Legal

Privacy and Cookie Policy

Last updated: 6 October 2026. Applies to himanshukhandelwal.in (the "Site").

Contents

1. Who I am
2. Information I collect
3. Cookies and similar technologies
4. How consent works
5. Why I use information
6. Who I share it with
7. Transfers outside your country
8. How long I keep it
9. Your rights
10. Security
11. Children
12. Other websites
13. Changes to this policy
14. No guarantee of results
15. Contact and grievances

1. Who I am

This Site is run by Himanshu Khandelwal, an individual web designer, web developer and cyber security professional based in Rajasthan, India ("I", "me"). For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and related rules, and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR, I am the data fiduciary / data controller for personal data collected through this Site.

Contact: himanshukhand3lwal@gmail.com · WhatsApp +91 7340159100.

2. Information I collect

2.1 Information you give me

If you contact me by email, WhatsApp, Instagram or LinkedIn, I receive what you choose to send: for example your name, contact details, business name and the details of your project or question. The buttons on the Site only open those apps or services; the Site itself has no contact form.

2.2 Information collected automatically, only with your consent

If (and only if) you click "Accept analytics", Google Analytics 4 collects usage information such as the pages you view, how long you stay, which contact buttons you click, your approximate location (city or country level, derived from your IP address), your device, browser and operating system, and the website that referred you. This is used in aggregate; I do not use it to identify you personally. Google Signals and advertising personalisation are switched off for this Site.

2.3 Information handled by my hosting provider

The Site is hosted on GitHub Pages. Like any web host, GitHub receives technical data when your browser requests a page, such as your IP address, browser type and the time of the request. This happens whether or not you accept analytics, because it is needed to deliver the Site. I do not control or use these hosting logs; GitHub's own privacy statement applies.

2.4 Stored in your own browser

The Site saves your cookie choice in your browser (see section 3). That is the only thing the Site itself stores on your device without analytics consent.

2.5 What I do not collect

• No accounts, passwords, payment details or government identifiers.
• No advertising or marketing cookies, and no tracking pixels from social networks.
• No sensitive personal data. Please do not send me any in your messages.
• No fonts or scripts are loaded from Google or other third parties until you accept analytics: the fonts used on this Site are hosted on the Site itself.

3. Cookies and similar technologies

Google Analytics measurement ID for this Site: G-EWYG3QV7BC. When analytics is on, your browser also connects to Google servers (for example googletagmanager.com and google-analytics.com) and Google receives your IP address and the usage data described above.

4. How consent works

• The first time you visit, a banner asks you to Accept analytics or Decline. Both choices are equally easy. Until you choose, analytics is off.
• If you decline, Google Analytics is never loaded and no analytics cookie is set.
• If your browser sends a Global Privacy Control or Do Not Track signal, I treat it as a decline and do not show the banner. You can still opt in through "Cookie settings".
• You can change or withdraw consent at any time through Cookie settings. If you withdraw, analytics stops and I remove the analytics cookies that I can access. Withdrawing does not affect anything done before you withdrew.
• You can also block or delete cookies in your browser settings.

5. Why I use information, and my legal basis

I do not use your information for automated decision-making or profiling that has legal or similarly significant effects, and I do not use it for advertising.

6. Who I share it with

I do not sell your personal data. I use these service providers and platforms, each under its own terms and privacy policy:

• Google LLC: Google Analytics (only with your consent) and Gmail (if you email me).
• GitHub, Inc. (Microsoft): hosts the Site.
• Meta Platforms (WhatsApp, Instagram) and LinkedIn: only if you choose to contact me through them.
• Authorities: where the law requires, or to protect rights and safety, I may disclose information to courts, regulators or law enforcement.
• A successor: if my business is ever transferred, information may be passed on under the same protections.

7. Transfers outside your country

Google, GitHub and Meta operate internationally, so information may be processed in countries other than yours, including the United States and India. Where the law requires safeguards, I rely on those providers' transfer mechanisms (for example standard contractual clauses or the EU-US Data Privacy Framework). Under the DPDP Act, transfers are permitted except to territories the Government of India restricts by notification.

8. How long I keep it

• Enquiries and project messages: for as long as needed to deal with your request and any resulting work, then up to 3 years after our last contact, unless the law requires longer or you ask me to delete them earlier.
• Analytics data: Google Analytics retains event-level data for the period I set in my account, which is 14 months at most. Cookies expire as shown in section 3.
• Your cookie choice: until you clear your browser data or change it.

9. Your rights

Everyone: you can ask me what personal data I hold about you, ask me to correct or delete it, and withdraw consent at any time.

India (DPDP Act): you have the right to access a summary of your personal data and the processing, to correct, complete, update and erase it, to grievance redressal, and to nominate another person to exercise your rights if you die or become incapacitated. You may complain to the Data Protection Board of India after first raising the matter with me.

EEA and UK (GDPR / UK GDPR): you also have the right to restrict or object to processing, to data portability, and to complain to your local supervisory authority (in the UK, the Information Commissioner's Office).

California (CCPA/CPRA): you may ask to know, correct and delete your personal information. I do not sell or share personal information for cross-context behavioural advertising.

To exercise any right, email himanshukhand3lwal@gmail.com. I may need to confirm your identity first. I will reply as soon as reasonably possible and within the time the law requires. There is no charge unless a request is clearly excessive or repetitive.

10. Security

The Site is served over HTTPS and I limit what I collect. Messages sent through email, WhatsApp, Instagram or LinkedIn are protected by those providers' own security. No method of transmission or storage is completely secure, so I cannot guarantee absolute security. If a personal data breach affecting you occurs, I will notify you and the authorities as the law requires.

11. Children

This Site is intended for businesses and adults. It is not directed at anyone under 18, and I do not knowingly collect personal data from children. If you believe a child has sent me personal data, email me and I will delete it.

12. Other websites

The Site links to websites I do not control, including client websites shown as examples of my work, and my profiles on GitHub, LinkedIn and Instagram. Their privacy practices are their own. Please read their policies.

13. Changes to this policy

I may update this policy, for example if I add a service or the law changes. The "Last updated" date above will change. If a change affects how I use analytics, I will ask for your consent again.

14. No guarantee of results

15. Contact and grievances

For questions, requests or complaints about your personal data, contact the person responsible for this Site (grievance contact under the DPDP Act):

This policy is governed by the laws of India. Nothing in it limits any right you have under mandatory law where you live.