Privacy at Falfox

Clear choices. Careful handling.

This policy explains what personal data Falfox receives through this website and our business conversations, why we use it, who may help us process it, and how you can contact us about it.

Effective 12 August 2026Version 2.2

What we collect

Contact, business, project, communication, and limited technical information.

Why we use it

To respond, scope work, deliver services, maintain security, and meet obligations.

Your control

You may ask about, correct, or request deletion of personal data, subject to applicable law.

Privacy Policy

This public notice describes Falfox's general website and business-enquiry practices. A client agreement or product-specific notice may add more detail for a particular service.

Falfox ("Falfox", "we", "us", or "our") is a sole proprietorship registered as a micro enterprise under Udyam Registration Number UDYAM-TN-02-0273008. We operate remotely from Chennai, Tamil Nadu, India and aim to collect only the information needed for a clear business purpose.

1. Scope and our role

This policy applies when you visit falfox.com, submit a website enquiry, contact us by email, phone, WhatsApp, or social media, discuss a potential engagement, or otherwise provide personal data in connection with our business.

For our own website, enquiries, sales, and business administration, Falfox determines why and how personal data is used. When a client asks us to process data on its behalf during a project, the signed client agreement and any applicable data-processing terms govern that work.

Legal transition as at 11 August 2026: section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 remain relevant to applicable processing. The principal personal-data obligations in sections 3 to 17 of the Digital Personal Data Protection Act, 2023 and most operational rules are scheduled to commence on 13 May 2027. Falfox is preparing its notices, rights process, contracts, and security controls for that transition.

2. Personal data we receive

Information you provide

  • Identity and contact details, such as your name, business email, phone number, and preferred contact method.
  • Business details, such as organisation name, role, website, location, industry, and project budget or timing where you choose to share them.
  • Project and communication content, including requirements, files, messages, feedback, meeting notes, and support questions.
  • Commercial and administrative records needed for proposals, contracts, invoices, payments, and service delivery.
  • Job-application information if you apply for a role, such as your resume, portfolio, experience, and correspondence.

Information generated when you use the website

Our hosting and security services may receive limited technical information such as IP address, browser and device type, requested page, referring page, approximate time, and diagnostic or security logs. We use this information to operate, protect, and troubleshoot the website.

Please do not send passwords, financial or payment-card information, health information, biometric information, government identifiers, sexual-orientation information, or another person's confidential data through a general enquiry form. If a service genuinely requires sensitive personal data or information, Falfox will first identify the specific purpose, appropriate channel, authorised recipients, and additional safeguards.

3. Why we use personal data

Depending on the context, we use personal data to:

  • respond to an enquiry and communicate about your requested service;
  • understand requirements, prepare a proposal, and decide whether we can take on the work;
  • enter into, administer, and deliver a client or supplier agreement;
  • provide support, manage changes, maintain project records, and protect service quality;
  • send relevant business follow-ups that you can ask us to stop;
  • maintain website reliability, prevent misuse, investigate security events, and defend legal rights;
  • keep financial, tax, legal, and compliance records; and
  • review job applications and communicate with candidates.

We do not sell personal data as a standalone business activity. We do not use information submitted through a project enquiry to train a public AI model.

4. Cookies, browser storage, and external links

The public website is designed to work without advertising cookies. Falfox does not intentionally keep a copy of a contact-form message in browser local storage. Your browser may separately retain autofill, history, or other site information under settings that you control.

Essential hosting, security, or performance tools may use short-lived technical storage where needed to deliver and protect the site. If Falfox later introduces non-essential analytics or advertising technologies, this policy and any required choice mechanism will be updated before those technologies are used.

Links to WhatsApp, LinkedIn, Instagram, email, maps, payment providers, or other external services take you to platforms with their own privacy practices. Falfox does not control how those independent platforms process your data.

5. When information is shared

We may share only the information reasonably needed with service providers that support hosting, email, form delivery and automation, communication, cloud storage, project management, accounting, payments, security, or professional advice. For example, the contact form sends the submitted fields to Falfox's configured automation endpoint so the team can receive and manage the enquiry. These providers process information under their own terms or our instructions, depending on the service.

We may also disclose information when required by law, to respond to a lawful request, to protect people or systems from harm, to establish or defend legal claims, or as part of a genuine business reorganisation where appropriate safeguards apply.

Project information is not shared publicly unless the client has authorised a testimonial, case study, portfolio reference, or another form of publication.

6. How long we keep information

We keep personal data only as long as reasonably needed for the purpose described, a continuing business relationship, dispute handling, security, or a legal, tax, accounting, or contractual obligation. Retention therefore varies by record type.

Enquiries that do not become projects are periodically reviewed and deleted or minimised when they no longer support a reasonable follow-up, dispute, or security purpose. Contract, invoice, payment, tax, and project records are retained for the period required by applicable law, the signed agreement, or a documented legal need. Backup and security copies may remain for a limited period before they are overwritten through routine cycles.

7. Security and data location

Falfox's internal handling of website enquiries and business communications is coordinated from Chennai, Tamil Nadu, India. This does not mean every infrastructure or communication provider stores data in Chennai.

Falfox maintains reasonable administrative, technical, and organisational measures selected for the nature of the information and the service involved. Measures may include access controls, least-privilege permissions, authentication, secure service configuration, protected transmission, backups, logging, vendor review, staff practices, and incident response.

No website, transmission method, or storage system can be guaranteed completely secure. If you believe information connected with Falfox has been exposed or misused, contact us promptly using the details below.

If an incident affects your personal data, Falfox will investigate, contain, document, and provide notifications to affected people or authorities where applicable law requires. Some service providers may store or process information outside your state or country. Where sensitive personal data is transferred outside India, Falfox will require the same level of data protection and ensure the transfer is necessary for the relevant contract or supported by appropriate consent, as applicable.

8. Your choices and requests

Subject to applicable law and relevant exceptions, you may ask us to explain whether we hold personal data about you, provide access, correct inaccurate information, erase information no longer needed, withdraw consent where processing depends on consent, or address a grievance.

Send a request to falfox.business@gmail.com with the subject "Privacy request". Include your name, the email or phone number used with Falfox, the relevant interaction or project, and the request you want us to address. We may ask only for proportionate information needed to verify identity and prevent unauthorised access.

Falfox's privacy and grievance contact will acknowledge requests promptly and aims to resolve an applicable grievance no later than one month after receipt, subject to applicable law.

9. Children and third-party information

Falfox's public business website and agency services are not directed to anyone under 18. Do not submit a child's personal data through our general forms. If a project legitimately involves children's data or content, it must be discussed in advance and handled under a specific written scope with verifiable parental or lawful guardian consent and appropriate safeguards where required.

If you provide personal data about another person, you are responsible for having authority to share it and for giving that person any notice required by law.

10. Policy updates and contact

We may update this policy when our services, technology, vendors, or legal obligations change. The effective date at the top identifies the latest version. Material changes may also be highlighted on the website or communicated directly where appropriate.

Privacy and Grievance Contact: Aravind, Founder Falfox, a sole proprietorship Udyam Registration Number: UDYAM-TN-02-0273008 Remote business operating from Chennai, Tamil Nadu, India Email: falfox.business@gmail.com Phone: +91 93429 29599

Official references: the SPDI Rules, 2011, the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and the official commencement notification.