Privacy Policy

Who we are

Indica Technology Ltd ("we", "us", "our") is a limited company registered in England and Wales. For the purposes of UK GDPR, we are the data controller for personal data collected through indica-tech.com.

If you have any questions about this policy or want to exercise your rights, email hello@indica-tech.com. We reply personally within 24 hours.

What we collect, and why

We only collect the personal data you actively give us. Specifically, when you use the contact form on this site, we collect:

• Name — so we can address you properly when we reply.
• Work email — so we can reply.
• Company name (optional) — context for the conversation.
• Stage, engagement type, budget range — to decide whether we are a fit and to prepare a useful reply.
• Free-text message — whatever you choose to tell us about what you are building.

We do not run analytics, ad pixels, or third-party tracking on this site. No behavioural profiling, no cross-site tracking, no retargeting.

Lawful basis

We rely on one of the following lawful bases under Article 6 UK GDPR, depending on the interaction:

• Consent — when you submit the contact form, you consent to us using your data to reply and to evaluate whether we are a fit for your project.
• Legitimate interest — responding to business enquiries you initiated, and keeping records of those conversations for a reasonable period.
• Contract — if we begin work together, we process your data to perform the engagement.
• Legal obligation — for example, to keep financial records required by HMRC.

How long we keep it

We keep contact-form enquiries for up to 24 months. If we end up working together, we keep engagement records for 7 years after the end of the engagement, consistent with UK accounting and tax retention requirements. You can ask us to delete your data at any time (see "Your rights" below), subject to legal retention obligations.

Who else sees your data

We use a small number of carefully chosen processors to run the website and the business:

• FormSubmit (formsubmit.co) — delivers contact-form submissions to our inbox. They act as a data processor. Review their privacy policy.
• Google Workspace / Gmail — our business email. Subject to Google's privacy policy.
• Cal.com — if you book a discovery call. Subject to Cal.com's privacy policy.
• Website hosting — static files served from a UK/EU-hosted CDN. No visitor data is stored beyond standard HTTP request logs kept by the hosting provider for security and availability purposes.

We do not sell your personal data. We do not share it with advertisers. We only share it with the processors above, and only to the minimum extent necessary for them to provide their service.

International transfers

Some of the processors above are based in the United States. Where personal data is transferred outside the UK, we rely on UK International Data Transfer Agreements, Standard Contractual Clauses, or the UK-US Data Bridge as appropriate. You can ask us for copies of the relevant safeguards at any time.

Your rights

Under UK GDPR you have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct data that is wrong or incomplete.
• Erasure — ask us to delete your data ("right to be forgotten"), subject to any legal retention obligations.
• Restriction — ask us to stop using your data in certain ways.
• Portability — ask for your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where we relied on consent.

To exercise any of these rights, email hello@indica-tech.com. We will respond within one calendar month. No fee applies for reasonable requests.

Complaints

If you think we have mishandled your data, we would like to hear about it first so we can fix it. But you also have the right to complain to the UK supervisory authority, the Information Commissioner's Office. You can reach the ICO at ico.org.uk or on 0303 123 1113.

Security

We use HTTPS across the site, keep our software up to date, use long random passwords with a password manager, and enable multi-factor authentication on all business accounts. No system is perfect, but we take reasonable, proportionate steps to protect the limited personal data we hold.

Children

This site is aimed at business buyers. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, email us and we will delete it.

Changes to this policy

We update this page when the law, our processors, or our practices change. The effective date at the top of the page reflects the latest version. Material changes will be highlighted for 30 days.