In short: we do not sell your data, we run no advertising or cross-site tracking, and this website sets no marketing or analytics cookies. The only personal data we actively collect is what you choose to send us through the contact form or by email. Everything else on this page is the detail behind that.
This policy is drafted to match how the site is actually built. We recommend a qualified adviser reviews it before it is relied on.
1. Who we are
This site is operated by Paws Trend (OPC) Private Limited (“Paws Trend”, “we”, “us”), a One Person Company incorporated in India, with its registered office at E-9, Associated Apartment, IP Extension, Patparganj, Delhi 110092, India.
For the purposes of the data protection laws listed below, Paws Trend is the data controller (and, under India's DPDP Act, the Data Fiduciary) for personal data processed through this website.
Data protection contact: privacy@pawstrend.com. If that mailbox is not yet live, use connect@pawstrend.com and mark your message “privacy”. Our grievance and data protection point of contact is the Director.
2. Which laws apply
We are established in India, and we offer services to businesses and individuals in the United Kingdom, Ireland, the European Union and elsewhere. Depending on where you are, the following apply to our processing of your personal data:
- the Digital Personal Data Protection Act, 2023 (India), together with the Information Technology Act, 2000 and its rules;
- the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), which applies to us under Article 3(2) because we offer services to people in the EU;
- the UK GDPR and the Data Protection Act 2018, on the same basis, for people in the UK.
Where these give you stronger rights than each other, we apply the stronger standard.
3. What we collect and why
3.1 Enquiries you send us
When you use the contact form or email or call us, we collect the information you provide: your name, email address, the subject and the message you write, plus anything else you choose to include. The contact form also records the IP address the submission came from and a timestamp, which are used only to detect and block spam and abuse.
We use this to read your enquiry, reply to it, and — if it leads somewhere — to scope and discuss a possible engagement. Please do not send us sensitive information (health, ethnicity, political views, and similar “special category” data) through the form; we do not ask for it and do not need it.
3.2 Technical data when you browse
Our web host records standard server logs for every request: your IP address, the date and time, the page requested, the referring page, and your browser and device type (user-agent). These are used to keep the site available and secure, to investigate errors and abuse, and to produce aggregate traffic counts. They are not used to build a profile of you.
3.3 Spam and bot protection
The contact form is protected by Cloudflare Turnstile, a privacy-oriented alternative to CAPTCHA. To tell a person from a bot, Turnstile processes your IP address and signals about your browser session when you submit the form. It does not use tracking cookies and is not used for advertising. See Cloudflare's role in section 5.
3.4 Analytics
We use Cloudflare Web Analytics. It is a privacy-first, cookieless analytics tool that reports aggregate figures — page views, referrers, countries, browsers, load performance — without storing your IP address, without a persistent identifier, and without tracking you across other websites. We use it only to understand which pages are useful and where the site is slow, so we can improve it.
If we ever add analytics that use cookies or that identify individuals, we will update this policy and add a consent banner first.
4. Our lawful bases (GDPR / UK GDPR)
| Data | Purpose | Lawful basis |
|---|---|---|
| Contact-form and email content (name, email, subject, message) | Responding to your enquiry and taking steps toward a possible contract at your request | Art. 6(1)(b) (steps prior to a contract) and Art. 6(1)(f) (legitimate interest in handling enquiries) |
| Form IP address and timestamp; anti-spam checks; Turnstile | Preventing spam, abuse and fraudulent submissions | Art. 6(1)(f) (legitimate interest in protecting the site and our inbox) |
| Server access logs | Security, availability, diagnostics, aggregate traffic counts | Art. 6(1)(f) (legitimate interest in a secure, working site) |
| Cookieless analytics | Understanding site usage and performance in aggregate | Art. 6(1)(f) (legitimate interest); no cookie or device access is involved, so no consent is required under the ePrivacy rules |
| Becoming a client: contact and project records | Performing the engagement and meeting statutory record-keeping duties | Art. 6(1)(b) (contract) and Art. 6(1)(c) (legal obligation) for accounting and tax records |
Where we rely on legitimate interests, we have considered your rights and freedoms and concluded that the processing is limited, expected, and not overriding. You can object at any time — see section 8.
5. Who we share it with
We do not sell personal data and we do not share it for anyone else's marketing. We use a small number of service providers (“processors” / “Data Processors”) who handle data on our instructions to run the site and our email:
| Provider | What they do for us | Where |
|---|---|---|
| Namecheap, Inc. (Namecheap Hosting) | Website hosting and email mailboxes (the enquiry inbox and the store of submitted enquiries sit here) | United States |
| Cloudflare, Inc. | TLS certificate, Turnstile bot protection on the contact form, and cookieless web analytics | United States, with a global edge network |
| Google LLC (Google Fonts) | Serving web fonts on the home page and the “How We Work” page; receives your IP address when those fonts load | United States |
| Cloudflare (cdnjs) and unpkg | Serving the GSAP and AOS animation libraries used by most interior pages; receive your IP address when those scripts load | Global CDNs |
| Our professional advisers, and public authorities | Legal, accounting and insurance advice; disclosure where the law requires it | India / as applicable |
Note on fonts and scripts. We are moving all fonts and libraries to be served from our own domain, so that visiting a page does not send your IP address to Google or a public CDN. Until that is finished, the pages that still load those resources are the home page and “How We Work” (web fonts), and the About, Services, Contact and individual service pages (the GSAP and AOS animation libraries).
6. International transfers
Because our hosting and Cloudflare are US-based, personal data covered by the GDPR or UK GDPR may be transferred outside the EEA / UK. Where that happens, the transfer is covered by the Standard Contractual Clauses approved by the European Commission (and the UK Addendum / IDTA), together with each provider's own data processing terms and supplementary security measures. You can ask us for a copy of the relevant safeguards using the contact details in section 13.
7. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become a project | 24 months from our last contact, then deleted from the enquiry store and the mailbox |
| Enquiries that lead to an engagement | For the life of the engagement, then with client records for 8 years to meet Indian accounting and tax record-keeping requirements |
| Blocked-submission (spam) log | 90 days |
| Server access logs | Up to 30 days, then overwritten by the host |
| Anti-spam rate-limit records | About one hour (a rolling window; then automatically discarded) |
| Cookieless analytics | Aggregate only; retained for up to 6 months and never tied to an individual |
8. Your rights
Subject to the conditions and exceptions in the applicable law, you have the right to:
- be informed about how we use your data (this policy);
- access a copy of the personal data we hold about you;
- rectify data that is inaccurate or incomplete;
- erase your data (“right to be forgotten”) where we no longer need it;
- restrict or object to processing based on our legitimate interests;
- data portability — receive certain data in a machine-readable form;
- withdraw consent at any time, where we rely on consent;
- under India's DPDP Act, additionally to nominate another person to exercise your rights in the event of death or incapacity, and to have a grievance addressed.
To exercise any of these, email privacy@pawstrend.com. We will respond within 30 days (or sooner where the law requires), and we may ask you to confirm your identity first. There is no fee unless a request is manifestly unfounded or excessive.
9. How we protect it
- the whole site is served over HTTPS / TLS; the bare domain redirects to the secure
wwwhost; - enquiry email is sent over authenticated SMTP with the connection encrypted;
- the store of submitted enquiries is kept out of the public web area and is additionally blocked by server configuration;
- access to the inbox and the enquiry store is limited to the people who need it, on individual accounts;
- the contact form has server-side spam, rate-limiting and header-injection protections;
- we keep data only as long as section 7 allows, which limits what a breach could expose.
If a breach affects your rights, we will notify the relevant authority and, where required, you, within the timeframes set by the applicable law.
10. Cookies and tracking
This site sets no analytics, advertising or tracking cookies, and does not use browser local storage for tracking. The only cookies that may be set are strictly-necessary security cookies from Cloudflare when its bot protection challenges a request. Because there are no non-essential cookies, there is no consent banner. Full detail is in our Cookie Policy.
11. Children
This site and our services are aimed at businesses and are not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the site or the law changes. The version number and “last updated” date at the top show the current version. Material changes will be flagged on this page; where the law requires, we will contact you directly.
13. Contact and complaints
Questions, requests or complaints: privacy@pawstrend.com, or write to us at the registered office in section 1.
If you are not satisfied with our response, you can complain to a supervisory authority:
- India — the Data Protection Board of India (once operational), or the relevant authority under the IT Act;
- EU — the data protection authority in your country of residence or work;
- UK — the Information Commissioner's Office (ICO), ico.org.uk.
EU / UK representative. We have not appointed a representative under Article 27 of the GDPR or UK GDPR. We consider that the exemption in Article 27(2)(a) applies: our processing of personal data relating to individuals in the EU and UK is occasional, is limited to handling business enquiries and running a website, does not involve special category data or large-scale processing, and is unlikely to result in a risk to the rights and freedoms of individuals. We keep this assessment under review and will appoint a representative if our processing changes.
This Privacy Policy should be read together with our Cookie Policy and Terms of Service.