Last updated
Privacy Policy
This policy explains what personal data we, BlackWoxel, collect through this website and what we do with it.
The short version: we only collect what you choose to send us, plus basic server logs. We don't use analytics or advertising cookies, and we don't sell your data.
01 Who we are
BlackWoxel is a 3D design and social media content studio based in India. We work with clients around the world.
This site is run by [Registered business name], [Registered address]. We decide why and how we use your personal data. That makes us the 'data fiduciary' under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), and the 'controller' under the GDPR, in both its EU and UK versions.
You can reach us at hello@blackwoxel.com.
02 What we collect
When you send an enquiry or a booking request through our forms, we collect what you enter:
- your name and email address
- your company name, if you give it
- the project type, scope and timeline you pick
- the meeting times that suit you (booking form only)
- your message
If you book through an embedded booking page instead, you give your details to the booking provider, and it passes the booking on to us.
Each time you load a page, our server logs your IP address, your browser's user agent (a line of text that names your browser and operating system), the page you asked for and the time.
03 Why we use it
We use the details you send to reply to you and talk about your project. If you asked for a call, we use them to set it up. We won't use them for marketing or add you to a mailing list.
This is a 'legitimate use' under section 7(a) of India's DPDP Act. You gave us the data yourself, for a specific purpose, and we use it only for that purpose. If you tell us to stop, we will.
If you're in the EEA or UK, our legal basis under the GDPR is that you asked us to take steps before a possible contract, such as discussing your project or sending a quote.
We keep server logs to spot attacks and stop abuse of the site. Under the GDPR, we rely on our legitimate interest in keeping the site secure.
We don't make automated decisions about you, and we don't profile you.
04 Cookies
We only use cookies that are strictly necessary for the site to work. There are no analytics, advertising, social media or tracking cookies, so you won't see a cookie banner.
- bw_m lets the site load our videos and images. It expires after 24 hours.
- bw_view remembers whether you chose the desktop or mobile version. We only set it if you choose, and it lasts 30 days.
- bw_s signs studio staff in to our content management system. It lasts 12 hours, and we never set it for visitors.
Our loading animation also leaves one flag in your browser's session storage so it only plays once per visit. The flag holds no personal data and disappears when you close the tab.
If you open an embedded booking page, the booking provider may set its own cookies under its own policy.
You can block cookies in your browser settings, but our videos and images won't load without bw_m.
05 Who we share it with
We don't sell your data, and we don't pass it to advertisers. A few service providers handle it so the site can run:
- [Hosting provider] runs the server that stores the site and your messages.
- [Email provider] delivers form submissions to our email inbox, if we've switched on email forwarding.
- If you use an embedded booking page, its provider (Calendly, Cal.com or Google) handles the details you enter there.
We'll also disclose data when the law requires it.
California's privacy law (the CCPA, as amended by the CPRA) gives 'sell' and 'share' specific legal meanings. Under those meanings too, we do not sell or share personal information.
06 International transfers
We're based in India, so we handle your data there. Our server is run by [Hosting provider] in [Server location], and [Email provider] may process email in other countries. So your data may be handled outside the country where you live, where data protection laws can differ from yours.
When the law requires safeguards for these transfers, we put appropriate ones in place. Email hello@blackwoxel.com if you'd like details.
07 How long we keep it
We keep enquiries and booking requests for up to 24 months after our last contact with you, then delete them. If you ask us to delete yours sooner, we will.
We delete server logs after 30 days.
You'll find cookie lifetimes in the Cookies section.
08 Your rights
Email hello@blackwoxel.com to use any of the rights below. We'll reply within 30 days and may ask you to confirm who you are first.
Under India's DPDP Act, you can:
- get a summary of your personal data and how we've used and shared it
- have it corrected, completed, updated or erased
- raise a grievance with us
- nominate someone to use these rights for you if you die or become unable to
If we don't resolve your grievance, you can complain to the Data Protection Board of India.
If you're in the EEA or UK, the GDPR gives you the right to:
- access your data and have it corrected or erased
- restrict or object to how we use it
- receive it in a portable format
- complain to the data protection authority where you live
If you live in California, you can ask to know, correct or delete your personal information. We won't treat you differently for asking.
09 Security
The whole site runs over HTTPS, so what you send us is encrypted on the way. Our forms have rate limits and spam checks. We store your messages on our server, and only signed-in staff can read them. We salt and hash staff passwords, and we block repeated failed sign-ins.
No website is completely secure, so we can't promise that nothing will ever go wrong. If a breach affects your data, we'll tell you and the relevant authorities, as the law requires.
10 Children
This site isn't meant for anyone under 18, and we don't knowingly collect their data. If you're under 18, please don't send us your details. If you think a child has sent us personal data, email hello@blackwoxel.com and we'll delete it.
11 Changes to this policy
We may update this policy, for example when we add a feature to the site or change a provider. The 'Last updated' date at the top of this page shows when it last changed.
If we ever want to use data you've already sent us for a new purpose, we'll ask you first.
12 Contact and grievance officer
For anything to do with your personal data, including complaints, contact our grievance officer:
[Grievance officer name], Grievance Officer
[Registered business name]
[Registered address]
hello@blackwoxel.com
We reply within 30 days. If you're not happy with how we handle your request, Your rights explains where you can complain.