Privacy Policy
What we collect when you visit thewebxstudio.com or get in touch, why we collect it, who else can see it, and the control you have over it.
Last updated 24 September 2026 · Effective 24 September 2026
1. Who we are
Web{X} Studio (“Web{X}”, “we”, “us”, “our”) is a design and development studio based in Ludhiana, Punjab, India. We build websites, landing pages and custom software for clients in India and abroad.
This policy covers the website thewebxstudio.com and every page on it. For the personal data described here, Web{X} Studio is the data controller — that is, we decide what is collected and why.
- Address: Model Town, Ludhiana, Punjab 141002, India
- Email: hello@thewebxstudio.com
- Phone: +91 97806 51142
2. Scope of this policy
This policy explains how we handle personal data collected through this website and through the enquiries that come from it — email, phone and WhatsApp.
When we deliver a project we often process data that belongs to our client rather than to us: content, user records, or data held in a system we are building. In that relationship we act as a processor, we act only on the client’s written instructions, and the terms of the relevant project agreement govern that data, not this policy.
3. What we collect
3.1 Information you give us
Our contact form asks for your name, email address, the services you are interested in, and your message. It also asks you to tick a box confirming you are happy for us to reply — we do not treat sending the form as consent on its own.
If you email us, call us, or message us on WhatsApp, we hold whatever you choose to include: your contact details, your company, your budget and timeline, and anything else you tell us about your project.
If you apply for a role, we hold your application, CV, portfolio links and the correspondence around it.
3.2 Information collected automatically
If you allow analytics cookies, we record technical information about your visit:
- IP address (typically truncated or anonymised by our analytics providers before it reaches us)
- Browser type and version, operating system, device type and screen size
- Approximate location derived from the IP address — country and city level, not a street address
- The pages you view, how long you stay, and the order you move through them
- The page or search that referred you, and any campaign tags on the link you followed
- Interactions on the page: clicks, scroll depth, and where your pointer moves
If you decline, none of this is collected beyond the basic server logs our host keeps for security.
3.3 What we do not collect
We do not ask for and do not want payment card numbers, government identity numbers, health data, or any other special-category data through this website. We do not buy contact lists, and we do not sell your data to anyone.
5. Third-party services we use
We keep the number of third parties on this site deliberately small. These are all of them:
| Service | What it does | Category | Provider & policy |
|---|---|---|---|
| Google Tag Manager & Google Analytics | Loads our measurement tags and reports aggregate traffic: pages viewed, sources, conversions. | Analytics | Google — privacy policy |
| Microsoft Clarity | Heatmaps and session replays showing how pages are scrolled and clicked. See section 6. | Behaviour | Microsoft — privacy statement |
| Web3Forms | Delivers our contact form submissions to our inbox. It receives the name, email, services and message you type. | Necessary | Web3Forms — privacy policy |
| Google Fonts | Serves the typefaces this site is set in. Your browser requests the font files, so Google sees your IP address. | Necessary | Google — privacy policy |
| Only if you tap our WhatsApp link. The conversation then happens inside WhatsApp under Meta’s terms. | Necessary | Meta — privacy policy | |
| Our hosting provider | Serves the site and keeps standard server logs, including IP addresses, for security and diagnostics. | Necessary | Contact us for current details |
Each of these acts as a processor or independent controller for the data it handles. We do not permit any of them to sell your data or use it to build advertising profiles on our behalf.
6. Session recording and heatmaps
If you allow behaviour cookies, we use Microsoft Clarity to record how visitors move through the site. We are calling this out separately because it is more intrusive than ordinary page-count analytics, and you deserve to know it is available.
Clarity captures pointer movement, clicks, scrolling and page transitions, and replays them as an anonymous session. We use it to find layout that confuses people — a button nobody sees, a section everyone scrolls past.
Clarity automatically masks text entered into form fields, and we have not turned that masking off. We do not use it to identify individuals, and we do not attempt to match a recording to a named person. If you would rather not be recorded, leave the behaviour category switched off in your , or opt out through Microsoft.
7. Why we use your information
Under the EU and UK GDPR we must have a lawful basis for each use. Ours are:
| What we do | Lawful basis |
|---|---|
| Reply to your enquiry and discuss a possible project | Steps taken at your request before entering a contract, and your consent given on the form |
| Deliver a project you have engaged us for, and invoice it | Performance of a contract |
| Measure how the site performs and improve it | Legitimate interests — you can opt out at any time through the cookie banner |
| Keep the site secure and prevent spam and abuse | Legitimate interests |
| Send you an occasional update, where you have asked for one | Consent — withdrawable at any time |
| Keep accounting and tax records | Legal obligation |
Under India’s Digital Personal Data Protection Act, 2023, we process personal data for the lawful purposes described above, either with your consent or for a legitimate use permitted by that Act.
9. International transfers
We are based in India, and several of the providers above are based in the United States or operate globally. This means your personal data may be transferred to, stored in, or accessed from a country other than your own.
Where data is transferred out of the EEA or the UK, our providers rely on recognised safeguards — typically the European Commission’s Standard Contractual Clauses, the UK Addendum, or an adequacy decision. Copies of the relevant safeguards are available from those providers, and we can point you to them on request.
10. How long we keep it
- Enquiries that do not become projects — up to 24 months, then deleted, so we have context if you come back to us.
- Client project records and correspondence — for the life of the engagement and up to 7 years afterwards, to meet Indian accounting, tax and limitation requirements.
- Job applications — up to 12 months after the decision, unless you ask us to delete them sooner.
- Analytics data — retained according to each provider’s own schedule; Microsoft Clarity retains recordings for a limited rolling window rather than indefinitely.
- Your cookie choice — 12 months, in your own browser, after which we ask again.
- Server logs — a short rolling period for security and diagnostics.
When a retention period ends we delete the data or irreversibly anonymise it.
11. Your rights
Depending on where you live, you have some or all of the following rights over your personal data:
- Access — ask for a copy of what we hold about you.
- Correction — have inaccurate or incomplete data fixed.
- Erasure — ask us to delete data we no longer have a reason to keep.
- Restriction — ask us to pause processing while a dispute is resolved.
- Objection — object to processing we base on legitimate interests.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent — at any time, without affecting what was lawful beforehand.
- Nominate — under India’s DPDP Act, nominate someone to exercise your rights if you die or become incapacitated.
- Complain — to your data protection authority. In the EU or UK that is your national supervisory authority or the ICO; in India, the Data Protection Board once constituted.
We will never charge you for exercising these rights or treat you differently for having done so.
12. Exercising your rights
Email hello@thewebxstudio.com with the subject line “Privacy request” and tell us what you want. We may ask a question or two to confirm it is really you — we are not going to hand your data to someone else on request.
We aim to respond within 30 days. If a request is unusually complex we will tell you before that deadline and explain why we need longer.
13. Security
The site is served over HTTPS. Access to enquiries and project files is limited to the people who need it, protected by strong authentication, and reviewed when someone leaves. We choose providers with recognised security practices, and we keep the number of places your data sits deliberately small.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data and is likely to put you at risk, we will notify you and the relevant authority as the law requires.
14. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
15. Links to other sites
Our work, blog and social links point to sites we do not control — including clients’ live websites. Once you leave thewebxstudio.com, this policy no longer applies, and neither does your cookie choice here. We would encourage you to read the privacy policy of any site you land on.
16. Changes to this policy
We will update this page when what we do changes — a new tool, a new legal requirement, a new service. The “last updated” date at the top always reflects the current version. If a change materially affects your rights we will do more than quietly edit the page: we will say so prominently, and where the law requires it, ask for your consent again.
17. Contact and grievances
Questions, requests or complaints about privacy go to the same place:
- Email: hello@thewebxstudio.com
- Phone: +91 97806 51142
- Post: Web{X} Studio, Model Town, Ludhiana, Punjab 141002, India
If you are not satisfied with how we have handled a request, you are entitled to take it to your data protection authority — but we would rather you came back to us first and gave us a chance to put it right.
See also our Terms & Conditions.