Privacy policy

This policy explains what personal data Deep Thought Consultech ("we", "us") collects through deepthoughtconsultech.com, why we collect it, and what rights you have over it. We are the data controller for that information.

The short version

We do not use advertising trackers, we do not sell or share your data with third parties for their own purposes, and we set no cookies at all. Our analytics are our own, run on our own infrastructure, and count pages rather than people — which is why you were not asked to dismiss a cookie banner. The only personal data we hold from this site is what you deliberately send us through the contact form or the AI assistant, and we use it solely to reply to you.

What we collect

Contact form

When you submit the contact form we receive the name, email address, organisation, selected topic and message you entered. All of it is optional in the sense that you choose whether to contact us at all; name, email and message are required for us to be able to reply.

AI assistant

If you use the "Scope your project" assistant, the messages you type are processed to generate a reply and are then sent to us by email so we can follow up. Please do not enter confidential information, credentials, or personal data about other people into the assistant. Message content is passed to our language-model provider solely to produce the response; it is not used to train third-party models.

Technical data

Our hosting and API infrastructure records standard server logs — including IP address, timestamp, requested URL and user agent — as a necessary part of serving the site and protecting it from abuse and automated spam. These logs are retained for a short period and are not used to build a profile of you.

Analytics

We measure how the site is used, with a system we built and run inside our own infrastructure. There is no Google Analytics and no third-party analytics vendor; no visitor data is sent to anyone else.

For each page view we record the page path, the host of the site that linked you here (so google.com, never the search terms in the address), a rough viewport size so we know whether to prioritise mobile layouts, and a country code. These are added to daily totals and the individual reading is discarded. No record anywhere describes an individual visit — there are no sessions, no journeys and no profile of you.

To count how many different people visited on a given day without identifying anyone, your IP address and browser are combined with a secret value and with today's date, then irreversibly hashed. The IP address itself is never written down. Because the date forms part of the hash, the same person produces a completely different value tomorrow, so we cannot recognise a returning visitor or follow anyone across days — not as a matter of policy, but because the information to do it does not exist.

If your browser sends a Do Not Track or Global Privacy Control signal, we record nothing at all.

Because these counts are page totals rather than personal data, and contain no individual record that could be identified or deleted, they are kept indefinitely.

Cookies

This site sets no cookies — none for analytics, advertising or anything else — and uses no third-party advertising or social media tracking. That is why there is no cookie consent banner: there is nothing to consent to. Fonts and icons are served from our own domain rather than a third-party CDN, so loading a page does not disclose your visit to any other company.

Why we are allowed to hold it

Where you contact us, we process your data on the basis of your explicit request — taking steps at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries. Server logging rests on our legitimate interest in operating a secure and available service.

How long we keep it

Enquiries are retained for as long as needed to respond and to maintain a record of the commercial relationship, and are reviewed periodically. Server logs are retained on a short rolling basis. You can ask us to delete your enquiry at any time.

Who else sees it

We use a small number of infrastructure providers to operate the site: a cloud hosting and email provider for the site, the contact form and enquiry delivery, and a language-model provider for the AI assistant. They process data on our instructions only. We do not sell personal data, and we do not share it with advertisers or data brokers.

International transfers

We are based in Mumbai, India, and work with clients internationally. Data you send us may be processed in other jurisdictions, including within the European Union and the United States, depending on the region our infrastructure providers operate in. Where required, we rely on appropriate safeguards for such transfers.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to our processing of it, and to receive a copy in a portable format. To exercise any of these, email deepthoughtconsultech@gmail.com and we will respond within one month. If you are in the EU, UK or another region with a data protection authority, you also have the right to complain to that authority.

Security

The site is served over HTTPS. Enquiry data is transmitted over encrypted connections and access to it is limited to the people who need it in order to respond to you. No system is perfectly secure, but we design for data minimisation — we do not collect what we do not need.

Children

This is a business-to-business site and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes

If we change this policy we will update the date at the top of the page. Material changes will be described here rather than made silently.

Contact

Questions about this policy, or about how we handle your data, go to deepthoughtconsultech@gmail.com.