Shineing Digital LLP ("Shineing Digital", "we", "us", "our") is a limited liability partnership registered in India, operating from Kota, Rajasthan. We provide website development, mobile application development, custom software, AI engineering, cloud services, branding and digital marketing services.
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), Shineing Digital LLP is the Data Fiduciary that decides why and how your personal data is processed. Where the EU/UK GDPR applies to a visitor, we act as the Data Controller for the same processing.
This policy covers the website shineing.digital and every sub-page, form and service reachable from it. It does not cover third-party websites we link to — those have their own policies.
We only collect data you choose to give us, plus limited technical data your browser sends automatically. We do not buy personal data from third parties.
A. Data you give us directly
- Enquiry, contact and quotation forms — your name, email address, phone number, company name and the project brief or message you write.
- Newsletter subscription — your email address.
- Job applications — your name, email address, phone number, the role applied for, your CV/résumé and any covering information you attach. CVs commonly contain education history, employment history and other details you decide to include.
- Direct correspondence — anything you send us by email, phone, WhatsApp or a messaging channel, and our replies.
- Client project data — where you engage us, the credentials, content, documentation and business information you share so we can deliver the project.
B. Data collected automatically
- Usage and device data — IP address, browser type and version, operating system, screen size, referring URL, pages viewed, time on page and approximate location derived from IP.
- Cookies and similar technologies — see the Cookies section below.
Please do not send us sensitive data you were not asked for
Our forms never ask for financial account numbers, card details, passwords, Aadhaar numbers, health information or biometric data. Please do not include them in a message or a CV. If you send such data unprompted, we will delete it.
Under the DPDP Act we process personal data on the basis of your consent, or where processing is necessary for a legitimate use such as performing a contract you have entered into with us or complying with a legal obligation. Under the GDPR, the corresponding bases are consent, contract, legal obligation and legitimate interests.
- To answer your enquiry and prepare a quotation — we use your contact details and project brief to respond, ask follow-up questions and send a proposal. Basis: your consent, and steps taken at your request before a contract.
- To deliver services you have engaged us for — project communication, delivery, invoicing and support. Basis: performance of a contract.
- To send our newsletter — only if you subscribed. Basis: your consent, withdrawable at any time.
- To assess a job application — reviewing your CV, contacting you, scheduling interviews and recording the outcome. Basis: your consent and steps before an employment contract.
- To operate, secure and improve the website — understanding which pages are useful, diagnosing errors, and preventing spam and abuse. Basis: our legitimate interests.
- To meet legal, accounting and tax obligations — keeping invoices and contractual records for the periods Indian law requires. Basis: legal obligation.
We do not use your personal data for automated decision-making that produces a legal or similarly significant effect on you, and we do not profile you for that purpose.
Cookies are small files stored by your browser. We use a small number of them, and third-party tools that set their own.
- Strictly necessary cookies — keep the site working: session handling, security, and remembering that you dismissed a notice. The site cannot function correctly without these.
- Google Analytics 4 / Google Tag Manager — measures traffic and how pages are used, in aggregate. Google may set cookies and process data as an independent controller. See Google's Privacy Policy and opt out with the Google Analytics Opt-out Add-on.
- Meta Pixel — where enabled, measures the performance of our advertising and lets us reach relevant audiences on Meta platforms. See Meta's Privacy Policy.
You can block or delete cookies through your browser settings at any time, and you can use your browser's "Do Not Track" or private browsing mode. Blocking strictly necessary cookies may break parts of the site.
Analytics and advertising tools are only active on this site where the corresponding measurement ID has been configured. Where no ID is configured, no such script is loaded and no such cookie is set.
We do not sell, rent or trade your personal data
Shineing Digital LLP has never sold personal data and does not make it available to data brokers, list sellers or advertising networks for their own purposes.
We share personal data only in these situations, and only to the extent needed:
- Service providers (Data Processors) who run parts of our operation under contract — web hosting and email providers, analytics providers, CRM and helpdesk tools, and payment processors. They may process your data only on our instructions.
- Professional advisers — accountants, auditors and lawyers, where they need it to advise us.
- Legal and regulatory disclosure — where we are required by Indian law, a court order, or a lawful request from a government authority.
- Business transfer — if the firm or part of it is reorganised, merged or acquired, data may transfer to the successor entity, which stays bound by this policy.
Our website and primary systems are hosted on servers operated by our hosting provider. Some of the service providers listed above — including analytics and email infrastructure — operate globally, so your personal data may be processed on servers located outside India.
Where data is transferred outside India, we rely on the transfer mechanisms permitted under the DPDP Act and, where the GDPR applies, on Standard Contractual Clauses or an equivalent safeguard. We do not transfer personal data to any country that the Central Government has restricted under Section 16 of the DPDP Act.
We keep personal data only for as long as the purpose it was collected for still applies, then delete or anonymise it. Our normal periods are:
- Enquiry and quotation data — up to 24 months from your last contact with us, so we can pick up a conversation you return to.
- Newsletter subscription — until you unsubscribe, plus a minimal suppression record so we do not email you again by mistake.
- Job applications — up to 12 months after a hiring decision, so we can consider you for a similar role. Tell us if you would rather we delete your application immediately.
- Client project and contract records — for the duration of the engagement and afterwards for the period required by Indian tax, accounting and contract-limitation law.
- Website analytics — retained according to the retention setting of the analytics provider, in aggregate form.
As a Data Principal under the DPDP Act 2023, you have the following rights. Where the GDPR applies to you, you hold the equivalent rights of access, rectification, erasure, restriction, portability and objection.
- Right to access — ask for a summary of the personal data we hold about you and how it is being processed.
- Right to correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, and data erased where it is no longer needed for the purpose it was collected for.
- Right to withdraw consent — withdraw consent as easily as you gave it. Withdrawal does not affect processing already carried out lawfully before the withdrawal.
- Right to grievance redressal — raise a complaint with us and receive a response, before escalating to the Data Protection Board of India.
- Right to nominate — nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, email namaste@shineing.digital with the words "Data Request" in the subject line. We may need to verify your identity before we act, and we will respond within the timelines required by applicable law. Exercising these rights is free of charge.
To unsubscribe from our newsletter, use the unsubscribe link in any newsletter email, or email us and we will remove you.
We apply reasonable technical and organisational security measures proportionate to the data we hold, including HTTPS/TLS encryption in transit, access control so that staff only reach the data their role requires, hashed credentials, server-side validation and protection against common web attacks, and regular patching of our platforms.
No system connected to the internet can be guaranteed completely secure. If a personal data breach occurs that is likely to affect you, we will notify you and the Data Protection Board of India in the manner and within the timelines the DPDP Act requires.
Our website and services are intended for businesses and for adults. We do not knowingly collect the personal data of anyone under 18 years of age without verifiable consent from a parent or lawful guardian, as the DPDP Act requires. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children.
If you believe a child has provided us personal data, contact us and we will delete it promptly.
Our website links to third-party websites, including our social media profiles, client websites shown in our portfolio, and the documentation of technologies we work with. Following such a link takes you to a site we do not control.
We are not responsible for the content, security or privacy practices of any third-party website. Read their privacy policy before providing personal data to them.
In line with the DPDP Act 2023 and the Information Technology Act 2000 and rules made under it, you may contact our Grievance Officer with any complaint about how your personal data has been handled.
Grievance contact
Grievance Officer, Shineing Digital LLP
Email: namaste@shineing.digital (subject line: "Grievance")
Address: S-30, II Floor, Paliwal Complex, Gumanpura, Kota, Rajasthan 324005, India
We acknowledge every grievance within 24 hours and aim to resolve it within 30 days.
If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.
We may update this Privacy Policy as our services, our tools or the law change. The Effective Date shown at the top of this page always reflects the current version, and the updated policy takes effect from the date it is published here.
Where a change materially affects how we use your personal data, we will take reasonable steps to notify you — for example, by email or a prominent notice on the site — before it takes effect. Continuing to use the website after a change takes effect means you accept the updated policy.
Questions about this privacy policy? Reach us and we will respond within one business day.
See also our
Terms & Conditions,
Privacy Policy,
Refund Policy and
Disclaimer.
