Privacy Policy

This Privacy Policy explains how [Onbew — registered legal entity name] (“Onbew”, “we”, “us”) collects, uses, shares, and protects your personal data when you visit onbew.com or submit our onboarding form. We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) for the data you provide to us, and as a Data Processor for any end-user data we handle on behalf of our clients.

1. Data we collect

When you fill in our project onboarding form, we collect the details you provide, which may include:

• Contact data: name, email address, phone number, country, city, and preferred contact method.
• Business & project data: business name, industry, website type, goals, pages and features, design preferences, domain/hosting status, and any notes or files you choose to upload.
• Technical data: IP address, browser/user-agent, and basic usage analytics (see “Cookies & analytics” below).

We practise data minimisation: we ask only for what we need to prepare an estimate and deliver your project. Please do not submit sensitive personal data (such as health, financial, or government-ID information) through the form.

2. What happens when you submit the form

When you submit the onboarding form, your answers are sent securely to our servers and a project reference is generated. Your submission may then be:

• logged and stored so our team can review and respond to your enquiry;
• emailed to our team as a notification, and an acknowledgement may be emailed to you;
• forwarded to our internal workflow automation to help us follow up;
• used to contact you about your project via your preferred channel.

We do not sell your personal data or use it for unrelated third-party advertising.

3. Purpose & lawful basis

We process your personal data on the basis of your consent(which you give by ticking the consent box and submitting the form) and to take steps at your request prior to entering into a contract. We use it to: respond to your enquiry, prepare estimates and proposals, deliver and support services you engage us for, and keep records required for tax and legal compliance.

4. Consent & withdrawal

Consent is sought at the point of collection through a clear, affirmative action. You may withdraw your consent at any time by emailing privacy@onbew.com. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal, and may mean we can no longer provide certain services.

5. Sharing & processors

We share data only with service providers who help us operate, under appropriate safeguards. These may include:

• Hosting & infrastructure (e.g. our website host and content delivery network);
• Transactional email providers to send confirmations and notifications;
• Analytics providers for privacy-aware usage measurement;
• Scheduling tools, if you book a consultation call;
• Payment gateways, for invoices and payments (we never store your card details).

We may also disclose data where required by law or to protect our legal rights.

6. Cookies & analytics

We use privacy-aware analytics to understand how the site is used and to improve it. Analytics load only where configured, IP addresses are anonymised where supported, and we honour your browser’s “Do Not Track” signal. You can also control cookies through your browser settings.

7. Data retention

We keep your personal data only for as long as necessary for the purposes above, or as required by law (for example, tax records). When data is no longer needed, we delete or anonymise it.

8. Your rights

Subject to the DPDP Act, you have the right to:

• access a summary of the personal data we hold about you;
• request correction, completion, or updating of your data;
• request erasure of your data;
• withdraw consent (as above);
• nominate another individual to exercise your rights in case of death or incapacity;
• grievance redressal (see below).

To exercise any right, email privacy@onbew.com. We will respond within the timelines required by applicable law.

9. Security

We apply reasonable technical and organisational measures — including encryption in transit (HTTPS), access controls, and secret management — to protect your data. No method of transmission or storage is completely secure, but we work to limit risk and the impact of any incident, and we will notify affected individuals and the Data Protection Board as required if a breach occurs.

10. Children

Our services are intended for businesses and adults. We do not knowingly collect personal data of children without verifiable parental consent as required by law.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the latest version, and material changes will be posted on this page.

12. Grievance & contact

For any questions, requests, or complaints about your personal data, contact our Grievance Officer:

• [Grievance Officer name]
• Email: privacy@onbew.com
• [Onbew — registered legal entity name], [Registered business address], Bengaluru, Karnataka, India