Who we are and where this policy applies
TRTL MEDIA is a digital studio based in Maharashtra, India that designs websites for property and design brands, working with clients in India and internationally. This policy applies to everyone who visits this website or contacts us, wherever they are in the world.
TRTL MEDIA decides how personal data collected through this website is used. That makes us the “controller” under the GDPR and UK GDPR and the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). When we handle personal data for a client while building their site, we act as that client’s processor, as described in our Terms of Use.
We aim to respect the laws that apply to this website, including India’s Information Technology Act, 2000 and DPDP Act, the GDPR and UK GDPR for people in the EEA and UK, and privacy laws of US states such as California where they apply.
What we collect
Information you give us through the enquiry form or by email:
- name and email address;
- phone or WhatsApp number (optional);
- the service you are interested in and your approximate budget (optional);
- if you apply for our founding-client offer: your business name, current website address, type of business, and the details you share about your project;
- the message you write and anything else you choose to share.
Technical information. When your browser loads this website and the third-party resources it uses (see section 5), those providers may receive your IP address, device and browser details.
ROI Lab. The numbers you enter into the ROI Lab are calculated inside your browser. We do not receive or store them.
How we use it
- to read and reply to your enquiry or founding-client application;
- to prepare scope, timelines and quotes, and to deliver services you request;
- if you become a founding client and agree to it, to publish your testimonial and show your finished website as a case study;
- to keep business records and meet legal, tax and accounting obligations;
- to keep the website secure and working properly.
We do not sell your personal data and we do not use it for third-party advertising.
Legal bases and consent
We process personal data only where we have a lawful reason to:
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Reply to your enquiry and prepare a quote | Your consent, and steps taken at your request before a contract |
| Deliver services you have engaged us for | Performance of a contract |
| Keep business, tax and accounting records | Legal obligation |
| Keep the website secure and run our business | Our legitimate interests, balanced against your rights |
Under the DPDP Act, our basis is the consent you give by submitting the enquiry form and accepting this policy. You can withdraw consent at any time by emailing us. Withdrawal does not affect use that happened before it, and we may keep information the law requires us to hold.
Who we share it with
We use a small number of service providers to run this website. They process data only as needed to provide their service:
| Provider | Purpose | Data involved |
|---|---|---|
| Web3Forms | Delivers enquiry-form submissions to our inbox | Form contents, IP address |
| Google (Gmail) | Receives and stores our email | Messages you send us |
| Google Fonts | Delivers the website typeface | IP address, browser details |
| Cloudflare (cdnjs) | Delivers website scripts | IP address, browser details |
| jsDelivr | Delivers website scripts | IP address, browser details |
| Unsplash | Delivers sample photographs | IP address, browser details |
| Website hosting provider | Serves the website | IP address, server logs |
We may also disclose information where required by law or to protect our legal rights. Some providers may process data outside India. If you choose to message us on WhatsApp, WhatsApp’s own privacy policy applies to that conversation.
International transfers
We are based in India, so information you send us is processed in India. Our service providers may process data in India, the United States, the European Union and other countries.
Where the law of your region restricts transfers, we rely on safeguards the law recognises, such as standard contractual clauses with providers, or on your explicit and informed consent when you submit the enquiry form. We do not sell personal data.
Data breaches
If a personal data breach is likely to affect you, we will tell you and the relevant authorities as the law requires.
Cookies and tracking
This website does not currently use advertising cookies or analytics tools, and we do not sell or share personal information for cross-context behavioural advertising. If we add analytics or similar technology in future, we will update this policy and, where required, ask for your consent first. If your browser sends a Global Privacy Control signal, we treat it as an opt-out request.
How long we keep it
We keep enquiry details only as long as needed to respond, to carry out a project and to meet legal and accounting requirements. After that we delete or anonymise them. You can ask us to delete your enquiry sooner.
Security
We use reasonable safeguards, including access controls on our email and accounts and encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your rights
Wherever you live, you may ask us to confirm whether we hold your personal data and give you a copy, correct inaccurate data, delete data we no longer need, and withdraw your consent.
EEA and UK. You may also ask us to restrict or stop certain processing, object to processing based on legitimate interests, and receive your data in a portable format. You may complain to your local supervisory authority, such as your national data protection authority or the UK Information Commissioner’s Office.
India. You have the rights given by the DPDP Act, including nominating another person to act for you, and you may raise a grievance with us first. The Data Protection Board of India has been established, and the Act’s main rights provisions are being brought into force in stages. We apply these rights now as good practice.
California and other US states. Where the law applies to us, you may ask to know what personal information we collect, delete it, or correct it, and we will not treat you unfairly for doing so. In the past 12 months we collected identifiers (name, email, phone), commercial information (the service you want and your budget) and the content of your message. We disclosed it only to the service providers above for business purposes, and we did not sell or share it.
How to ask. Email us with the subject “Privacy request”. We may need to verify your identity. We aim to respond within 30 days and always within the period the law requires.
Children
This website is aimed at businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has sent us information, tell us and we will delete it.
External links
This website links to external sites such as Instagram and GitHub. We are not responsible for their content or privacy practices.
Changes to this policy
We may update this policy as our website, services or the law change. The current version is always on this page with its “last updated” date, and we will take further steps to inform you where the law requires.
Contact and grievances
TRTL MEDIA, Maharashtra, India
Privacy and data requests: hello.trtlmedia@gmail.com (subject: “Privacy request”)
See also our Terms of Use.