← BACK TO HOME

Privacy Policy

Last updated: 2 August 2026

This policy explains what personal data this website (srinivasavarma.dev) collects, why, and what rights you have. This site is operated from India, and this policy follows the Digital Personal Data Protection Act, 2023 (DPDP Act). Because the site is reachable worldwide, visitors in the EU/EEA and the UK are also given the consent and access rights described below.

1. Who is responsible

The Data Fiduciary responsible for the personal data processed through this site is:

Srinivasa Varma — independent software and AI/ML consultant, India
Email: [email protected]

I am also the point of contact for any question or grievance about how your personal data is handled here (see section 9).

2. Data collected when you visit

When you load this site, the hosting and content-delivery infrastructure (Google Cloud Storage and Cloudflare) automatically processes standard technical data such as your IP address, browser type, referring page, and the time of the request. This is necessary to deliver the site securely and reliably, and to protect it from abuse.

This site is a static portfolio — there are no accounts, no logins, and no tracking beyond what is described in section 3.

3. Google Analytics (only with your consent)

This site uses Google Analytics 4 to understand how visitors use it (for example which pages are viewed). Google Analytics is not loaded unless you explicitly accept analytics cookies in the consent banner. If you decline, no analytics scripts or cookies are loaded at all.

When enabled, Google Analytics sets cookies (e.g. _ga, _ga_<id>) and processes data such as a truncated/anonymised IP address, device and browser information, pages visited, and approximate location. IP anonymisation is applied by Google Analytics 4 by default.

Processed by: Google LLC and its affiliates, acting as a Data Processor on my behalf.
Basis: your consent, which you can withdraw at any time — see section 7.

4. Contact form

If you use the contact form, the name, email address, and message you submit are sent through Formspree (Formspree, Inc.) so the message can be delivered to me. This data is used only to respond to your enquiry and is never sold or used for marketing.

Processed by: Formspree, Inc. (United States).
Basis: your consent, given by choosing to submit the form.

5. Where your data is processed

The infrastructure and services above (Google, Cloudflare, Formspree) operate globally, so your data may be processed on servers outside India, including in the United States and the European Union. Transfers are made under each provider's standard contractual terms, and only to countries not restricted for such transfers by the Government of India under the DPDP Act.

6. How long data is kept

Google Analytics data is retained according to the retention period configured in the Google Analytics property. Contact-form messages are kept only as long as needed to handle your enquiry and any resulting engagement or correspondence, after which they are deleted. Server and CDN logs are retained for a limited period for security and operational purposes.

7. Withdrawing your consent

You can change or withdraw your analytics consent at any time using the “Cookie settings” link in the site footer — withdrawing is as easy as giving consent. Choosing “Decline” stops Google Analytics from collecting further data and prevents it from loading on future visits. Withdrawal does not affect data already processed before you withdrew.

8. Your rights

Under the DPDP Act you have the right to:

  • obtain a summary of the personal data being processed about you;
  • have inaccurate or incomplete data corrected, completed, or updated;
  • have your personal data erased when it is no longer needed;
  • withdraw your consent at any time;
  • nominate another person to exercise these rights on your behalf;
  • have your grievance addressed (see section 9).

If you are in the EU/EEA or the UK, you may additionally request access, portability, restriction of, or object to processing, and complain to your local data protection authority.

To exercise any of these rights, email me at the address in section 1.

9. Grievance redressal

If you have a concern about how your personal data is handled on this site, write to [email protected] and I will respond as promptly as I reasonably can. If you are not satisfied with the outcome, you may escalate the matter to the Data Protection Board of India.

10. Children

This site is a professional portfolio intended for a general adult audience. It is not directed at children, and I do not knowingly collect personal data of anyone under 18. If you believe a child has submitted personal data through the contact form, email me and I will delete it.

11. Changes to this policy

This policy may be updated as the site or applicable law changes. The date at the top reflects the latest revision.