- To send updates or insights, only if you’ve asked for them. Every email has an unsubscribe link.
- To keep records the law requires, and to protect the site and our business.
We process personal data with your consent, or for the legitimate uses the DPDP Act allows, such as when you voluntarily share information for a specific purpose or where the law requires us to keep it. Where you have given consent, you can withdraw it as easily as you gave it; that doesn’t affect anything we did before.
Who we share it with
We do not sell or rent personal data. We share it only with service providers who help us run the business (Google, HubSpot, our hosting and email providers), with professional advisers such as accountants and lawyers when needed, and with authorities where the law requires it. Our providers may use the data only to provide their service to us.
International transfers
Some providers, including Google and HubSpot, process data outside India, for example in the United States. We only use providers that apply appropriate safeguards, and we transfer data only to countries the Government of India has not restricted under the DPDP Act.
How long we keep it
| Data | How long |
|---|---|
| Enquiries that don’t become work | Up to 3 years after our last contact |
| Client, contract and billing records | As long as tax and other laws require, typically 8 years |
| Google Analytics data | 14 months |
| Email marketing preferences | Until you unsubscribe, plus a record so we don’t email you again |
Your rights
Under the DPDP Act you can ask us for a summary of the personal data we hold about you and how we use it, ask us to correct, complete, update or erase it, withdraw consent, and nominate someone to exercise these rights if you die or become unable to. If you are in the EU or UK, you also have the rights your local law gives you, such as objecting to processing or asking for a copy of your data.
To use any of these rights, email [email protected]. We may need to confirm your identity first, and we aim to reply within 30 days.
Grievances
If you have a concern about how we handle your data, contact our Grievance Officer at [email protected] with “Grievance” in the subject line. We’ll acknowledge it within 48 hours and aim to resolve it within 30 days. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.
Security
We use reputable providers, encrypted connections (HTTPS), strong passwords and limited access to protect your data. If a breach affects your personal data, we’ll inform you and the Data Protection Board of India as the law requires. No system is perfectly secure, so please don’t send us sensitive information by email or forms.
Changes to this policy
When we update this policy we’ll change the date at the top. If a change is significant, we’ll make it clear on the site and, where appropriate, tell you directly.