Privacy Policy

Turtlebyte (sole proprietorship of Tilak Kumar G), registered in India under GSTIN 29BINPT2390C1ZW. Registered address: 2nd Floor, 17, 7th Main Road, Bengaluru, Karnataka 560038, India. Privacy questions can be sent to support@turtlebyte.in.

This site-level Privacy Policy covers:

• Visitors to https://turtlebyte.in.
• People who contact us via the Site’s contact form or by email.
• Clients who contract Turtlebyte for engineering or consulting services.

It does not govern data processed by individual Turtlebyte products. Each Product is operated under its own domain and publishes its own product-specific Privacy Policy. For data processed in connection with a Product, refer to that Product’s policy.

Turtlebyte does not currently sell products directly from this website. When products launch, each will be hosted on its own domain with its own product-specific Terms, Privacy Policy, and Refund Policy. Those product-specific policies will supersede this site-level policy for matters relating to the relevant product. A current list will be maintained on this page.

Information you submit through the contact form

When you submit a message via our contact form, we collect your name, email address, company or project name, and project description. This data is processed by Web3Forms, a third-party form-submission service, and forwarded to us by email.

Information you send by email

Anything you choose to include in an email to us, including your email address, name, signature block, and message contents.

Information collected automatically

Standard web-server logs (IP address, user-agent, request URL, timestamp) are recorded by our hosting provider for security and operational purposes. We do not currently use these logs to build marketing or advertising profiles.

Cookies and analytics

Turtlebyte does not set cookies on the Site, and does not use tracking cookies, advertising pixels, or cross-site trackers of any kind.

We use Cloudflare Web Analytics to count page views and see which pages are read. It is cookieless by design: it sets nothing on your device, assigns you no identifier, and cannot follow you to other websites. It records the page you visited, the referring site, and coarse technical details such as country, browser, and device type. It does not record your IP address, and none of what it collects identifies you.

We also record, as an aggregate count, when someone selects a “Start a discovery” or “Book a call” button or an email link, and when the contact form is sent. These counts are not linked to an individual and cannot be traced back to you.

Because no cookies are set and no personal data is collected, no consent banner is required. If we ever adopt a tool that does set cookies or collect personal data, this Privacy Policy will be updated to disclose the provider, what is collected, and any consent mechanism, before that tool is enabled.

For engineering and consulting engagements, we collect the information necessary to deliver the work. This typically includes:

• Client contact details (name, email, phone, company, billing address).
• Information you share to scope the engagement (project briefs, existing systems documentation, sample data).
• Access credentials to systems where we are engaged to perform work, handled in line with industry security practice and any data-processing agreement signed for the engagement.
• Invoicing and payment details.

• To respond to inquiries you send us.
• To deliver the Services you have contracted.
• To meet legal and tax obligations, including invoice retention under Indian law.
• To detect and prevent abuse, fraud, and security incidents.
• To send you transactional or service-related communications relating to an active engagement or a message you sent us.

We do not send unsolicited marketing email, and we do not use your data for third-party advertising.

We share the minimum data required with the following processors:

• Web3Forms — processes contact-form submissions on our behalf and delivers them to us by email. Subject to Web3Forms’ own privacy policy.
• Email and hosting providers — transmit and store messages and Site files. Standard providers under their published terms.
• Dodo Payments — processes payments for Turtlebyte digital Products as Merchant of Record. Dodo Payments receives the customer’s name, email, billing address, and payment details required to complete the transaction. We do not receive or store card numbers. Dodo Payments’ handling of this data is governed by their published privacy policy.
• Razorpay — where used to issue invoices for engineering and consulting Services, processes the client’s name, email, billing details, and payment information. We do not store card numbers. Razorpay’s handling of this data is governed by their published privacy policy.
• Professional advisers — accountants and legal counsel where strictly necessary, under confidentiality obligations.
• Government authorities — where required by law, court order, or in response to a valid legal request.

We do not sell your personal data, and we do not share it for third-party advertising.

Data is stored on infrastructure operated by us or our sub-processors. Some sub-processors are based outside India (typically in the United States or European Union). When data is transferred outside India, we rely on appropriate contractual safeguards with the provider.

• Contact-form submissions and email correspondence: retained for as long as reasonably necessary to handle your inquiry and any follow-up, then deleted.
• Active client engagements: retained for the duration of the engagement and any agreed support window.
• Invoices and tax records: retained as required by Indian tax law (typically a minimum of eight financial years).
• Server logs: retained by our hosting provider for a short operational window.

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data, subject to legal retention obligations (such as invoice retention).
• Object to or restrict certain types of processing, where applicable.
• Lodge a complaint with the relevant data-protection authority in your jurisdiction.

To exercise any of these rights, email support@turtlebyte.in. We respond within a reasonable timeframe and in any case as required by applicable law.

We aim to comply with the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the EU General Data Protection Regulation. For data subjects in the EU/EEA, the legal basis for our processing is generally one of: performance of a contract (Services and Products), legitimate interests (responding to your inquiry, securing the Site), or consent (where specifically sought).

The Site is not directed at users under 16. We do not knowingly collect data from users under 16. If you believe a child has provided us data, contact us and we will delete the relevant records.

We use industry-standard measures to protect your data, including TLS in transit and access controls on production systems. No system is perfectly secure; we will notify affected parties of any breach as required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page. Where you have an active engagement with us, material changes may also be communicated by email.

Privacy enquiries: support@turtlebyte.in. Postal: 2nd Floor, 17, 7th Main Road, Bengaluru, Karnataka 560038, India. See also our Terms of Service and Refund Policy.