This site is a corporate information site. It sells nothing, sets no cookies, runs no analytics and carries no third-party tracking of any kind. The only personal data it collects is what you choose to type into the contact form.
This policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which are the operative Indian data-protection rules today. It is also written to align with the Digital Personal Data Protection Act, 2023, whose substantive obligations are scheduled to commence in 2027. We have chosen to work to that standard now rather than wait for it.
Who we are
SNAZZYWORKS is the entity that decides why and how your personal data is processed. This makes us the data fiduciary under the DPDP Act. Our registration details and address are at the foot of this page.
Astroyana and Rudraksha Kavach are sister brands operated by SNAZZYWORKS. They run their own websites, with their own privacy policies, and this policy does not cover them. If you bought something, your data is held under that brand’s policy, not this one.
What we collect
From the contact form: your name, email address, an optional phone number, the topic you select, and your message.
Automatically, as a consequence of the site being on the internet: our hosting provider records ordinary web-server request logs, which include your IP address, the page requested, your browser’s user-agent string and a timestamp. We do not control the contents or retention of those logs; they belong to the hosting provider’s platform.
To limit abuse of the contact form: we store a salted, one-way hash of your IP address together with submission timestamps. The hash cannot be reversed to recover the address. We do this so that automated spam can be rate-limited without us keeping a record of who visited.
We do not collect date, time or place of birth on this site, and we do not ask for payment details, government identifiers or any special-category data. Please do not send them to us.
Why we use it, and on what basis
We use what you send solely to read your enquiry and reply to it. We do not use it for marketing, do not build a profile from it, and do not sell or rent it to anyone.
Our basis is that you voluntarily provided the information for that specific purpose. Under the DPDP Act’s framework this is the kind of use contemplated by the “certain legitimate uses” provision, where data is given voluntarily for a purpose and not withheld from it. This is why the form has no consent tick-box: making you agree to something in order to receive a reply you asked for would not be meaningful consent, and would obscure what is actually happening. Instead, a short notice sits directly beside the form telling you what we will do with what you send.
Where it goes, and for how long
| What | Where it is held | How long |
|---|---|---|
| Your enquiry: name, email, phone, message | Our mailbox with Zoho, hosted in India | 24 months from our last correspondence with you, then deleted |
| Web-server request and security logs, including your raw IP address | Our hosting provider’s platform (Hostinger, including its CDN) | Per the hosting provider’s own retention period |
| Spam-prevention state: salted IP hash and timestamps | Our server, outside the public web directory | Up to 48 hours, then automatically pruned |
| Delivery-failure logs, if an email fails to send | Our server, outside the public web directory | Rotated once the file reaches 1 MB |
This site stores nothing at all in your browser. There are no cookies, no local storage and no session identifiers. You can confirm that in your browser’s developer tools.
Deletion at 24 months is a manual process rather than an automatic system feature. We review the mailbox and delete correspondence past that age; if you would like your enquiry removed sooner, ask and we will do it.
Who else is involved
Only two organisations process this data on our behalf:
- Zoho Corporation, our email provider. Your enquiry is delivered to and stored in a Zoho-hosted mailbox.
- Hostinger, our hosting and CDN provider. All traffic to this site passes through their infrastructure, and their servers generate the request logs described above.
If you contact us over WhatsApp, that conversation is carried and stored by Meta Platforms under Meta’s own terms and privacy policy, not ours. We have no control over what Meta collects. If you would rather that not happen, use email or the form.
Beyond these, we share nothing. There are no advertising networks, no analytics providers, no data brokers, and no third-party scripts on this site.
Transfers outside India
Our mailbox is on Zoho’s India data centre. Hosting infrastructure and content delivery may route or cache requests outside India as part of normal internet operation. Any such transfer is limited to what is necessary to deliver this website and our email.
Your rights
You can ask us to:
- tell you what personal data of yours we hold, and what we have done with it;
- correct anything inaccurate, incomplete or out of date;
- erase your enquiry and our correspondence about it;
- nominate someone to exercise these rights on your behalf if you are unable to.
Write to us at the address below and we will act on it. We may need to confirm you are who you say you are before we act, particularly for erasure. There is no charge.
We cannot erase data we do not control, including our hosting provider’s server logs and anything held by Meta from a WhatsApp conversation. And where we are required to retain something to comply with a legal obligation, we will keep that and tell you why.
Privacy and grievance contact
If you want to exercise a right, or you are unhappy with how we have handled your data, write to hello@snazzyworks.com with “Privacy” in the subject line. We aim to acknowledge and respond during our published weekday hours. Some requests take longer where we must confirm identity, obtain service-provider records or retain information for a legal obligation.
We publish a contact rather than a named officer: SNAZZYWORKS is a sole proprietorship, and the individual’s name is deliberately kept out of public material. The address above reaches the person responsible.
If you are not satisfied with our response, you may escalate to the relevant authority once the Data Protection Board of India is constituted under the DPDP Act.
Children
This site is not directed at children and has no reason to collect their data. We do not knowingly process personal data of anyone under 18. If you believe a child has sent us something through the contact form, tell us and we will delete it.
Security
Traffic to this site is encrypted in transit with HTTPS. The site is static. There is no database, no login, no user accounts and no payment processing, which removes most of the ways a website loses data. The contact form’s configuration and credentials are stored outside the public web directory. Access to the mailbox is restricted to the proprietor.
No system is perfectly secure, and we do not claim otherwise. If a breach affected your data, we would tell you and the relevant authority.
Cookies
This site sets no cookies. Not for analytics, not for advertising, not for preferences, and not for anything else. This is why you are not being asked to dismiss a consent banner.
Nothing else is stored in your browser either. There is no local storage, no session identifier and no fingerprinting script. The site is static HTML and CSS, and what it loads is visible in the page source.
Changes
If we change this policy we will update the date at the top of this page. Material changes, such as introducing analytics, would be described here.