Privacy Policy

Digital Mirha is the data controller for personal data collected through this website. You can reach us about anything in this policy at hussainnazir80@gmail.com, or by post at Sector 62, Noida, Uttar Pradesh 201309.

We are based in India. If you are in the EEA or UK, please read section 6 on international transfers.

GDPR requires a lawful basis for each purpose. Ours are set out below. We do not use your data for anything not listed here.

• Enquiries and consultation requests — your name, email, phone, company, and whatever you write in the form, plus form-specific answers such as budget range and preferred meeting time. Used to respond to you and prepare a quote. Lawful basis: performance of a contract, or steps taken at your request prior to a contract.
• Newsletter subscriptions — your email address only. Used to send occasional updates. Lawful basis: consent, which you may withdraw at any time (see section 7).
• Account data — if you hold an account, your name, email, and a hashed password. Passwords are stored using bcrypt and are never readable by us. Lawful basis: performance of a contract.
• AI chat conversations — the messages you send to a chat agent, and a randomly generated session identifier used to keep one conversation together. Used to answer your question and to let the site owner review enquiries. Lawful basis: legitimate interests in operating a support channel; for contact details you volunteer in chat, steps prior to a contract.
• Server logs — your IP address is processed transiently by our web server and used for rate limiting and abuse prevention. Lawful basis: legitimate interests in keeping the service available and secure.

We do not run advertising or analytics trackers, we do not build behavioural profiles, and we never sell personal data.

Being specific matters more than reassurance, so: this site has no analytics, no advertising pixels, and no third-party tracking scripts. We do not record your browsing across pages, we do not fingerprint your device, and we do not process payments on this site.

We set only strictly necessary cookies, and only if you sign in to an account: a session cookie that keeps you logged in and a CSRF token that protects forms against cross-site request forgery. Both are essential to a function you have asked for, so under the ePrivacy rules they do not require consent — which is why you will not see a cookie banner here.

If you simply browse the site without signing in, no cookies are set. Should we ever add analytics or marketing cookies, we will ask for your consent first and this section will say so.

We keep the list short on purpose. Each of these acts as a processor on our instructions:

• Oracle Cloud Infrastructure — hosting and database storage (region: Mumbai, India).
• Resend — delivery of transactional email, such as the confirmation of your enquiry.
• Zhipu AI (BigModel) — the large language model behind our AI chat agents. Messages you send to an agent are transmitted to this provider to generate a reply.
• Unsplash — some images load from Unsplash's content network, which means your IP address is visible to them when a page renders.

Our servers are in India, and our AI chat provider processes messages in China. Neither country is covered by a European Commission adequacy decision, so transfers of EEA or UK personal data to us rely on appropriate safeguards, such as Standard Contractual Clauses, together with the supplementary measures required by the Schrems II judgment.

If you would like details of the safeguards in place for a specific transfer, or a copy of the relevant clauses, email hussainnazir80@gmail.com.

If the GDPR or UK GDPR applies to you, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted where we have no overriding reason to keep it.
• Restriction — ask us to pause processing while a concern is resolved.
• Portability — receive data you gave us in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including any direct marketing.
• Withdraw consent — at any time, where we rely on consent. Withdrawing does not affect processing already carried out.

Email hussainnazir80@gmail.com to exercise any of these. We will respond within one month. We will not charge you or ask you to justify the request.

You also have the right to lodge a complaint with a supervisory authority — in the EEA, the data protection authority of your country of residence; in the UK, the Information Commissioner's Office. You may do so without contacting us first, though we would rather have the chance to put things right.

• Enquiries: up to 24 months after our last contact, then deleted or anonymised.
• Newsletter: until you unsubscribe.
• Accounts: for as long as the account is open, then deleted on request.
• Chat transcripts: retained so the site owner can follow up on enquiries; deleted with the associated agent or on request.

Our AI chat agents generate replies automatically from the content of the website they were trained on. They answer questions — they do not make decisions about you, and there is no profiling or automated decision-making with legal or similarly significant effects. A human reviews any enquiry that comes through a chat before we act on it.

Because these replies are produced by a language model, they can occasionally be wrong. Nothing an agent says forms a binding quote or commitment.

When you embed one of our agents on your website, you are the controller for your visitors' personal data and we act as your processor. You will need to reflect the widget in your own privacy notice, and we will enter into a data processing agreement with you on request. Email hussainnazir80@gmail.com and we will provide one.

If we change how we handle personal data, we will update this page and revise the date at the top. Where a change materially affects you and we rely on your consent, we will ask again rather than assume it.