Legal

Privacy Policy

Last updated: 13 August 2026

1. Who we are

This website, coredefences.com, is operated by RAA Core Defences LLP, registered at GOA PARADISE, TATA RIO, Sancoale, ZUARINAGAR, Marmugao, South Goa, Goa, India 403710.

Under India's Digital Personal Data Protection Act (DPDPA), we are the Data Fiduciary for the personal data described in this policy. Under the EU/UK GDPR, we are the Data Controller.

2. The short version

  • We collect almost nothing about you.
  • Only our contact form collects personal data, and only what you choose to type in.
  • We use no tracking cookies and no advertising cookies.
  • We show you no ads and run no advertising or social-media pixels.
  • We do not sell your personal data, and we never will.

3. What we collect and why

Contact form

When you use the contact form on our Contact page, we collect your name, email address, subject, message, and — optionally — whether you need help with "Platform" or "Services". We use this only to respond to your enquiry. The form is delivered to our inbox by Web3Forms and is protected by hCaptcha to prevent bots. We keep this information for 24 months from your last correspondence with us, then delete it.

Analytics

We use Cloudflare Web Analytics, a cookieless analytics service. It collects aggregate page views, referrer information, country, browser/device type, and page-performance data. It sets no cookies, does not track individual visitors across sites, and builds no personal profiles.

Browser storage

Our site stores exactly one item in your browser's local storage: blog-theme, which remembers whether you prefer light or dark mode when reading our blog. This is functional only. It is not used for tracking, and it never leaves your device.

Server logs

Our hosting provider, Hostinger, automatically records server logs containing your IP address, timestamp, requested URL, and user agent. We keep these logs for security, abuse prevention, and diagnostics.

4. Our legal basis

Under the DPDPA, we process your contact-form data on the basis of your consent — you chose to contact us — and for other legitimate uses permitted by law.

Under the GDPR, we rely on Article 6(1)(b) (steps taken at your request prior to any contract) for responding to enquiries, and Article 6(1)(f) (legitimate interests) for security and aggregate analytics.

5. Who we share it with

We share data with the following processors, each for a specific purpose:

  • Web3Forms — delivers contact-form submissions to our inbox.
  • hCaptcha (Intuition Machines Inc.) — protects the contact form from bots.
  • Cloudflare — provides cookieless web analytics.
  • Hostinger — hosts this website.

Some of these processors may process data outside India. We do not sell personal data, and we do not share it for advertising.

6. International transfers

Our processors may store or process data outside India, including in the United States. Where this happens, we rely on those processors' own safeguards and contractual terms.

7. How long we keep it

  • Contact enquiries: 24 months from your last correspondence with us, then deleted.
  • Server logs: generated and retained by our hosting provider under its own retention schedule. We do not copy these logs into any other system or keep our own archive of them.
  • Analytics: aggregate only — we hold no personal data from it.

No profiling or automated decisions. We do not use your data to build profiles about you, and we make no automated decisions that affect you.

8. Cookies and browser storage

We set no advertising or tracking cookies. The only browser storage we set ourselves is the blog-theme preference described above. hCaptcha may set its own cookies on the contact page for bot prevention. Because we use no tracking cookies, we do not show a cookie consent banner. If that ever changes, we will ask for your consent first.

9. Your rights

If you are in India (DPDPA)

  • The right to access information about your personal data.
  • The right to correction and completion of your personal data.
  • The right to erasure of your personal data.
  • The right to nominate someone to exercise these rights on your behalf.
  • The right to withdraw your consent at any time.
  • The right to grievance redressal.

If you are in the EU/UK (GDPR)

  • The right of access.
  • The right to rectification.
  • The right to erasure.
  • The right to restriction of processing.
  • The right to data portability.
  • The right to object.
  • The right to withdraw consent.
  • The right to lodge a complaint with your supervisory authority.

To exercise any of these rights, email us at legal@coredefences.com. We respond within 30 days.

10. Grievance Officer

Our Grievance Officer is Rishabh Mishra, Founder. You can reach him at legal@coredefences.com, or by post at GOA PARADISE, TATA RIO, Sancoale, ZUARINAGAR, Marmugao, South Goa, Goa, India 403710. If you are in India and remain unsatisfied with our response, you may escalate your complaint to the Data Protection Board of India.

11. Children

This site is not directed at children. Under the DPDPA, a child is anyone under 18. We do not knowingly collect data from children. If you believe we have, please contact our Grievance Officer and we will delete it.

12. How we protect data

  • HTTPS everywhere.
  • A Content-Security-Policy and other security headers.
  • Self-hosted fonts, so visitor data isn't shared with third-party font CDNs.
  • hCaptcha on our contact form.
  • Minimal data collection.
  • Access limited to those who need it.

13. Changes to this policy

We will update the "Last updated" date whenever this policy changes. We will highlight any material changes on this page.

14. Contact us

General enquiries: Contact@coredefences.com. Privacy or legal matters: legal@coredefences.com.