The short version
- We collect what you type into our two forms (a brief, or the careers list), plus basic technical data such as your IP address.
- We use it to reply to you, to consider you for project work, and to keep spam out.
- We do not sell or rent your data, and this site runs no advertising pixels.
- Two analytics tools, Google Analytics and Microsoft Clarity, start only after you scroll, click or type, and they set cookies. The site itself sets none.
- You can ask to see, correct or delete your data at any time: info@digitallegates.com.
Who we are
Digital Legates is a digital agency headquartered in Patna, Bihar, India, founded by Shubhanshu Mohan. This policy covers digitallegates.com. Our address is on the contact page.
What we collect and why
When you send us a brief
The contact form asks for your name, company, email, phone, the service and budget you pick, and your message. With it we record the time, your IP address and your browser's user agent. We use this to reply to you and to discuss the work you described.
When you join the careers list
The careers form asks for your name, email, phone (optional), city, primary skill, a portfolio or LinkedIn link, years of experience and a short note. We record the time you sent it. We use this to consider you for project work.
The form also has a box, unticked unless you tick it: "Keep me posted about openings and occasional Digital Legates updates". If you tick it, we record that you agreed and when, and we may email you about openings and occasional news. You can withdraw that consent at any time by writing to info@digitallegates.com, and we stop.
To keep spam out
Both forms include hidden fields and a signed timestamp that automated spam fails. Our server also counts submissions from each IP address for one hour, stored as a one-way hash rather than the address itself, and scores messages for common spam patterns. Submissions flagged as spam are not passed on to us as leads. They are kept in a private log on our server so we can catch any real message flagged by mistake.
When you browse
Our hosting provider's servers and content delivery network process your IP address and request details to deliver pages and keep the site secure. The site itself sets no cookies.
Google Analytics 4 and Microsoft Clarity load only after your first scroll, click, key press, mouse movement or touch on a page. Both set cookies and collect usage data such as the pages you view, your device and browser, and your approximate location. Clarity also records clicks, scrolling and mouse movement so we can see where a page confuses people. We use both to improve the site, not to identify you.
Where your data is stored
- Our website server: Hostinger, on a server in India (Mumbai). The spam log, the rate-limit data and the careers list sit in a private folder outside the public website.
- Email: form submissions are emailed to info@digitallegates.com (email hosted by Hostinger). Briefs from the contact form are also sent to a Gmail inbox we use (Google).
- Google Sheets: briefs from the contact form are copied to a private Google Sheet through Google Apps Script. Careers entries and messages flagged as spam are not.
- Analytics: held by Google and Microsoft under their own terms, which may include servers outside India.
Third parties
- Hostinger hosts the website, its content delivery network and our email.
- Google serves the fonts on every page (fonts.googleapis.com and fonts.gstatic.com), so your browser sends your IP address to Google when a page loads. Google also runs Analytics, Gmail and Sheets for us. See the Google Privacy Policy. You can block Analytics with Google's opt-out browser add-on.
- Microsoft runs Clarity. See the Microsoft Privacy Statement.
- Cloudflare Turnstile is not active today. If we switch it on, our forms will load a Cloudflare script that checks whether a visitor is human, and we will update this page first. See the Cloudflare Privacy Policy.
- Links to other sites, such as our social profiles and client websites, are covered by those sites' own policies.
How long we keep it
- Briefs: 24 months after our last contact with you.
- Careers list: until you ask us to remove you, or 24 months after our last contact with you, whichever comes first.
- Spam log: until it reaches 2 MB. It is then replaced, and one older copy is kept until the next replacement.
- Rate-limit data: deleted after one hour.
- Analytics: under the retention settings of Google and Microsoft.
Your rights under the DPDP Act 2023
Under India's Digital Personal Data Protection Act, 2023, you can:
- ask what personal data we hold about you and who we have shared it with;
- ask us to correct, complete, update or erase it;
- withdraw any consent you gave, such as the careers updates box, as easily as you gave it;
- raise a grievance with us, and if you are not satisfied with our answer, complain to the Data Protection Board of India;
- nominate someone to exercise these rights for you if you die or become unable to.
To use any of these, email info@digitallegates.com from the address you used with us and say what you want. We will tell you when it is done. Grievances go to the same address, for the attention of Shubhanshu Mohan, founder.
Children
This site is for businesses and people looking for work, not for children. We do not knowingly collect data from anyone under 18. If you think a child has sent us their details, write to us and we will delete them.
Security
The whole site runs over HTTPS. The private logs and the careers list are stored outside the public website folder, readable only by our hosting account. No system is perfectly secure, so please do not send passwords or payment details through our forms.
Changes to this policy
We update this page when what we collect or how we use it changes, and change the date at the top.
Contact
Email info@digitallegates.com or call +91 72048 18574. The terms of use cover how you may use the site itself.