This policy explains what personal data Burrs Consultancy collects through this website, why, who handles it for us, how long we keep it, and the rights you have. We have written it to be read, not skimmed past.
Who we are
Burrs Consultancy, 32 Padmawati Colony, Indore (MP) 452001, India, is responsible for your personal data on this website (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, or "controller" under the GDPR). Contact us about anything in this policy atcontact@burrsconsultancy.com or +91 98264 76915.
What we collect
| When | What | Why |
|---|---|---|
| You send the enquiry form | Name, email address and your query; and, only if you give them, company, designation, industry, phone number, country, city and the service you are asking about. | To reply to you and discuss the work you asked about. The form also runs a Cloudflare security check, to stop automated spam. Basis: your request and our legitimate interest in answering it. |
| You email or call us | What you choose to tell us, and your contact details. | To reply and to run any work we agree. |
| You use the site with analytics on (see analytics and cookies) | Pages viewed, how you arrived, approximate location (city or country), device, browser and screen size, an identifier stored in a cookie, and whether you sent the enquiry form or tapped our phone number or email address (not what you wrote). | To see which pages are useful and improve the site. Basis: your consent, which you can withdraw at any time below. |
| Every visit | Technical request data (IP address, browser, time, page requested) handled by our hosting provider. | To deliver the site and protect it from abuse. Basis: legitimate interest in running a secure website. |
We do not sell your data, use it for advertising, or make automated decisions about you. We do not knowingly collect data from children.
Analytics and cookies
We use Google Analytics to understand how the site is used. How we ask depends on where you are:
- In the European Union, the EEA, the United Kingdom or Switzerland: analytics stays off unless you click Accept on the notice. We ask again after 12 months.
- Everywhere else: a notice tells you we use analytics, and by continuing to use the site you agree to it.
Wherever you are, you can turn analytics off here. It stops straight away, removes the analytics cookies from your browser, and stays off on this browser until you turn it back on. We work out your region from your connection when the page loads, and do not store it.
Analytics is on for this browser.
Browser settings and extensions that block cookies or tracking also work with this site.
| Name | Set by | Purpose | Kept for |
|---|---|---|---|
_ga, _ga_* | Google Analytics, only while analytics is on | Tell visits apart so pages can be counted | Up to 2 years in your browser |
__cf_bm and similar | Cloudflare, our hosting provider | Strictly necessary: tells people from bots and protects the site | Up to 30 minutes |
analytics-choice, analytics-notice, theme | This website, in your browser's local storage (not cookies) | Remember your analytics choice, that you have seen the notice, and your light or dark theme | Until you clear your browser data |
Our Google Analytics account keeps visit data for 2 months and user-level data for 14 months, with Google signals and all data sharing with Google switched off. Advertising features are never used.
Who handles your data for us
We use a small number of service providers, each bound to use the data only to provide their service to us:
- Cloudflare: hosts and protects this website.
- Google: Google Analytics, only while analytics is on.
- Hostinger: hosts our email, so it holds emails you send us and enquiries from the form.
- An email delivery service: passes enquiry-form messages to our inbox.
- Cloudflare Turnstile: checks that an enquiry comes from a person, not a bot. It looks at technical signals from your browser, not what you wrote.
- 99 MPH, which builds and looks after this website, receives a copy of each enquiry so it can make sure enquiries arrive.
We may also disclose data where the law requires it. Some providers process data outside India, including in the United States. Where they do, we rely on their contractual commitments to protect it.
How long we keep it
- Enquiries and emails: for as long as we need them to respond and to manage any work that follows, and then deleted.
- Analytics: 2 months for visit data and 14 months for user-level data, then deleted by Google automatically.
- Hosting request logs: kept by Cloudflare for a short period for security, under its own policy.
Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- delete it, where we no longer need it or you withdraw consent;
- stop or restrict using it, or object to how we use it;
- give you a copy in a portable format;
- withdraw consent to analytics at any time, using the switch above;
- in India, nominate someone to exercise these rights for you in the event of death or incapacity.
Write to contact@burrsconsultancy.com. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India, or, if you are in the EU or UK, to your local data protection authority.
Security
The site is served over an encrypted connection (HTTPS), has no login or database, and stores nothing you type on the website itself: an enquiry goes straight to our inbox.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top.