Privacy Policy | D&C Studios

The short version

You can read everything on this website without telling us who you are. If you send us a project brief, we use what you write to reply to you, and for nothing else. We keep briefs for 24 months, we never sell personal data, and we do not send newsletters unless you ask for them.

Analytics run only if you say yes in the cookie banner. The cookie policy explains that choice and how to change it.

Who we are

This website is run by Desicode Infosolutions LLP (LLPIN AAP-2577), a limited liability partnership registered in Mumbai, Maharashtra, India. D&C Studios is its design and engineering studio.

For the information described here, we decide why and how it is used. Under India’s Digital Personal Data Protection Act, 2023 that makes us a Data Fiduciary. Under the GDPR and the UK GDPR the equivalent term is controller. In both cases it means the same thing in practice: we are responsible for looking after your data and for answering your questions about it.

Email: connect@designandcode.tech
Phone and WhatsApp: +91 99870 04296
Post: Desicode Infosolutions LLP, Mumbai, Maharashtra, India

The brief on our conversations page asks five short sets of questions. Here is each one and why we ask it.

What we ask	Required?	Why we ask
What you would like help with	Yes	To send your brief to the partner who leads that kind of work
Your budget range	Yes	To suggest a scope that fits, or tell you honestly if it does not
When you would like to start	Yes	To check that we have the right people free at the right time
Project details, including any links	Yes	To understand the problem before we speak
Your name	Yes	To know what to call you
Your email address	Yes	To reply, and to send you an automatic confirmation with your reference
Phone or WhatsApp number	Only if you choose WhatsApp or a call	To contact you the way you prefer
Company or organisation	No	To understand your context
Country	No	To plan around your time zone and quote in a sensible currency
Best way to reach you	Yes, with email as the default	To respect your preference
How you heard about us	No	To learn which channels bring us the right conversations

Please do not include passwords, payment card details, government identity numbers, health information or anything else highly sensitive. A first conversation never needs them.

What is recorded automatically when you send a brief

To protect the form from spam and abuse, the server also records:

a reference number, which is also shown to you, and the date and time the brief arrived;
whether your browser ran JavaScript, which helps us fix problems with the form;
a shortened, one-way scrambled version of your IP address (a salted hash), never the address itself, so we can limit repeated submissions from the same connection;
your browser’s user agent string, which describes the browser and device type.

The form also contains hidden fields that people never see. If an automated program fills them in, the submission is quietly discarded.

Information collected when you browse

Server logs

Like almost every website, ours is served by a hosting provider whose systems keep short technical logs: the IP address that made a request, the page requested, the browser type, the time, and any errors. These logs exist to deliver and protect the site and to troubleshoot faults. We do not use them to identify visitors or build profiles.

If you choose Allow analytics in the cookie banner, the site loads Google Analytics 4. It tells us, in aggregate, which pages people read, how they arrived and roughly where in the world they are. If you choose No thanks, or simply ignore the banner, analytics never load. Details are in the cookie policy.

Your answer to the banner is remembered in your own browser’s local storage under the name dnc-consent. It never leaves your device and we cannot see it.

How we use your information

We use the details in your brief to:

read your brief and reply, usually within one working day;
arrange a call, ask follow up questions or prepare a proposal;
keep a sensible record of our correspondence with you;
protect the site and the form from spam, fraud and abuse;
meet our legal, tax and accounting obligations if we go on to work together.

Sending a brief does not sign you up to marketing. We will only send you news or updates if you ask for them, and every message of that kind will tell you how to stop it.

We do not sell personal data, rent it, or use it to make automated decisions about you.

The legal basis for using your information

Under India’s Digital Personal Data Protection Act, 2023

When you send us a brief, you give us your details voluntarily for a clear purpose: to hear back about your project. The Act recognises this as a legitimate use, and we use the details only for that purpose unless you tell us otherwise. For analytics, we rely on your consent, which you give or refuse in the cookie banner and can withdraw at any time.

If you are in the European Union or the United Kingdom, we rely on:

steps you ask us to take before a possible contract, for replying to your brief and preparing a proposal;
our legitimate interests in running a secure website and keeping spam out, which we balance against your rights by storing only a scrambled version of your IP address;
your consent, for analytics cookies;
legal obligation, for records we must keep once we work together.

Where your information is stored

When you send a brief, two things happen at once.

A copy is saved on our web server, in a private folder that sits outside the public part of the site. Nothing in that folder can be reached through a web address. It is our backup, so that a brief is never lost if email fails.
The brief is emailed to the studio through our own mail server using SMTP over an encrypted connection, and you receive an automatic confirmation by email. From then on it is held in our business mailbox.

The passwords and settings that make this work are also kept outside the public web folder.

We are based in India, so if you write to us from another country, your details travel to India. Our hosting, email and analytics providers may store or process data in India or in other countries where they operate. Where a provider moves data between countries, we rely on the safeguards it offers, such as standard contractual clauses.

How long we keep it

Project briefs, the emails that carry them and the related security records: 24 months from the day we receive them. After that we delete them.
If we start working together: your contact details and our correspondence become part of the project record, which we keep for as long as the contract and Indian law require, for example for tax and accounting.
Server logs: a short period set by our hosting provider, used only for security and troubleshooting.
Analytics data: held by Google in aggregate, on the retention period we set in Google Analytics, which is no longer than 14 months.

You can ask us to delete your brief sooner at any time.

We share information only with the service providers that help us run the studio, and only as much as each one needs:

our web hosting provider, which stores the site and the private brief folder;
our email provider, which carries and stores our mail;
Google, for analytics, only if you have allowed it;
Cloudflare, if we switch on its Turnstile check to tell people from automated programs, which processes technical details about your browser and connection for that purpose alone;
professional advisers, such as accountants and lawyers, under a duty of confidentiality.

We may also disclose information if the law requires it, or to protect our rights, our systems or the safety of others. We never pass your brief to another agency, a lead broker or anyone who wants to sell to you.

Services you choose to use

Some links on the site open other services. If you tap WhatsApp, the chat is handled by WhatsApp and Meta under their own terms. If you email us, your email provider handles the message on its way to us. If we offer a calendar link for booking a call, the booking service handles what you enter there. Each of these has its own privacy policy, and we encourage you to read it.

Your rights

If you are in India

Under the Digital Personal Data Protection Act, 2023 and the rules made under it, you can:

ask for a summary of the personal data we hold about you and how we use it;
ask us to correct, complete, update or erase it;
withdraw any consent you have given, as easily as you gave it;
raise a grievance with us and receive a response;
nominate someone to exercise these rights for you if you die or become unable to act.

If you are not satisfied with how we handle a grievance, you may complain to the Data Protection Board of India.

If you are in the European Union or the United Kingdom

You have the right to access your data, correct it, erase it, restrict how we use it, object to our use of it, receive it in a portable format, and withdraw consent at any time without affecting what happened before. You also have the right to complain to your local data protection authority. In the United Kingdom that is the Information Commissioner’s Office.

How to make a request

Write to connect@designandcode.tech with Privacy in the subject line. A designated partner handles every privacy request and grievance personally. We will reply within one working day to confirm we have it, and aim to complete the request within 30 days. If we need to confirm your identity first, we will ask for the minimum necessary. If a request is complex, we will explain why and tell you how long it will take, within the limits the law allows.

Children

This website and our services are meant for businesses, organisations and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us a brief, tell us and we will delete it.

Keeping your information safe

The whole site is served over HTTPS. Briefs are stored outside the public web folder, IP addresses are kept only in scrambled form, the form limits repeated submissions, and access to briefs and the studio mailbox is limited to the partners and team members who need it to reply. No website can promise perfect security, but we build this one the way we build for our clients: expecting things to go wrong and planning for it.

If we ever discover a breach that affects your personal data, we will tell you and the relevant authorities as the law requires.

Changes to this policy

We will update this page when the website, the way we handle data or the law changes. The date at the top will always show the latest version. If a change is significant, we will say so clearly on the site.

Contact

Desicode Infosolutions LLP, operating the D&C Studios brand
Mumbai, Maharashtra, India
Email: connect@designandcode.tech
Phone and WhatsApp: +91 99870 04296

D&C Studios is the design and engineering studio of Desicode Infosolutions LLP (LLPIN AAP-2577), Mumbai, India.