Privacy Policy

This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website (the “Website”) or contact us through our contact form. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Personal data we collect

Depending on how you use the Website, we may collect the following categories of personal data:

• Contact data (e.g., name, email address, company, topic, message content) when you submit the contact form or email us.
• Technical data (e.g., IP address, device and browser information, log data) that may be collected automatically by our hosting provider for security and operational purposes.
• Cookies: we may use cookies and similar technologies. Please refer to our Cookie Policy for details.

2. Purposes and legal bases

We process personal data for the following purposes and legal bases:

• To respond to enquiries and provide information submitted via contact form or email (legal basis: legitimate interests, GDPR Art. 6(1)(f), and/or steps prior to entering into a contract, Art. 6(1)(b)).
• To operate, secure and improve the Website (e.g., preventing abuse, troubleshooting) (legal basis: legitimate interests, Art. 6(1)(f)).
• To comply with legal obligations (e.g., responding to lawful requests by authorities) (legal basis: legal obligation, Art. 6(1)(c)).

3. How we collect submissions (Netlify Forms)

Our Website may use Netlify Forms to collect and deliver contact form submissions. When you submit the form, the information you provide is transmitted to and processed by Netlify in order to deliver the submission to us and store it in the Netlify dashboard (depending on configuration).

4. Recipients and processors

We may share personal data with trusted service providers acting as processors, for example:

• Hosting & form handling: Netlify, Inc. (website hosting and form submissions handling).
• Email and communications: our email service provider(s) used to receive and respond to your enquiries.
• IT / security providers: where necessary to protect and maintain the Website.

We may also disclose personal data if required by law, court order, or to protect our rights and security.

5. International data transfers

Some service providers may process personal data outside the European Economic Area (EEA). Where such transfers occur, we rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses (SCCs), and/or other legally recognized transfer mechanisms, as applicable.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Policy, including for complying with legal, accounting or reporting obligations. As a general guideline:

• Contact requests: typically retained for the time needed to handle your enquiry and for a reasonable period thereafter, unless a longer retention is required (e.g., ongoing business relationship or legal obligations).
• Technical logs: retained for security and operational purposes for a limited period, as determined by our providers and internal policies.

7. Your rights (GDPR)

Subject to the conditions and limitations of the GDPR, you have the right to:

• Access your personal data.
• Request rectification of inaccurate or incomplete data.
• Request erasure (“right to be forgotten”).
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability (where applicable).
• Withdraw consent at any time (where processing is based on consent).

To exercise your rights, contact us at dinesh@dhamija.org. We may ask for information to verify your identity.

8. Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection authority. If you are located in the EEA, you may contact your local supervisory authority. You may also contact the supervisory authority in the country where you have your habitual residence, place of work, or where an alleged infringement occurred.

9. Security

We implement reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children

Our Website is not intended for children and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Effective date”.

12. Contact

If you have questions about this Privacy Policy or our data processing practices, please contact:
Copper Beech Group
Sotiris Tofini, 4102 Limassol, Cyprus
dinesh@dhamija.org