Privacy Policy

This Website is the personal professional website of Sumit Baidya , an independent software developer, technology consultant and digital professional based in West Bengal, India.

The Website may provide information relating to:

Services may be provided to clients located in India and other jurisdictions.

The Website may use cookies, local storage, pixels, tags, scripts or similar technologies.

These technologies may be used for:

• Essential website functionality
• Security
• Remembering preferences
• Website analytics
• Performance monitoring
• Understanding visitor behaviour
• Improving user experience
• Advertising or measurement where applicable

You may be able to control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of the Website.

The Website currently uses Google Analytics to understand website traffic, visitor behaviour and website performance.

Google Analytics may collect technical and usage information such as device information, browser information, approximate location, pages visited, traffic sources and interaction data.

Analytics information is used to understand how visitors use the Website and to improve its content, functionality, performance and user experience.

Google may process information according to its own applicable privacy policy and terms.

The Website may display advertisements through Google AdSense or other third-party advertising services.

If advertising is enabled, third-party advertising providers may use cookies or similar technologies to serve, measure, personalize or otherwise manage advertisements, subject to their applicable policies and user choices.

Advertising-related information may include:

• Cookie identifiers
• Device information
• Browser information
• Approximate location
• Website interaction information
• Advertising-related information

Personal information may be used for legitimate website and business purposes, including:

• Responding to enquiries
• Communicating with visitors and prospective clients
• Understanding project requirements
• Preparing quotations or proposals
• Providing requested services
• Managing client relationships
• Providing technical support
• Maintaining and improving the Website
• Improving website security
• Preventing abuse, fraud, spam or unauthorized activity
• Analysing website traffic and performance
• Improving content, tools and services
• Sending service-related communications
• Sending marketing communications where legally permitted
• Complying with applicable legal obligations
• Protecting legal rights and legitimate interests
• Establishing, exercising or defending legal claims

We will not knowingly collect or process more personal information than reasonably necessary for the relevant purpose.

Where applicable under Indian data protection law or other applicable laws, personal data may be processed based on:

• Your consent
• Your request for services or information
• Performance of an agreement or requested pre-contractual steps
• Compliance with applicable legal obligations
• Legitimate purposes permitted by applicable law
• Prevention, detection or investigation of unlawful activity
• Protection of legal rights and security

Where processing is based on consent, you may withdraw your consent where permitted by applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

If you submit information through a contact or enquiry form, the information may be used to:

• Respond to your enquiry
• Contact you regarding your request
• Understand your project requirements
• Prepare a proposal or quotation
• Discuss potential services
• Provide requested information

Submitting an enquiry does not automatically create a client relationship, contractual relationship, partnership, agency relationship, employment relationship, or other legal relationship.

A contractual relationship will exist only where the applicable parties expressly agree through an appropriate written agreement, proposal, order, statement of work, or other legally valid arrangement.

If you become a client, additional information may be collected or processed as reasonably necessary to provide the agreed services.

This may include:

• Business information
• Contact information
• Website credentials
• Technical documentation
• Project files
• Database-related information
• API information
• Development requirements
• Third-party service information

Clients are responsible for ensuring that they have the necessary rights, permissions, consents and lawful authority to provide information to me for processing in connection with their project.

Clients should not provide unnecessary personal information belonging to third parties.

Where appropriate, project-specific agreements, confidentiality agreements, data-processing arrangements or other contractual documents may contain additional provisions governing project information.

The Website and services may rely on third-party providers for infrastructure, hosting, analytics, communications, security, payments, email, forms, advertising, development tools, cloud services or other technical functions.

Examples may include:

• Hosting providers
• Domain providers
• Cloud infrastructure providers
• Email providers
• Analytics providers
• Advertising providers
• Payment processors
• Security and CDN providers
• Form and communication services
• Software and development platforms

Such third parties may process information according to their own terms and privacy policies.

Where reasonably necessary, information may be shared with service providers to operate the Website or provide requested services.

I do not sell your personal information as a business practice.

Personal information may nevertheless be disclosed where reasonably necessary to:

• Provide requested services
• Operate the Website
• Work with authorized service providers
• Maintain website security
• Prevent fraud or abuse
• Comply with legal obligations
• Respond to lawful requests from competent authorities
• Establish, exercise or defend legal rights
• Protect safety, security or property
• Facilitate a business transfer, merger or restructuring

Information may also be disclosed where you have specifically authorized such disclosure.

Some third-party service providers used by the Website or for client projects may operate outside India.

As a result, information may be processed or stored in jurisdictions other than the jurisdiction in which you reside.

Where such transfers occur, reasonable steps will be taken to use appropriate service providers and applicable contractual, technical or organizational safeguards, subject to applicable law.

Reasonable technical and organizational measures may be used to protect personal information against unauthorized access, misuse, alteration, disclosure, loss or destruction.

Security measures may include, where appropriate:

• HTTPS/TLS encryption
• Access controls
• Authentication controls
• Secure hosting
• Security monitoring
• Software updates
• Backups
• Firewall or CDN protection
• Limited access to confidential information

Personal information will generally be retained only for as long as reasonably necessary for the purpose for which it was collected, for providing services, maintaining appropriate business records, resolving disputes, enforcing agreements, preventing fraud, maintaining security, or complying with applicable legal obligations.

The appropriate retention period may vary depending on:

• The type of information
• The purpose of processing
• The nature of the relationship
• Legal and regulatory requirements
• Accounting or tax requirements
• Security requirements
• The existence of disputes or legal claims

When information is no longer reasonably required, it may be deleted, anonymized, archived, or otherwise disposed of in accordance with applicable requirements and practical limitations.

Subject to applicable law, you may have rights relating to your personal information, which may include:

• Requesting information about processing
• Requesting correction of inaccurate information
• Requesting completion or updating of information
• Requesting deletion or erasure where legally applicable
• Withdrawing consent where consent is the applicable basis
• Raising a privacy-related grievance
• Requesting information regarding the handling of personal data

Requests may be subject to identity verification and applicable legal limitations.

If you have a privacy-related question, concern or grievance, you may first contact me using the details below.

Please provide sufficient information to allow the issue to be understood and investigated.

This Website is not intentionally directed toward children.

I do not knowingly request or intentionally collect personal information from children for purposes prohibited by applicable law.

If you believe that a child has provided personal information through the Website without appropriate authorization, please contact me so that appropriate action can be considered.

The Website may contain links to third-party websites, services, social-media platforms, software providers, documentation, advertisements, or other external resources.

I do not control those third-party websites or their privacy practices.

Once you leave this Website, the privacy policy and terms of the relevant third party may apply.

You should review the privacy policy of any external website before providing personal information.

The Website may contain links or integrations to social-media platforms such as LinkedIn, Facebook, Instagram, YouTube or other platforms.

Interaction with those platforms may result in the relevant platform collecting information according to its own privacy policy and terms.

I do not control the personal data practices of those platforms.

The Website may provide free or paid tools, calculators, generators, converters, utilities, downloads or other resources.

Where a tool operates entirely within the user's browser, information entered into that tool may be processed locally where technically designed to do so.

However, certain tools may require server-side processing, analytics, logging, storage or third-party services.

Articles, tutorials, guides, tools, code examples, technical explanations and other materials published on this Website are provided for general informational and educational purposes.

Such content does not constitute:

• Legal advice
• Financial advice
• Investment advice
• Tax advice
• Accounting advice
• Cybersecurity certification
• Professional advice from a regulated professional

You should obtain appropriate professional advice before making decisions that require regulated or specialized professional judgment.

This Privacy Policy may be updated from time to time to reflect changes to the Website, services, technology, third-party services, applicable laws or data-processing practices.

The updated version will be published on this page with a revised Last Updated date.

Your continued use of the Website after an updated Privacy Policy is published will be subject to the updated policy to the extent permitted by applicable law.

Although reasonable measures may be implemented to protect information, no method of transmission or electronic storage is completely secure.

Accordingly, I do not guarantee that personal information will always remain completely secure against every possible security incident, unauthorized access, cyberattack, technical failure or other event beyond reasonable control.

Nothing in this Privacy Policy excludes or limits any liability that cannot lawfully be excluded or limited under applicable law.

This Privacy Policy applies primarily to information collected through www.sumitbaidya.com and related interactions under my control.

It does not automatically apply to:

• Third-party websites
• Third-party applications
• External hosting accounts
• Client-owned websites
• Client-owned databases
• Third-party platforms
• Services independently controlled by clients
• Websites or applications developed for clients

Where I develop software or websites for a client, the client may determine the purposes and means for which personal information is collected and processed through that client-owned system.

In such cases, the client's own privacy policy, contractual terms and applicable data-protection obligations may apply to users of that client system.

Where I provide website or software development services to a client, my role may be limited to designing, developing, configuring, deploying or technically maintaining software according to the agreed project scope.

Unless expressly agreed otherwise in writing, I do not determine the client's business purposes for collecting or using personal information through the client's website, application, database or software.

Clients are responsible for determining their own lawful data-collection practices, privacy notices, user consents, retention requirements and regulatory obligations.

Where appropriate, separate contractual terms may define the respective responsibilities of the client and developer.