Legal
Privacy Policy
Last updated 15 August 2026
This policy explains what personal data coldmath collects, why we collect it, where it is stored, and what you can ask us to do with it. It is written to be read, not to be survived.
coldmath builds and manages websites and Google Business Profiles for local businesses in India. We are the data fiduciary for the information described below, under the Digital Personal Data Protection Act, 2023.
1. What we collect
When you fill in the enquiry form
Our get-started form asks ten questions. We store exactly the answers you give:
| Field | Why we ask |
|---|---|
| Your name | So we know who we are speaking to |
| Business name | To look up your current website and Google listing |
| Phone number | To contact you on WhatsApp, as promised on the form |
| Email address | To send your free website report |
| Type of business | To prepare a relevant report |
| Your biggest problem right now | To prepare a relevant report |
| Whether you have a website today | To prepare a relevant report |
| Number of staff | To judge which service tier fits |
| Approximate monthly customers | To judge which service tier fits |
| Whether you are the owner | To know who can approve work |
We do not ask for, and you should never send us, financial account details, government identity numbers, or passwords.
When you use the client dashboard
If you are an existing client, signing in sets a session cookie so the dashboard knows it is you. It is required for the dashboard to work and is not used for advertising or tracking.
When you simply visit the site
Our host, Cloudflare, records standard request information such as IP address, browser type and page requested, for security and aggregate traffic counts. We do not run advertising trackers or third-party analytics cookies on this website.
2. Where your data is stored
Enquiry form submissions are stored in a Supabase Postgres database. That database is hosted in Tokyo, Japan. Your personal data therefore leaves India. The DPDP Act permits this except to countries the Government of India has restricted; Japan is not restricted at the time of writing.
We also copy enquiry submissions into HubSpot, our customer relationship tool, which stores data outside India.
If you would prefer your data not be transferred outside India, tell us at [email protected] before submitting the form, and contact us by email instead.
3. Who else can see it
We do not sell your personal data, and we do not share it for anyone else's marketing. It is handled by:
- coldmath staff — to respond to your enquiry and deliver work you have asked for.
- Supabase — database hosting.
- HubSpot — customer relationship management.
- Cloudflare — website hosting, security and aggregate traffic statistics.
We may also disclose data where the law requires it.
4. How long we keep it
- Enquiries that do not become clients: up to 24 months, then deleted.
- Client records: for the duration of our engagement, and afterwards for as long as tax and company law requires us to keep business records.
- If you ask us to delete your data: we act on it as described below, keeping only what the law obliges us to retain.
5. Your rights
Under the DPDP Act you can ask us to:
- Show you the personal data we hold about you, and who we have shared it with.
- Correct anything inaccurate, incomplete or out of date.
- Erase your personal data, where we are not legally required to keep it.
- Withdraw consent you previously gave. This is as easy to do as it was to give.
- Nominate another person to exercise these rights if you die or become incapacitated.
- Complain to us, and if we do not resolve it, to the Data Protection Board of India.
Email [email protected] and we will respond within 30 days. There is no charge.
6. Grievance officer
Questions and complaints about how we handle personal data go to our grievance officer at [email protected], with “Data grievance” in the subject line.
7. Children
Our services are for businesses. We do not knowingly collect personal data of anyone under 18. If you believe a child's data has reached us, tell us and we will delete it.
8. Security
Access to the enquiry database is restricted by database-level rules: the public website can submit a form, but cannot read any submission back. Traffic to this site is encrypted. No system is perfectly secure, and we will tell affected people and the Data Protection Board if a breach occurs, as the law requires.
9. Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Material changes affecting existing clients will be sent by email.
10. Contact
coldmath · Tirunelveli, Tamil Nadu, India
[email protected]