LEGAL / Privacy · Updated 30 July 2026
What we
collect.
Short version: we measure which pages bring in enquiries, and we read the enquiries you send us. We don't run ads, we don't sell data, and there are no advertising or social trackers on this site. The long version is below, written to be checked rather than skimmed.
Who is responsible
Nivelux Media, 2nd Floor, 201, Sumeru Sagar Complex, Maninagar Cross Road, Balvatika, BTRS, Ahmedabad, Gujarat 380008, India. For anything on this page — including a request to delete your data — email [email protected]. A person reads that inbox; we aim to reply within a few working days and will always answer within 30 days.
If you only read the site
We use Google Analytics 4, loaded through Google Tag Manager, to see which pages lead to someone actually contacting us. It records page views and clicks on our contact links — WhatsApp, phone, email and the booking link — along with which link was clicked, its visible label, and whether it sat in the header, the footer or the page body. Pages are also tagged as aimed at Indian or international readers, and articles carry their topic so we can tell which writing earns its keep.
Google assigns your browser an identifier stored in a cookie, and derives an approximate location from your IP address. Google does not pass us your IP address, and we never see it through analytics. We do not record what you type, what you highlight, or how you move your mouse. There is no session recording and no heatmapping on this site.
Our fonts are served from this domain rather than from Google Fonts, so reading the site does not announce your visit to a third-party font server.
If you send an enquiry
The contact form asks for your name, your business (optional), the service you're interested in, a way to reach you, and your message. When you submit it, that content is turned into an email and delivered to our inbox by Resend, our email provider. It is not written to any database, and we don't build a marketing list out of it — replying to you is the whole purpose.
The form also contains a hidden field that real people never fill in. If it arrives completed, we treat the submission as automated and discard it. That is the only bot-detection trick on the page.
Separately, we record that an enquiry was submitted, and which service category it was for, so we can see which pages produce leads. None of what you write reaches our analytics — not your name, not your contact details, not your message. If you use the "Send on WhatsApp instead" button, we record the click but not the message it pre-fills, even though that message contains what you typed.
If you click through to somewhere else
Our WhatsApp and booking buttons hand you over to companies that decide for themselves what to collect. Messaging us on WhatsApp means Meta handles that conversation under its own terms; booking a call means Calendly does. We only see what you'd expect — your message, or the booking you made. Their privacy policies govern the rest, and we have no control over them.
Hosting and security
The site runs on Cloudflare, which handles every request and keeps short-term logs including IP addresses. That is how a site stays up under attack and blocks abuse; it isn't analytics and we don't mine it. Our lawful basis for it is our legitimate interest in keeping the site working.
Cookies, and how to change your mind
The only cookies here are Google Analytics' (_ga and _ga_*),
which distinguish one visitor from another. There are no advertising cookies, no
remarketing pixels and no social media trackers. Your consent choice itself is kept in
your browser's local storage under nx_consent — it never leaves your device.
If you are in the EEA, the UK or Switzerland, nothing is stored and no analytics cookie is set until you choose Accept. Declining is a single click and carries exactly the same weight as accepting. Elsewhere, analytics runs by default, which is why most visitors never see a banner.
You can change your decision at any time, from anywhere in the world, using the Cookie choices link at the bottom of any page.
Who else processes your data
| Who | What they get | Why |
|---|---|---|
| Google (Analytics, Tag Manager) | Page views, contact-link clicks, a cookie identifier, approximate location | Measuring which pages produce enquiries |
| Cloudflare | Request logs including IP address | Hosting, performance and abuse prevention |
| Resend | The contents of your enquiry | Delivering it to our inbox |
| Google Workspace | Your enquiry email once it arrives | Our business inbox |
| Calendly · Meta (WhatsApp) | Only what you give them, only if you click through | Booking a call · messaging us |
We are based in India and these providers operate globally, so your data may be processed outside your country — including outside the EEA and the UK. Where that happens for EEA or UK data, it relies on the providers' own transfer safeguards, such as Standard Contractual Clauses.
Why we're allowed to do this
For anyone in the EEA or UK, under the GDPR: analytics runs on your consent, which you give or withhold in the banner and can withdraw at any time. Handling your enquiry is necessary to take steps toward a contract at your own request. Keeping the site secure rests on our legitimate interests. For visitors in India, the equivalent under the Digital Personal Data Protection Act, 2023 is the consent you give by submitting an enquiry, and the legitimate uses that Act permits.
How long we keep it
- Analytics: 14 months. That is the retention period set on our Google Analytics property, and the longest the standard product allows. After it passes, individual event data expires and only aggregate reporting remains. We chose the longer window so we can compare one year against the next; if you'd rather we didn't hold your visit that long, decline analytics in the cookie banner and none of it is recorded in the first place.
- Enquiries: while we're talking, then up to 3 years. We keep the email thread while your enquiry is live, and afterwards as a business record. Ask us to delete it sooner and we will.
- Server logs: short-term, on Cloudflare's own retention schedule, not ours.
Your rights
Wherever you are, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and say which you want — you don't need to cite any law or use any particular wording.
If the GDPR applies to you, you also have the right to object to processing, to ask for your data in a portable form, to restrict what we do with it, and to withdraw consent without it affecting anything we did while you had given it. If you think we've handled your data badly, you can complain to your national data protection authority — you do not have to come to us first, though we'd rather you did so we can fix it. If you are in India, you may raise a grievance with us at the same address, and escalate to the Data Protection Board of India if we don't resolve it.
We don't make automated decisions about you, we don't profile you, and we don't sell or rent your data to anyone. There is no exception to that sentence.
Children
This is a site where businesses hire a studio. It isn't aimed at children, and we don't knowingly collect data from anyone under 18. If you believe a child has sent us something, email us and we'll delete it.
When this page changes
If what we collect changes, this page changes with it and the date at the top moves. We won't quietly broaden what we do and leave an old version standing.