Privacy policy
Who we are
This website is run by StackSandwich ("we", "us"). We handle your personal data under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Most duties under them apply from 13 May 2027.
Questions about this policy or your data go to the person who answers privacy questions and handles grievances for us at hello@stacksandwich.com.
What this policy covers
This policy covers this website and the enquiries you send us through it. It does not cover the data our clients keep on servers we set up for them. For that data we act on the client's behalf, under our contract with that client.
What we collect
When you send the free assessment form:
- your name, company, email address and, if you give it, your phone number;
- your industry and team size;
- the boxes you ticked, the options you picked on the site, and your message;
- the page you sent the form from.
When you tell us you're interested in an industry: your email address and that industry. We use them only to reach out to you about it, and we delete them 12 months after our last contact.
When you email us: what you send us, and your contact details.
When you visit any page: our hosting and network providers receive your IP address and browser details so it can deliver the page, and may keep them in short-lived logs.
How you use the site: we use Microsoft Clarity and Google Analytics. Clarity shows us clicks, scrolling and recordings of page visits; Google Analytics counts visits, where visitors come from and how many forms are sent. Both set cookies. Neither receives what you type into our forms. Microsoft and Google process this data under the Microsoft Privacy Statement and Google's page on how Google uses information from sites that use its services. To stop them, block or clear cookies for this site, or use a content blocker. We use no advertising tools.
What stays in your browser
- The options you pick on the site, and any message you start typing in the form, are kept in your own browser (session storage) for that visit only, so nothing is lost if you change page. They are cleared when you close the tab and reach us only if you send the form.
- If you change region, your browser remembers that choice (local storage), so the home address opens your region next time. It never leaves your browser.
Why we use your details
- To reply to your enquiry and arrange the free assessment.
- To prepare a proposal and quote for you.
- To keep a record of what we discussed.
- To reach out when you tell us you're interested.
- To see how visitors use the site and fix what is unclear (Microsoft Clarity and Google Analytics).
We do not add you to a mailing list or send you marketing unless you ask us to.
Your consent
You give consent by sending the form or emailing us, for the purpose stated here. You can withdraw it at any time, as easily as you gave it, by emailing us. We will then stop using your details, unless a law requires us to keep them.
Who we share it with
We do not sell your personal data. We share it only with:
- the service providers that receive our website forms, host this website and run our email, only to provide that service to us;
- Microsoft and Google, as described above;
- people who work for us under a duty of confidentiality, when they need it to help with your enquiry;
- professional advisers, or authorities where the law requires it.
Where your details go
Our providers may store or access your details outside India. Indian law allows this unless the government restricts a country.
How long we keep it
If you do not become a client, we delete your enquiry 12 months after our last contact. This includes the copies held by our form and email providers. If you become a client, our contract with you sets how long we keep your details.
How we protect it
Access to enquiries is limited to the people who need it, and this website and our forms use encrypted (HTTPS) connections. No system is perfectly secure; if a breach affects your details, we will tell you and the regulator where the law requires it.
Your rights
You can:
- Ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with.
- Ask us to correct, complete, update or erase it.
- Raise a grievance with us. We reply within 90 days at the latest, as the Rules require.
- Nominate another person to use these rights for you if you die or become unable to.
- Once consent managers are registered with the Data Protection Board of India, you may give, manage or withdraw consent through one. We do not use one today.
Email hello@stacksandwich.com. We may need to confirm who you are before we act on a request.
The law asks you to raise a grievance with us first. If we do not resolve it, you can complain to the Data Protection Board of India through its website.
Children
This website is for businesses. It is not meant for children, and we do not knowingly collect data from anyone under 13. If you think a child has sent us details, email us and we will delete them.
Do Not Track
Our site does not change how it works when your browser sends a Do Not Track signal. You can block Microsoft Clarity and Google Analytics cookies in your browser settings.
Changes
When we change this policy, we update the date at the top. Our terms of use cover the rest of how this website works.