Privacy Policy

24HourSites, operated by Mohammed Thanedar, Surat, Gujarat, India, is responsible for your data (the “controller” or “data fiduciary”). Our contact for privacy questions and grievances is Mohammed Thanedar, reachable through our contact page.

We don't collect sensitive personal data, and we don't knowingly collect data from anyone under 18.

This website uses no tracking or advertising cookies. It remembers your currency choice in your own browser, and Cloudflare's anti-spam check runs when you send the form. If we ever add analytics or advertising tools that use cookies, we'll ask for your consent first.

Our demo pages load stock photos from Unsplash, and they load a Google Map only when you tap “Show map”. Those services receive your IP address when they do.

We only share data with the services we need to run the business. Each of them protects it under its own terms:

• Google Workspace (email, documents, our project spreadsheet)
• Cloudflare (hosting, security and anti-spam)
• Cashfree Payments (payments; we never see your card or bank details)
• Metricool (only to schedule our own social media posts)
• Instagram, Facebook and WhatsApp (when you message us there)
• Professional advisers, or authorities when the law requires it

Some of these services store data outside India or your country. They use recognised safeguards such as standard contractual clauses.

We sometimes email businesses whose contact details are publicly listed, to offer a website. These are personal emails, sent in small numbers. They say who we are and include our address.

Reply “no” or “unsubscribe” and we'll never contact you again. We keep a short do-not-contact record (your email and business name) so we can honour that.

• Enquiries that don't become projects: deleted after 24 months.
• Client records, contracts and invoices: for as long as tax and company law requires (up to 8 years).
• Do-not-contact records: kept permanently, so we can keep honouring them.
• Messages: as long as the conversation is relevant to a project or enquiry.

Depending on where you live (including under India's Digital Personal Data Protection Act 2023, the GDPR and UK GDPR, and Californian law), you can:

• ask for a copy of the data we hold about you
• ask us to correct it
• ask us to delete it
• withdraw your consent
• object to our use of it
• complain to a data protection authority

Contact us through our contact page. We reply within 30 days. We may need to confirm your identity first.

We use encrypted connections, two-factor authentication, password managers and access limited to the people who need it. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires.

When we build or run a site or tool for a client, the data its visitors send belongs to that client and is covered by the client's own privacy notice. We process it only on the client's instructions, under a data processing addendum.

If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll also tell clients by email.