Privacy Policy

A Legal Disclaimer
Last Updated: May 2025

1. Introduction
Welcome to BarakCo ("we", "our", or "us"), a web development agency registered in India and serving clients primarily in Leeds, United Kingdom, and the wider United Kingdom.
We are committed to protecting the personal data of our clients, website visitors, and business contacts. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.
By using our website or engaging our services, you agree to the practices described in this policy.
2. Who We Are
BarakCO, a sole proprietorship registered and operating from India. 
3. Applicable Law
As an India-based company serving clients in the United Kingdom, we operate under two legal frameworks:

• India: The Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

• United Kingdom: The UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as applicable to the personal data of UK residents.

Where your data falls under UK GDPR (e.g., you are a client or contact based in Leeds or elsewhere in the UK), we comply with those standards, which are no less protective than those required under Indian law.
4. What Personal Data We Collect
We may collect and process the following categories of personal data:

• Identity & Contact Information: Name, job title, company name, email address, phone number, postal address.

• Project & Business Information: Details you share when enquiring about or commissioning web development services.

• Financial Information: Invoicing details, billing address, and payment records (we do not store full card details).

• Technical Data: IP address, browser type, device information, and usage data collected via cookies when you visit our website.

• Communications: Emails, messages, or other correspondence you send us.

5. How We Collect Your Data
We collect data:

• Directly from you when you fill in a contact form, request a quote, or enter into a contract with us.

• Through our website via cookies and analytics tools (see Section 9 on Cookies).

• From publicly available sources such as LinkedIn or company websites, for legitimate business purposes.

6. How We Use Your Data
We use your personal data for the following purposes:
PurposeLegal Basis (UK GDPR)
To respond to enquiries and provide quotesLegitimate interests / Pre-contractual steps
To deliver web development servicesPerformance of a contract
To send invoices and process paymentsPerformance of a contract
To communicate project updatesPerformance of a contract
To improve our website and servicesLegitimate interests
To comply with legal obligationsLegal obligation
To send marketing updates (with your consent)Consent
7. How We Share Your Data
We do not sell your personal data. We may share it with:

• Third-party tools and platforms we use to deliver services (e.g., project management software, cloud hosting providers, email platforms). These are carefully selected and subject to data processing agreements.

• Payment processors to handle invoices and transactions securely.

• Legal or regulatory authorities where required by law in India or the United Kingdom.

All third parties we work with are required to handle your data securely and in accordance with applicable law.
8. International Data Transfers
Your personal data may be transferred between India and the United Kingdom as part of our normal operations. Where data is transferred from the UK to India, we ensure appropriate safeguards are in place in line with UK GDPR requirements, such as standard contractual clauses or other lawful transfer mechanisms.
9. Cookies
Our website uses cookies to improve your experience. These may include:

• Essential cookies required for the website to function.

• Analytics cookies (e.g., Google Analytics) to help us understand how visitors use our site.

• Marketing cookies, only where you have given consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner.
10. Data Retention
We retain personal data only for as long as necessary:

• Client data is kept for the duration of the project and for up to 6 years afterwards, in line with UK contractual limitation periods.

• Enquiry data (where no contract was formed) is retained for up to 12 months.

• Marketing data is retained until you withdraw consent or unsubscribe.

11. Your Rights
If you are based in the UK, under UK GDPR you have the right to:

• Access the personal data we hold about you.

• Rectify inaccurate or incomplete data.

• Erase your data in certain circumstances ("right to be forgotten").

• Restrict the processing of your data.

• Data portability — receive your data in a structured, machine-readable format.

• Object to processing based on legitimate interests.

• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at [your@email.com]. We will respond within 30 days.
If you are unsatisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK at www.ico.org.uk.
12. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include encrypted communications, access controls, and secure data storage.
However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us.