Privacy Policy

Webspecia® is a brand of Cognidom Technologies Private Limited (CIN: U62011DL2026PTC461109), an Indian company ("Webspecia", "we", "us", or "our"). This Privacy Policy explains what personal information we collect through webspecia.in and our related subdomains and tools (the "Site"), why we collect it, how we use and protect it, and the choices and rights you have. By using the Site, you agree to the practices described here. If you do not agree, please do not use the Site.

1. Who We Are

Registered Office: H F/F No O 1, Lajpat Nagar II, New Delhi, South East Delhi, Delhi 110024, India
Head Office: 418, Fourth Floor, Angel Mega Mall, Kaushambi, Ghaziabad, Uttar Pradesh 201012, India
Email: info@webspecia.in
Phone: +91 9760341277

We also maintain regional contact points for our US and UK clients, listed on our Contact page. These are business/client-servicing locations, not separate legal entities — Cognidom Technologies Private Limited remains the data controller for information collected through the Site worldwide.

2. Information We Collect

2.1 Information you give us directly

• Contact & lead forms — name, email, phone number, company/service interest, preferred schedule, and any message you enter (e.g. the Contact page, service pages, "Book a Call", and landing pages).
• Career applications — name, phone, email, the role you're applying for, and your resume file, which is uploaded to our file storage provider.
• Admin accounts — if you are a Webspecia team member with dashboard access, your name, email, and login credentials (passwords are stored as salted hashes, never in plain text).
• Anything you send us — emails, calls, or messages you send us directly.

2.2 Information collected automatically

When you visit the Site, we automatically log certain technical information about your visit:

• IP address and approximate location derived from it (city/region/country level only — we do not pinpoint your exact location);
• device type, operating system, and browser;
• the pages you view, the order you view them in, and how long you spend, within a browsing session;
• the referring page/site that sent you to us, and the specific page you landed on;
• timestamps of your requests, the HTTP method and status code of each request; and
• a persistent first-party visitor identifier and a session identifier (see Section 3).

2.3 Information from advertising & analytics partners

When you arrive via a paid ad or campaign link, we capture standard campaign parameters present in the URL (e.g. utm_source, utm_medium, utm_campaign, and Google's gclid click identifier) so we can measure which channels drive genuine inquiries. This data is tied to your visit, not to your offline identity, unless you separately submit a form.

3. Cookies & Tracking Technologies

We use first-party cookies, browser storage, and (with your consent) third-party analytics/advertising tags. A cookie banner is shown on your first visit letting you Accept or Decline non-essential tracking.

You can also withdraw consent at any time by clearing your browser's local storage for this Site, or by using your browser's cookie controls to block cookies entirely (this may affect Site functionality). For a plain-language, live breakdown of exactly what gets captured on your current visit, see our Visitor Tracking Transparency page.

4. How We Use Your Information

• To respond to your inquiries, quote requests, and job applications;
• To operate, maintain, secure, and improve the Site;
• To measure which pages, campaigns, and channels are working, and to report on marketing performance to our clients;
• To detect, investigate, and prevent fraud, abuse, unauthorized access attempts, and other security threats (see Section 9);
• To send transactional emails (e.g. confirming your inquiry or application was received) and, where you've opted in, occasional updates;
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use it to make any automated decision that produces a legal or similarly significant effect on you.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area or the UK, we rely on the following legal bases:

• Consent — for non-essential analytics and advertising cookies/pixels (you may withdraw this at any time);
• Contract / pre-contractual steps — to respond to a service inquiry you submit, or process a job application;
• Legitimate interests — for security logging, fraud/abuse prevention, and the ws_vid visitor identifier's baseline first-party analytics use, which we've weighed against your privacy interests; you have the right to object to this specific processing at any time (see Section 11); and
• Legal obligation — where we must retain or disclose information to comply with applicable law.

6. How We Share Information

We share personal information only with the following categories of recipients, and never sell it:

• Infrastructure & hosting providers — Vercel (hosting, edge network, file storage for resumes) and Supabase (our primary Postgres database, and a lead-notification function), who process data on our behalf under their own security commitments.
• Email delivery — Resend, used to send transactional emails (inquiry confirmations, admin verification codes).
• Analytics & advertising platforms — Google (Analytics, Tag Manager, Ads) and Meta (Pixel), where you've consented, so we can measure and improve our marketing.
• Internal team access — Webspecia personnel who need it to respond to your inquiry, evaluate your application, or maintain the Site, subject to our internal access controls.
• Legal & safety — where required to comply with a legal obligation, enforce our terms, or protect the rights, property, or safety of Webspecia, our users, or the public.
• Business transfers — if Webspecia/Cognidom is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy.

7. International Data Transfers

Webspecia is based in India, and we serve clients internationally. Some of our service providers (e.g. Vercel, Supabase, Google, Meta, Resend) process data on servers located outside India, including in the United States, Singapore, and the European Union. Where we transfer personal data of EEA/UK residents outside those regions, we rely on the transfer mechanisms those providers make available (such as Standard Contractual Clauses) or their own regional data-residency options where applicable.

8. Data Retention

• Raw traffic & security logs (IP-level visitor logs, session records, and security/audit-trail events) are retained for 12 months from creation and then automatically and permanently deleted by a scheduled process.
• Contact, lead, and job-application submissions are retained for as long as necessary to respond to you and pursue any resulting business relationship — generally no longer than 3 years after our last contact with you, unless a longer period is required to comply with law, resolve disputes, or enforce our agreements.
• Free SEO audit scans (the website checked, your IP address, approximate city/region/country, device and browser type, the page you started from and how you found us) are kept for security, abuse prevention and analytics. The full IP address is automatically deleted after 90 days; after that we keep only a one-way scrambled version of it with the approximate location, so we can count visitors without identifying them.
• Internal admin audit records (who accessed, exported, or changed administrative/security data) are retained longer, for accountability purposes, and are not subject to the 12-month schedule above.
• You may request earlier deletion of your personal data at any time — see Section 10.

9. Security & Fraud-Prevention Logging

Because we operate a public website that handles form submissions and an administrative dashboard, we keep a security event log to protect the Site and our users. In good-faith transparency, this includes:

• Failed login/verification-code attempts on our administrative dashboard;
• IP addresses that have been blocked for abusive behavior, and blocked-visit attempts from them;
• Repeated requests to nonexistent pages, which can indicate automated scanning/probing;
• Rate-limit events, where a visitor or IP made requests faster than our fair-use limits allow; and
• Timestamps (in UTC) and request metadata (method, path, status code) associated with the above.

This data is used exclusively for security, fraud-prevention, and site-reliability purposes, is limited to authorized Webspecia personnel, and is retained per Section 8.

10. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Ask us what personal information we hold about you, and get a copy of it;
• Ask us to correct inaccurate information;
• Ask us to delete your personal information;
• Object to, or ask us to restrict, certain processing;
• Withdraw consent for cookies/analytics at any time (see Section 3); and
• Receive your data in a portable format, where technically feasible.

To exercise any of these rights, contact us at info@webspecia.in. We will respond within the timeframe required by applicable law.

11. EU/UK (GDPR) Rights

If you are located in the European Economic Area or the United Kingdom, the rights in Section 10 correspond to your rights under the GDPR / UK GDPR (access, rectification, erasure, restriction, portability, and objection), plus the right to lodge a complaint with your local data protection supervisory authority. This includes the right to object specifically to our legitimate-interest use of the ws_vid visitor-identifier cookie described in Section 3 — if you object, tell us at the email below and we will stop that processing for you unless we have compelling legitimate grounds that override your interests (for example, active fraud/abuse investigation tied to your session). We encourage you to contact us first at info@webspecia.in so we can try to resolve your concern directly.

12. California (CCPA/CPRA) Rights

If you are a California resident, you have the right to:

• Know what categories of personal information we've collected about you and why;
• Request deletion of your personal information;
• Correct inaccurate personal information; and
• Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.

We do not sell personal information. Our analytics/advertising tags (which could constitute "sharing" under the CPRA) only activate after you affirmatively accept them on our cookie banner — declining the banner is how you opt out. We will not discriminate against you for exercising any of these rights. To submit a request, email info@webspecia.in.

13. Children's Privacy

The Site is intended for business audiences and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

14. Third-Party Links & Embedded Content

The Site links out to, or embeds content from, third-party services including WhatsApp, YouTube, and Wistia. If you interact with those services, their own privacy policies apply — we do not control, and are not responsible for, their data practices. This includes our "Make a Payment" link in the site footer, which takes you to a payment page hosted by Razorpay: payment details you enter there are collected and processed by Razorpay under its own terms and privacy policy, not by Webspecia — we never see or store your card or bank details.

15. Data Security

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS/ TLS), hashed storage of passwords, rate-limiting and IP-blocking against automated abuse, and access-controlled administrative systems with two-factor authentication. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Effective date" above when we do, and for material changes we will provide a more prominent notice. Continued use of the Site after an update constitutes acceptance of the revised Policy.

17. Contact Us

Questions about this Privacy Policy or how we handle your information? Contact us at info@webspecia.in or write to us at our registered office listed in Section 1.