THE FINE PRINT
Privacy policy
Here is what personal data sprdlx.co handles, for what purpose, which providers are involved and what you can ask of us. In brief: the only personal details we get from you directly are those you choose to send, by email or through our contact form. Like any website, each visit also produces hosting logs that are kept briefly. There are no analytics, no advertising and no tracking cookies.
Who we are
SPRDLX is a brand operated by Super Deluxe Studios. Super Deluxe Studios runs this website and decides how the personal data covered on this page is used, which makes it the controller (the “data fiduciary” in the terms of India’s Digital Personal Data Protection Act, 2023).
- Controller and site operator
- Super Deluxe Studios
- Address
- Registered address shared on request
- Privacy requests, grievances and everything else
- hello@sprdlx.co
The data, and why we use it
Messages you send us
If you get in touch, we receive what you type: your name, your email address and your message, the company and website fields if you fill them in, and the page the form was sent from. We use these details for one thing: replying to you and talking through a potential venture, partnership or project. Without a name, an email and a message we can’t respond; everything else is up to you.
Legal basis: the consent you give by sending the message, which you can withdraw whenever you like, and steps you ask us to take before a potential contract. If the GDPR applies to you, we rely on GDPR Art. 6(1)(b) and on legitimate interest, namely responding to business enquiries (GDPR Art. 6(1)(f)).
Keeping spam out
A hidden field that visitors never see helps us spot bots, and we cap how many messages a single connection can send within a short window. Enforcing that cap means keeping the sender’s IP address in memory for a short time only: it never goes into a database and is gone within minutes. Legal basis: legitimate interest, namely a contact form that stays secure and keeps working.
Serving the website
Serving pages requires our hosting provider to process technical details like the browser you use, your IP address, the address you asked for and when you asked for it, some of which is written to short-lived logs on its servers and security systems. Legal basis: legitimate interest, namely a website that is secure and stays up.
Who else handles it
- Our hosting provider runs the website, serves its pages and holds the logs from its servers and security systems mentioned above.
- Our email delivery provider (Resend) sends messages from the contact form on to our inbox.
- Our email provider runs the hello@sprdlx.co mailbox in which messages are kept.
Each of them handles the data for us and only as we instruct. Your personal data is never sold, and never used for advertising.
Data crossing borders
Some providers may process data in a country other than yours, the United States among them. For personal data leaving the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (for instance the EU–U.S. Data Privacy Framework, where the provider is certified) and otherwise on the Standard Contractual Clauses issued by the European Commission. Data collected in India is transferred in accordance with the Digital Personal Data Protection Act, 2023 and any restrictions notified under it.
How long it stays
- We delete an enquiry 24 months on from the most recent message in that conversation. If it turns into a contract, we keep what that contract and record-keeping law require.
- Logs from those servers and security systems stay on record only for the brief period our hosting provider sets.
- Rate-limit counters for the form exist only in memory and are cleared within minutes.
Cookies, storage and tracking
No cookies are set by this website, and it runs no analytics or tracking tools. The contact form needs no cookies either, which is why you won’t see a cookie banner.
Your rights
Depending on where you are, you may ask to see your data; to have it corrected, completed, updated or erased; to restrict how it is processed; or to receive a portable copy of it. You may also object to processing that relies on legitimate interests we pursue (GDPR Art. 15–21). India’s Digital Personal Data Protection Act, 2023 additionally lets you withdraw consent whenever you choose, have grievances resolved and nominate someone to exercise your rights should you be unable to. Email hello@sprdlx.co; you’ll hear back within one month.
Unhappy with our response? You may lodge a complaint with the local data protection authority where you live, where you work, or in the place you believe the infringement took place. In India, after going through our grievance process, you may take the matter to the Data Protection Board of India.
No decision about you is ever made solely by automated means.
Updates to this policy
If we change this policy, the new version goes up on this page with an updated date under the heading.