Privacy notice
What we collect, why, and what you can do about it. Last updated 21 September 2026.
Who we are
DataHarmoni is a sole proprietorship based at B-13, Anupam Enclave Phase 1, New Delhi 110068, India. It decides why and how the personal data described in this notice is used. Contact for anything in this notice, including privacy questions and complaints: hello@dataharmoni.com. The person who answers is the owner of DataHarmoni.
For people in India we handle personal data in line with India's Digital Personal Data Protection Act, 2023 and the Rules made under it, as their provisions come into force. The Act is being brought into force in stages, and its rights and complaint provisions are not all in operation yet. Until they are, we apply the practices in this notice and answer requests as described below. For people in the United Kingdom or the European Economic Area, we handle personal data in line with the UK GDPR and the EU GDPR where they apply to what we do. We have not appointed a representative in the UK or the EU.
What we collect, and why
| Where | What | Why, and on what basis |
|---|---|---|
| Free snapshot form | Store address, work email, platform (optional), what you are interested in, your consent | To check the store you named, send you the snapshot and reply. Basis: your consent |
| Contact form | Name (optional), email, topic, message, your consent | To reply to you. Basis: your consent |
| Spam protection | A one-way hash of your IP address, kept for one hour. It cannot be turned back into your address | To limit abuse of the forms. Basis: our legitimate interest in keeping the forms working |
| Business outreach | See the next section | See the next section |
| Website scanning | The result of a light automated check of a few public pages of a business website (accessibility findings, platform, page counts). It describes a website, not a person | To prepare a snapshot for the site owner. Kept with the outreach record described below |
| Customers | Contact details, invoices and the work we did | To deliver the service and keep the accounting and tax records the law requires. Basis: contract and legal obligation |
| Emails you send us | Your address, the content of your message and our replies | To answer you and keep a record of the conversation |
| Server logs | Our hosting provider keeps standard server logs (IP address, browser, page, time) | Security and running the site |
Business outreach
We offer our services to businesses, and we write first to some of them. This section explains what that involves.
- What we hold about a business contact: the business email address, the name of the person if the business publishes it, the company name, a job title or role if published, the page where we found the details, the date we found them, the results of our website check, a record of what we sent and any reply, and whether the contact has asked us to stop.
- Where it comes from: the business's own public website, business directories and other publicly available business sources. We do not buy email lists and we do not guess personal addresses.
- Why: to identify businesses that may need our services, tell them what we found on their public pages and offer our services.
- Basis: our legitimate interests in offering services to businesses, where the law allows it. Business contact details can be personal data even when the address is a business one, and you have the right to object (see "Your rights").
- Where we send: some countries require prior consent for unsolicited commercial email, including to businesses. We do not use this outreach process in those countries. We currently write only to companies in the United Kingdom and businesses in the United States, and in the United Kingdom only to limited companies and limited liability partnerships.
- How to stop it: reply STOP to any message, or write to hello@dataharmoni.com. We honour it the same working day and do not contact you again.
- Why you were contacted: our why-you-got-this page explains it in plain words and tells you how to ask where we found your details.
Cookies and analytics
This site sets no cookies and uses no analytics or advertising trackers. It loads no fonts, scripts or images from other companies.
Who else handles your data
These providers process personal data for us, for the purposes above: our hosting provider (Hostinger), our email provider, and, if you buy from us, payment providers (Wise or Payoneer). We do not sell personal data.
Where your data is processed
We are based in India, so your details are processed in India and wherever the providers above operate. Where the law requires safeguards for sending personal data abroad, we use the ones the law recognises. Ask us at hello@dataharmoni.com if you want to know which.
How long we keep it
- Form requests: deleted after 90 days unless we end up working together.
- Business outreach records: deleted 12 months after the last contact with the business, unless we have started working together or the contact has asked us to keep talking.
- Block list (people and companies who asked us to stop): we keep only the address or domain, the date and where the request came from, for as long as needed to honour the request. It exists so that we do not write to you again.
- Customer records: as long as tax and accounting law requires.
Your rights
Depending on the law that applies to you, you can ask us for a copy of the personal data we hold about you, to correct it, to delete it, to restrict or stop our use of it, to object to our use of it (including for outreach), to move it to another provider, and to withdraw consent you gave us. In India, as the Act's provisions on rights come into force, you will also be able to nominate another person to exercise your rights; until then, use the route below. Write to hello@dataharmoni.com. We will respond within the period required by the data protection law that applies. We aim to answer within a week.
Complaints
Please tell us first and we will try to put it right. If you believe our handling of your personal data is unlawful, you may have the right to complain to the supervisory authority responsible for data protection in your country. For people in India, the Digital Personal Data Protection Act provides for complaints to the Data Protection Board of India once its complaint provisions are in force. Until then, please write to us.
Changes
If we change this notice, we change the date at the top. If the change matters to you, for example a new purpose, we say so on this page.