LegalPrivacy
Privacy policy
What we collect, why, who we share it with, and the rights you have wherever you live.
Effective 1 November 2026
Who we are
SuperFindable ("we", "us") is a search and website agency run from New Delhi, India. We are an unincorporated business and are not yet registered as a company. For the personal data described here, we decide how and why it is used, which makes us the data fiduciary under Indian law and the controller under the GDPR and UK GDPR.
Contact us about anything in this policy at hello@superfindable.com.
What we collect
What you give us
- Audit requests: your website address and work email, plus the page you sent the form from.
- Emails and calls: your name, contact details, company and anything you choose to tell us when you email us or book a call.
- Clients: business contact and billing details, and any account access you give us to do the work.
What we collect automatically
- Server logs: our host records IP address, browser, pages requested and the time, to deliver and secure the site.
- Anonymous analytics: pages viewed, referrer, country, browser and device type, and how fast pages load, counted without cookies and reported to us only as totals.
- Your privacy choice: we store your cookie choice in your browser so we don't ask again. See the cookie policy.
We do not collect sensitive personal data such as passwords to personal accounts, financial or card details, health information or biometric data, and we ask you not to send it. We do not use advertising trackers, sell personal data, or profile you.
How we use it, and why we're allowed to
We only use your data for the purpose you gave it for, or one closely related to it.
Who we share it with
We use a small number of service providers who handle data for us:
- Google Workspace: our email.
- Vercel: website hosting, server logs, Web Analytics and Speed Insights, which count visits and measure page speed without cookies and without identifying you.
- FormSubmit: delivers audit requests to our inbox.
- Cal.com: call booking, when you choose to book.
- Cloudflare: our domain name service.
- Google Fonts and Pexels: serve the site's typefaces and films, so your browser shares its IP address with them when a page loads.
We may also disclose data where Indian or other applicable law requires it, for example to a court or government authority, or to protect our legal rights. We never sell personal data.
Where it is stored
We work from India, and our providers store data in the United States and other countries. Indian law allows these transfers. For people in the EU and UK, we rely on our providers' Standard Contractual Clauses or equivalent safeguards where they offer them.
How long we keep it
- Audit requests and enquiries that don't become work: up to 24 months, then deleted.
- Client records: for the engagement, then as long as Indian tax and accounting law requires, generally up to 8 years.
- Server logs: as set by our host, typically under 30 days.
- Your cookie choice: 12 months, then we ask again.
We delete data earlier if you ask us to and the law doesn't require us to keep it.
Your rights
Depending on where you live, you can ask us to:
- Tell you what personal data we hold, how we use it and who we've shared it with
- Correct, complete or update it
- Delete it, or stop using it for a particular purpose
- Withdraw consent you've given, as easily as you gave it
- Object to marketing, at any time
- Give you a copy in a portable format
Email hello@superfindable.com. We may need to confirm your identity first. Withdrawing consent doesn't affect anything we did before you withdrew it.
Grievance officer
If you have a concern about how we handle your data, contact our Grievance Officer at hello@superfindable.com with the subject "Privacy grievance". We'll acknowledge it promptly and resolve it within one month.
India
We follow the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. As the Digital Personal Data Protection Act, 2023 and its Rules come into force, we will meet those obligations as they apply.
Under the DPDP Act you can also nominate someone to use your rights if you die or become unable to. If you are not satisfied with how we handle a grievance, you can complain to the Data Protection Board of India once it is operating.
EU and UK
We have no office or representative in the EU or UK. You can contact us directly about any GDPR or UK GDPR matter at the address above. You can also complain to your local data protection authority: the Information Commissioner's Office in the UK, or the authority where you live or work in the EU. We'd appreciate the chance to fix things first.
United States
We do not sell personal information or share it for cross-context behavioural advertising. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep optional marketing tools off. You can ask us to access, correct or delete your data at any time using the contact above, whichever state you live in.
Other countries
We apply the same standards everywhere. If a local law gives you more rights, for example in Canada, Australia or Brazil, you can use them by emailing us.
Children
Our services are for businesses. The site is not aimed at anyone under 18, and we don't knowingly collect their data. If you think a child has sent us personal data, tell us and we'll delete it.
Security
We use reasonable security practices suited to the data we hold: the site runs over HTTPS, and only the people working on an account can see its data. No system is perfectly secure. If a breach is likely to affect you, we'll tell you and the relevant authorities as the law requires.
Changes
We'll update this policy when our practices or the law change, and change the date at the top. If a change is significant, we'll make that clear on the site.