Privacy Policy

I'm Parveen Kumar, an independent software engineer working as a sole proprietor from Bhiwani, Haryana, India. I work with clients in India and the UAE. For the personal data described here, I am the data controller (under India's DPDP Act, the “data fiduciary”).

This policy covers www.parveenkumar.info, including the blog at www.parveenkumar.info/blog. The blog runs as a separate app on the same domain, but the same policy and the same cookie consent apply to both. The old address blog.parveenkumar.info only redirects here.

It also covers what happens to your information when you contact me about work, and when you become a client.

When you visit the site

The site is hosted on Vercel. Like any web server, Vercel's servers may log your IP address, browser user agent and the time of each request. These logs are used for security and to keep the site running.

If you allow analytics cookies, Google Analytics and Microsoft Clarity also collect usage data. Nothing is collected by them until you allow it. See Analytics for exactly what.

When you contact me

The contact form on this site does not store anything on the website. When you submit it, it opens WhatsApp with your message pre-filled, and you choose whether to send it. From then on the conversation happens on WhatsApp (run by Meta), or by email or LinkedIn if you prefer those. I receive whatever you choose to send: usually your name, phone number or email address, company, and details of your project.

When you become a client

I keep project communications, proposals, invoices, and payment confirmations from your bank or the payment gateway. I never see or store your card details; those are handled by the bank or payment gateway.

• To reply to enquiries and prepare proposals: because you asked me to (or, under GDPR, my legitimate interest in answering you and steps you requested before a contract).
• To deliver and bill client work: to perform our agreement, and to meet Indian tax and accounting obligations.
• To understand how the site is used (analytics): only with your consent, which you can withdraw at any time.
• To keep the site secure and working (server logs): my legitimate interest in running a safe website.

I don't sell or rent personal data, and I don't use it for advertising. There are no ads on this site and no advertising or marketing cookies or pixels.

The site uses two categories of cookies and browser storage:

• Essential (always on): stores only your cookie choice, so the site doesn't ask you again on every page.
• Analytics (optional, off until you allow it): Google Analytics and Microsoft Clarity.

You can change or withdraw your choice at any time through “Cookie preferences” in the footer, or with the button below. Withdrawing consent removes the Google Analytics and Clarity cookies set on this domain and stops those tools from running. I ask again after 12 months, or sooner if the categories change.

Microsoft may also set cookies on its own domains (for example clarity.ms) when Clarity runs. Those are governed by Microsoft's privacy policy.

Both tools stay off unless you allow analytics cookies.

• Google Analytics 4 (measurement ID G-74CZN8D1M5): pages viewed, device and browser, approximate location, and the site that referred you.
• Microsoft Clarity: clicks, scrolling, heatmaps and session recordings, which show how people move through a page. Clarity masks text you type into inputs.

I use this to see which pages are useful and where the site is confusing or broken.

• Vercel: hosting and server logs.
• Google: Google Analytics, with your consent.
• Microsoft: Clarity, with your consent.
• Meta (WhatsApp), and email or LinkedIn if you use them: for enquiries and project communication.
• Your bank or payment gateway: for client payments.

Blog images are stored on Cloudinary, but this site's server fetches and optimises them, so your browser never contacts Cloudinary. Fonts are self-hosted, so there are no requests to Google Fonts.

Google, Microsoft and Vercel may process data outside India, for example in the United States. Where that happens, it is under those providers' own terms and safeguards.

• Enquiries that don't become projects: up to 24 months, then deleted.
• Client and billing records: for as long as the engagement lasts, and afterwards for as long as Indian tax and accounting law requires.
• Analytics: according to each provider's retention settings, and no longer than 14 months for Google Analytics.
• Vercel server logs: kept for Vercel's short operational retention period.

In India (DPDP Act 2023) you can ask for a summary of the personal data I hold about you, ask me to correct or erase it, withdraw consent, get your grievance addressed, and nominate someone to exercise these rights for you if you die or become unable to.

In the UAE, the Personal Data Protection Law (PDPL) gives you similar rights.

In the EU and UK (GDPR / UK GDPR) you can ask for access, rectification, erasure, restriction of processing, portability, object to processing, and withdraw consent.

To use any of these, email me at team@parveenkumar.info. I reply within 30 days. I may ask you to confirm who you are before acting on a request.

Please contact me first. My grievance contact is me, Parveen Kumar, at team@parveenkumar.info. If you're not satisfied with my answer, in India you can approach the Data Protection Board of India. Elsewhere, you can complain to your local data-protection authority.

This site isn't directed at people under 18, and I don't knowingly collect their personal data. If you think a child has sent me their data, email me and I'll delete it.

When I update this policy, the “Last updated” date at the top changes. If I make a material change to how cookies are used, I ask for your consent again.

Questions about this policy or your data:

• Email: team@parveenkumar.info
• Phone: +91 9812805704
• Location: Bhiwani, Haryana, India

See also the Terms of Service and Refund Policy.