Privacy Policy

24HourSites, operated by Mohammed Thanedar, 502 Ajmeri Palace, Badermiya Street, Inderpura, Surat, Gujarat 395002, India, is responsible for your data (the “controller” or “data fiduciary”). Our contact for privacy questions and grievances is Mohammed Thanedar, reachable through our contact page.

We don't collect sensitive personal data, and we don't knowingly collect data from anyone under 18.

This website uses no tracking or advertising cookies. Prices are shown in your local currency using the country Cloudflare reports for your connection; we don't store it. Cloudflare's anti-spam check runs when you send the form. If we ever add analytics or advertising tools that use cookies, we'll ask for your consent first.

Our demo pages load stock photos from Unsplash, and they load a Google Map only when you tap “Show map”. Those services receive your IP address when they do.

We only share data with the services we need to run the business. Each of them protects it under its own terms:

• Google Workspace (email, documents, our project spreadsheet)
• Cloudflare (hosting, security and anti-spam)
• Cashfree Payments (payments; we never see your card or bank details)
• Metricool (only to schedule our own social media posts)
• Instagram, Facebook and WhatsApp (when you message us there)
• Anthropic (Claude, the AI that helps us sort and answer messages and draft replies; under its business terms it doesn't train on our data)
• Professional advisers, or authorities when the law requires it

Some of these services store data outside India or your country. They use recognised safeguards such as standard contractual clauses.

We sometimes email businesses whose contact details are publicly listed, to offer a website. These are personal emails, sent in small numbers. They say who we are and include our address.

Reply “no” or “unsubscribe” and we'll never contact you again. We keep a short do-not-contact record (your email and business name) so we can honour that.

• Enquiries that don't become projects: deleted after 24 months.
• Client records, contracts and invoices: for as long as tax and company law requires (up to 8 years).
• Do-not-contact records: kept permanently, so we can keep honouring them.
• Messages: as long as the conversation is relevant to a project or enquiry.

Depending on where you live (including under India's Digital Personal Data Protection Act 2023, the GDPR and UK GDPR, and Californian law), you can:

• ask for a copy of the data we hold about you
• ask us to correct it
• ask us to delete it
• withdraw your consent
• object to our use of it
• complain to a data protection authority

Contact us through our contact page. We reply within 30 days. We may need to confirm your identity first.

You can ask us to delete everything we hold about you, including messages you sent us on Instagram, Facebook or WhatsApp:

• send “delete my data” to us on the same channel you used (Instagram, Facebook, WhatsApp or email), or
• write to us through our contact page.

We delete it within 30 days and confirm when it's done. We keep only what the law requires (such as invoices) and, if you asked us never to contact you, a short do-not-contact record so we can keep honouring it.

We use encrypted connections, two-factor authentication, password managers and access limited to the people who need it. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires.

When we build or run a site or tool for a client, the data its visitors send belongs to that client and is covered by the client's own privacy notice. We process it only on the client's instructions, under a data processing addendum.

If we change this policy, we'll update the date at the top of this page. If a change is significant, we'll also tell clients by email.