Privacy Policy - Palorise
Effective Date: 24th July 2026
Last Updated Date: 24th July 2026
Contact: palorise.contact@gmail.com
Scope and Applicability
This Privacy Policy describes how PALORISE collects, uses, and protects personal information in accordance with:
Digital Personal Data Protection Act, 2023 (India) — DPDP Act
General Data Protection Regulation (EU) 2016/679 — GDPR
California Consumer Privacy Act / California Privacy Rights Act — CCPA/CPRA
This policy applies to all visitors and users of the PALORISE website.
Information We Collect
Information You Provide
Through the contact form, we collect:
Full name
Email address
Message content
This data is processed solely for the purpose of responding to your inquiry and is delivered via Resend, our email delivery provider.
Automatically Collected Information
We use Google Analytics (GA4) to collect anonymised usage data, including:
IP address (anonymised before storage)
Device type and browser information
Pages visited and navigation patterns
Approximate geographic region
Time spent on pages
IP anonymisation is enabled. Data is processed only upon receipt of your consent via our cookie consent banner.Technical and Security Data
Google reCAPTCHA is used on our contact form to prevent spam and bot submissions. reCAPTCHA may collect device information, mouse movements, and behavioural signals to assess risk. This data is processed by Google under their Privacy Policy.
Vercel, our hosting provider, may process IP addresses and server request data as part of standard web hosting operations.
Cookies and Tracking Technologies
Cookie Categories
Strictly Necessary — Website functionality, security (reCAPTCHA), consent management (Cookiebot). Consent not required.
Analytics — Usage statistics via Google Analytics (GA4), managed via Google Tag Manager. Consent required.
Consent Management
Cookie consent is managed via Cookiebot. On your first visit, you will be presented with a consent banner allowing you to accept or decline non-essential cookies by category.
You may withdraw or modify your consent at any time by clicking the cookie settings link in the website footer.
Legal Basis for Processing
We process personal data under the following lawful bases:
Responding to contact form inquiries
— Legitimate Interest (Art. 6(1)(f) GDPR) — via Resend, Vercel
Website performance analytics
— Consent (Art. 6(1)(a) GDPR) — via Google Analytics, GTM
Bot and spam protection
— Legitimate Interest (Art. 6(1)(f) GDPR) — via Google reCAPTCHA
Consent management
— Legal Obligation (Art. 6(1)(c) GDPR) — via Cookiebot
Website hosting and delivery
— Legitimate Interest (Art. 6(1)(f) GDPR) — via Vercel
Where Legitimate Interest is relied upon, we have assessed that our interest does not override the rights and freedoms of data subjects.
Third-Party Processors
We use the following third-party processors. Data Processing Agreements (DPAs) are in place with all processors where required under applicable law:
Vercel
— Web Hosting — IP addresses, server logs — Legitimate Interest
Contentful
— Content Management — None directly — Legitimate Interest
Google Analytics (GA4)
— Website Analytics — Anonymised usage data — Consent
Google Tag Manager
— Tag Management — Enables other tracking tools — Legitimate Interest
Google reCAPTCHA
— Bot & Spam Protection — Device & behavioural signals — Legitimate Interest
Cookiebot
— Consent Management — Consent records — Legal Obligation
Resend
— Email Delivery — Name, email address, message — Legitimate Interest
Each processor operates under its own privacy policy and security standards. We are not responsible for the independent data practices of these processors beyond our contractual obligations.
Data Sharing and Disclosure
We do not sell, rent, or trade personal data with third parties for their own marketing purposes.
Personal data may be shared with:
Third-party processors listed in Section 6, solely for the purposes described in this policy
Law enforcement or regulatory authorities where required by applicable law
Successors in the event of a business transfer, subject to equivalent privacy protections
Data Retention
Contact form submissions
— 12 months from date of submission, or until resolved
Analytics data (GA4)
— 14 months (as configured in Google Analytics account)
Consent records (Cookiebot)
— Duration as required by applicable law
Server logs (Vercel)
— As per Vercel's standard data retention policy
You may request deletion of your personal data at any time by contacting palorise.contact@gmail.com.
Your Rights
Rights Under GDPR (EU/EEA Residents)
Access
— Request a copy of the personal data we hold about you
Rectification
— Request correction of inaccurate or incomplete data
Erasure
— Request deletion of your personal data ("Right to be Forgotten")
Restriction
— Request that we limit processing of your data
Portability
— Receive your data in a structured, machine-readable format
Objection
— Object to processing based on Legitimate Interest
Withdraw Consent
— Withdraw consent at any time without affecting prior processing
Supervisory Authority
— Lodge a complaint with your local EU Data Protection Authority
Rights Under CCPA/CPRA (California Residents)
California residents have the right to:
Know what categories of personal information are collected
Know whether personal information is sold or disclosed and to whom
Opt out of the sale or sharing of personal information
Request deletion of personal information
Non-discrimination for exercising these rights
We do not sell personal information. To submit a CCPA request, contact palorise.contact@gmail.com.
Rights Under the DPDP Act, 2023 (India Residents)
Indian residents have the right to:
Access a summary of personal data processed and processing activities
Correct or update inaccurate personal data
Erasure of personal data that is no longer necessary
Nominate a representative to exercise rights in case of death or incapacity
Grievance redressal through the Data Protection Board of India
All rights requests may be submitted to: palorise.contact@gmail.com. We will respond within 30 days.
International Data Transfers
As PALORISE uses third-party processors including Google (USA) and Vercel (USA), personal data may be transferred outside India and the European Economic Area.
All international transfers are conducted under appropriate safeguards, including:
Standard Contractual Clauses (SCCs) for EU transfers
Data Processing Agreements with all processors
Reliance on processors' participation in applicable data transfer frameworks
Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
HTTPS encryption for all data in transit
Secure hosting via Vercel with infrastructure-level protections
reCAPTCHA to prevent unauthorised form submissions
Access controls limiting who can access contact form submissions
In the event of a data breach that is likely to result in risk to individuals, we will notify affected parties and relevant supervisory authorities in accordance with applicable law.
Children's Data
PALORISE is not directed at individuals under the age of 13. We do not knowingly collect personal data from children. If we become aware that personal data from a child has been collected without parental consent, we will delete it promptly.
External Links
PALORISE may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any external sites you visit.
Policy Updates
This Privacy Policy may be updated to reflect:
New features or services added to PALORISE
Changes in applicable data protection law
Feedback from users or regulatory guidance
When material changes are made, we will update the Effective Date & Last Updated Date at the top of this policy. For significant changes involving new processing activities, we will seek fresh consent where required.
Contact
If you have any questions about this Privacy Policy, or the practices of this Site, please contact us at:
Nikita Jadhav
Maharashtra, India
palorise.contact@gmail.com