Onion Labs is a digital product studio based in India. For anything in this policy — including any request about your data — contact us at hello@onionlabs.dev or +91 63872 42986. We are the data controller for the information described below.
§LegalUpdated 6 August 2026
Privacy Policy
This policy explains what information Onion Labs (“we”, “our”, “us”) collects when you use this website and contact us through it, how we use it, and the rights you have over it. It covers this website only.
1. Who we are
2. What we collect
Information you give us
When you submit the enquiry form or email us, we collect what you choose to send:
- Your name and email address
- Your phone number, if you provide it (optional)
- The service you are interested in and the details you write about your project
- Anything else you include in a message to us
Information collected automatically
- Aggregate, privacy-friendly analytics — such as page views, referrers, and general device and browser type — used to understand how the site is used. This does not identify you individually and sets no advertising or cross-site tracking cookies.
- Standard server logs kept by our hosting provider, which include your IP address, for security and to keep the site running.
Spam prevention
When you submit the form, your IP address is held briefly in memory to rate-limit submissions, and a hidden timing and honeypot check runs to filter out automated spam. This IP is not written to a database or retained beyond the short rate-limit window.
3. How we use your information
- To respond to your enquiry and discuss a potential project with you
- To operate, secure, and improve this website
- To detect and prevent spam and abuse of the enquiry form
- To comply with legal obligations where they apply
We do not use your information for advertising, and we do not make automated decisions that produce legal or similarly significant effects about you.
4. Legal bases for processing (GDPR)
Where the GDPR applies, we rely on:
- Consent — you choose to submit the enquiry form and can withdraw at any time
- Legitimate interests — responding to business enquiries, and running and securing the site
- Legal obligation — where we are required by law to process or retain information
5. Cookies and analytics
This site does not set advertising or cross-site tracking cookies. We use aggregate, privacy-friendly analytics provided through our hosting platform to measure traffic in a way that does not identify you. Any cookies used are strictly necessary for the site to function. You can block cookies in your browser settings without breaking the parts of the site that matter.
6. How we share your information
We do not sell your information. We share it only with service providers who process it on our behalf, under agreements that require them to protect it:
- Resend — delivers the enquiry form as an email to us
- Netlify — hosts the website and provides its analytics and server logs
- Legal authorities — only where we are required to disclose by law
7. International data transfers
Some of our service providers process data on servers outside your country, including outside India and the EU/EEA. Where information is transferred internationally, we rely on providers that offer appropriate safeguards consistent with the GDPR and India’s DPDP Act.
8. How long we keep it
- Enquiry messages are kept for as long as needed to handle your enquiry and to keep a reasonable record of our correspondence. You can ask us to delete them.
- Hosting server logs are retained for a short period by our provider for security and operations.
- The IP used for spam rate-limiting is transient and is not stored beyond the rate-limit window.
9. Your rights
Under the GDPR (EU / UK / EEA)
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase your data (the right to be forgotten)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a data protection authority
Under India’s DPDP Act, 2023
If you are in India, you have the right to:
- Access a summary of the personal data we hold about you
- Request correction or erasure
- Withdraw consent
- Nominate another person to exercise your rights on your behalf
- Have a grievance addressed within a reasonable time
To exercise any of these, email us at hello@onionlabs.dev. We will respond within a reasonable time and within any period the law requires.
10. Children’s privacy
This website and our services are intended for businesses and adults. They are not directed to children under 18, and we do not knowingly collect information from them.
11. Security
Traffic to this site is encrypted in transit over HTTPS, and access to enquiry messages is limited to the people who need it. No system is ever completely secure, but we take reasonable measures to protect your information and review them from time to time.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed, and we will note any material change on the site.
13. Contact us
Questions about this policy, or about your data, go to hello@onionlabs.dev or +91 63872 42986.