Privacy Policy

Novier Studio is a web and app design and development studio based in India. For the data described here, we decide how and why it is processed (we are the “data fiduciary” under Indian law). When we handle data on a client’s behalf, the client is in control of it; see Client data we handle below.

We only collect what we need to reply to you and to run a project.

• Contact form: your name, email address, and optionally your company, phone number, the service you need, budget, timeline and project details.
• Emails and messages: anything you send us by email or WhatsApp, including attachments.
• Client projects: the contact details of your team, and any content, files, account access or data you share with us to deliver the work.
• Payments: the name and details on invoices and payment confirmations. We do not see or store your card details.
• Technical data: our hosting provider automatically processes your IP address, browser type and the pages requested, to deliver the site and keep it secure.
• Enquiry source: if you send the contact form, it includes the campaign tags on the link you arrived by (such as utm_source), the first page you visited and the site that referred you, so we know which of our posts or ads brought you.

Usage data, only if you accept analytics cookies: Google Analytics records the pages you view, how you found the site (including campaign tags such as utm_source), your device and browser, and your approximate location. We do not use advertising tools, and we do not build profiles of individual visitors.

• To reply to your enquiry and prepare a proposal.
• To plan, deliver and support a project you have engaged us for.
• To send invoices and keep the accounting records the law requires.
• To keep the website secure and working.

We process your data because you have given consent (for example, by submitting the contact form), to take steps towards or perform a contract with you, or to meet a legal obligation. We never sell your data or use it for marketing without your consent.

We share personal data only with the service providers we need to run the studio, and only as much as each one needs:

• Website hosting (Vercel), which serves the site and processes technical request data.
• Our email provider, which delivers contact-form messages and our email.
• Analytics (Google Analytics), only if you accept analytics cookies. Google receives the usage data above; it does not store your IP address. We have turned off advertising features and data sharing for ads.
• Booking (Cal.com), if you choose to book a call; their own privacy policy applies.
• Icon delivery (thesvg.org), which serves the social icons in the footer and receives standard request data such as your IP address.
• Banks and payment services that process your payments.

Some of these providers store data outside India. Where data is transferred abroad, we rely on our providers’ Standard Contractual Clauses and security commitments. We may also disclose data where the law requires it.

• Enquiries that do not become a project are deleted 12 months after our last contact.
• Analytics data is deleted automatically by Google Analytics after 14 months.
• Project records, contracts and invoices are kept for as long as Indian tax and accounting law requires.
• Project files, data and access you shared are returned or deleted within 30 days of handover.

• The site is served only over HTTPS.
• Access to enquiries and project data is limited to the people working on your project.
• Our access to client accounts is removed at handover, or sooner on request.
• We ask clients never to send passwords through the contact form.

No system is perfectly secure. If a breach affects your personal data, we will tell you within 72 hours of becoming aware of it, along with any authority the law requires us to inform.

Under the DPDP Act you can:

• Ask what personal data we hold about you and how it is used.
• Ask us to correct, complete or update it.
• Ask us to erase it, unless we must keep it by law.
• Withdraw your consent at any time. This does not affect processing already done.
• Nominate someone to exercise these rights for you if you are unable to.
• Raise a grievance with us, and then with the Data Protection Board of India if you are not satisfied.

If you live outside India, you may have further rights under your local law. We will honour them where they apply.

To use any of these rights, email hey@novier.in. We may ask you to confirm your identity, and we reply within 30 days.

Some projects involve our clients’ own customer data, such as user accounts, orders or form submissions. For that data the client is in control, and we act only on their instructions:

• We sign a Data Processing Agreement on request.
• We use test or anonymised data during development wherever possible, and real data only when the work requires it.
• Client data stays in tools and accounts the client owns and chooses; we do not copy it into our own systems.
• We return or delete client data within 30 days of handover, except records the law requires us to keep.
• We notify the client within 72 hours of becoming aware of a breach affecting their data.

If you are a customer of one of our clients, please contact that business directly about your data.

Our contact for privacy questions and grievances is reachable at hey@novier.in. We acknowledge grievances within 48 hours and aim to resolve them within 30 days.

This site and our services are meant for businesses and adults. We do not knowingly collect data from anyone under 18. If you think a child has sent us their data, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. Significant changes will be highlighted on the site.

Questions about this page can be sent to hey@novier.in. We reply within one business day, Monday to Friday.