Legal1. Who we are
Trinity Deck is the trading name of a sole proprietorship carried on by Sandeep Halemani, with its principal place of business at Sector 6, HSR Layout, Bengaluru, Karnataka 560068, India (“Trinity Deck”, “we”, “us”, “our”).
We are the data controller for personal data collected through www.trinitydeck.com and through our own sales and marketing activity. Where we handle personal data on behalf of a client under a services agreement, that client is the controller and we act as a processor on their written instructions.
For any question about this policy or about your personal data, contact contact@trinitydeck.com. This address also reaches our Grievance Officer for the purposes of India's Digital Personal Data Protection Act, 2023.
2. What this policy covers
This policy explains what we do with personal data we collect through our website, when you contact us or book a call, when we send you marketing, and when we approach a business about our services. It does not cover data we process inside a client's own systems under a signed services agreement — that is governed by the data processing terms in that agreement.
3. What we collect
| Category | What it includes | How we get it |
|---|---|---|
| Enquiry details | Your name, email address, your website or store URL, what you need help with, and anything you write in a message to us. | You give it to us when you contact us. |
| Booking details | Your name, email address, the time you select, your time zone, and anything you add when booking. | You give it to us through our booking page, hosted by Cal.com. |
| Correspondence | Emails, WhatsApp messages, call notes and anything else exchanged while we are talking about working together. | You send it, or we record it during the conversation. |
| Website usage | IP address (truncated where the tool allows), approximate location, browser and device, pages viewed, time on page, referring source, and how you move around a page. | Collected automatically by the tools in Section 5, and only to the extent you have consented. |
| Business contact details | Name, role, business email, company name and publicly available information about a business we think we can help. | Public sources such as a company website, LinkedIn, or a public business directory. |
We do not ask for and do not want special category data — anything about health, ethnicity, religion, politics, trade union membership, sex life or biometrics. Please do not send it to us.
4. Why we use it, and our lawful basis
Where the UK GDPR or EU GDPR applies to you, these are the lawful bases we rely on.
| What we do | Data used | Lawful basis |
|---|---|---|
| Reply to your enquiry and prepare a proposal | Enquiry details, correspondence | Steps taken at your request before entering a contract (Art 6(1)(b)) |
| Run a free teardown of the website you sent us | The URL you gave us, publicly available data about that site | Steps taken at your request before entering a contract (Art 6(1)(b)) |
| Deliver and manage a signed engagement | Contact and business details, correspondence | Performance of a contract (Art 6(1)(b)) |
| Send you our newsletter or marketing updates | Email address, name | Your consent, which you can withdraw at any time (Art 6(1)(a)) |
| Approach a business about our services | Business contact details | Our legitimate interest in promoting our services to businesses likely to benefit (Art 6(1)(f)). You can object at any time and we will stop. |
| Understand how the website is used | Website usage data | Your consent, given through the cookie banner (Art 6(1)(a)) |
| Keep tax, accounting and contract records | Transaction and contract records | Compliance with a legal obligation (Art 6(1)(c)) |
| Establish, exercise or defend a legal claim | Whatever is relevant to the claim | Our legitimate interest in protecting our position (Art 6(1)(f)) |
| Keep the website secure and working | IP address, server logs | Our legitimate interest in keeping the site available and secure (Art 6(1)(f)) |
5. The tools we use, and who else sees your data
We do not sell personal data and we never will. We share it only with the providers below, each of which processes it on our behalf under contract, and with our accountants and professional advisers where required.
| Provider | What it does | Where it processes data |
|---|---|---|
| Google (Analytics 4, Tag Manager, Search Console, Google Ads) | Measures how the website is used and how our advertising performs. | United States and other countries |
| Meta Platforms (Meta Pixel) | Measures whether our advertising on Facebook and Instagram leads to enquiries. | United States and other countries |
| Microsoft (Clarity) | Records anonymised session replays and heatmaps so we can see where a page is confusing. | United States and other countries |
| Cal.com | Runs the booking page and calendar. | United States and the EU |
| Vercel | Hosts the website and keeps server logs. | United States and other countries |
Microsoft Clarity masks text input by default, so what you type into a form is not captured in a session recording. We do not disable that masking.
6. Sending data outside your country
We are based in India. If you are in the United Kingdom or the European Economic Area, your personal data will be transferred to and stored in India, and our providers may process it in the United States and elsewhere.
India is not currently the subject of a UK or EU adequacy decision. Where we transfer personal data out of the UK or EEA we rely on the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses, together with any additional safeguards those require. You can ask us for a copy of the mechanism we rely on by emailing contact@trinitydeck.com.
7. How long we keep it
| What | How long |
|---|---|
| Enquiries that do not become clients | 24 months from our last contact, then deleted |
| Client records, contracts and deliverables | 8 years after the engagement ends, to meet Indian tax and limitation requirements |
| Financial and tax records | As required by Indian law, currently 8 years |
| Newsletter subscribers | Until you unsubscribe, then we keep a suppression record so we do not email you again |
| Website analytics | 14 months in Google Analytics 4; 30 days for Microsoft Clarity session recordings |
| Server and security logs | 12 months |
8. Your rights
Depending on where you live, you have some or all of the following rights over your personal data. We will not charge you for exercising them and we will respond within 30 days.
- Ask for a copy of the personal data we hold about you.
- Ask us to correct anything that is wrong or incomplete.
- Ask us to delete it, where we have no continuing reason to keep it.
- Ask us to restrict how we use it while a dispute is resolved.
- Object to us using it for our legitimate interests, including for marketing. If you object to marketing, we will stop.
- Ask us to send it to you or to another provider in a machine-readable format.
- Withdraw consent at any time, where we relied on consent. This does not affect anything we did before you withdrew it.
- Nominate someone to exercise these rights on your behalf in the event of your death or incapacity, if India's Digital Personal Data Protection Act, 2023 applies to you.
To exercise any of these, email contact@trinitydeck.com. We may ask you to confirm your identity first.
9. Complaints
If you are unhappy with how we have handled your data, please tell us first at contact@trinitydeck.com so we can try to put it right. You also have the right to complain to a regulator:
- United Kingdom — the Information Commissioner's Office, ico.org.uk
- European Economic Area — the supervisory authority in the country where you live or work
- India — the Data Protection Board of India, once constituted under the Digital Personal Data Protection Act, 2023
10. Keeping your data safe
We use encrypted connections, access controls, multi-factor authentication on the accounts that hold client data, and we give each person access only to what their work requires. No system is perfectly secure, but if a breach affects your personal data and is likely to put you at risk, we will tell you and the relevant regulator without undue delay.
11. Children
Our website and services are for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email contact@trinitydeck.com and we will delete it.
12. Automated decisions
We do not make decisions about you by purely automated means that produce legal or similarly significant effects.
13. Changes to this policy
We update this policy when what we do changes. The date at the top always shows the current version. If a change materially affects you, we will say so prominently on the website.
14. Contact
Trinity Deck · Sector 6, HSR Layout, Bengaluru, Karnataka 560068, India · contact@trinitydeck.com · www.trinitydeck.com. Grievance Officer for the purposes of the Digital Personal Data Protection Act, 2023: Sandeep Halemani, reachable at the same address.
See also our Cookie Policy and Terms of Service.