Who we are
Expericia Technologies ("Expericia", "we", "us") is a digital engineering firm headquartered at HiLite Platino Business Park, 5th Floor, Shankar Nagar, Maradu, Ernakulam, Kerala 682304, India, with a second office at Clayworks Create, 11 KM, Bannerghatta Road, Arekere, Bengaluru, Karnataka 560076. We are the data fiduciary (India), data controller (UK) and organisation (Singapore) responsible for personal data collected through https://expericia.com.
For anything in this policy, including requests about your data, write to info@expericia.com. Our founder is the grievance officer for privacy matters.
What we collect
We collect only what we need to answer you and, if you become a client, to deliver the work.
- Enquiry and booking forms. Your name, work email, company, phone number if you give it, what you are interested in, an optional budget band and start timing, your message, which form you used and the page you sent it from. The form posts to our server and arrives in our business mailboxes.
- WhatsApp, email and phone. If you message us on WhatsApp, the number and messages are handled by WhatsApp (Meta) under its own terms; we see what you send us. Email and calls are handled in our business email and phone systems.
- Job applications. Your CV, portfolio links and anything else you choose to send when applying for a role listed on our careers page.
- Client project information. Once we work together: requirements, documents, system access, meeting notes and the contact details of the people we work with, governed by the contract between us.
- Technical and usage data. Our hosting provider keeps standard server logs (IP address, browser, pages requested, time) for security and troubleshooting. If analytics is enabled, Google Analytics 4 records pages viewed, approximate location (city level), device and browser type, and the four conversion events we track (a Discovery Sprint booking, an assessment request, a guide download and a general enquiry). We do not use advertising features or remarketing.
We do not collect payment card details on this site, and we do not buy data about you from third parties.
How we use it, and on what basis
- To reply to you and arrange a conversation about a project, an assessment or a Discovery Sprint. Basis: your request (consent, and our legitimate interest in responding).
- To run an engagement if you become a client: scoping, delivery, invoicing and support. Basis: performance of a contract.
- To consider your application for a role. Basis: steps taken at your request before a contract.
- To keep the site secure and understand how it is used, so we can improve it. Basis: legitimate interests; analytics only where permitted.
- To meet legal obligations, such as tax and accounting records. Basis: legal obligation.
We do not send marketing email unless you have asked for it, and every such email carries an unsubscribe link. We do not make automated decisions about you.
Who we share it with
We do not sell, rent or trade personal information. We share it only with:
- Service providers who process it for us under contract: our web host (Hostinger), our business email and calendar provider, Google (Analytics, if enabled), and WhatsApp (Meta) when you choose to message us there.
- Our team, on a need-to-know basis and under confidentiality obligations.
- Delivery partners, only when you have engaged us through one of them, and only what the project needs.
- Authorities, where the law requires it or to protect our rights, safety or property.
AI tools. We build software with AI coding assistants on business-tier plans whose terms exclude training on our data. Information you submit through this website is not fed to AI tools, and client data is handled only as the client contract allows.
Where it is processed
We are based in India and process data here. Our hosting, email and analytics providers may store data in other countries, including the United States and the European Union. Where data about UK or Singapore residents leaves those jurisdictions, we rely on the safeguards available under the UK GDPR and the PDPA, such as the providers' standard contractual clauses and equivalent protection commitments.
How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months from our last exchange, then deleted.
- Job applications: up to 12 months after the role closes, unless you ask us to delete them sooner or we agree to keep your profile for future roles.
- Client and contract records: for the engagement and for the period required by Indian law afterwards, typically up to eight years for financial records.
- Analytics: 14 months, the retention period configured in Google Analytics.
- Server logs: a short rolling period set by our host, used only for security and troubleshooting.
Your rights
Wherever you are, you can ask us what personal data we hold about you, ask us to correct or delete it, and withdraw any consent you gave. Write to info@expericia.com; we respond within 30 days and may ask you to verify your identity first.
- India (Digital Personal Data Protection Act, 2023). You have the rights to access a summary of your data, to correction and erasure, to grievance redressal, and to nominate another person to exercise your rights. If we do not resolve a grievance, you may approach the Data Protection Board of India.
- United Kingdom (UK GDPR). You have the rights of access, rectification, erasure, restriction, portability and objection, including to processing based on legitimate interests. You may complain to the Information Commissioner's Office (ico.org.uk).
- Singapore (Personal Data Protection Act). You have rights of access and correction and may withdraw consent at any time. You may complain to the Personal Data Protection Commission (pdpc.gov.sg).
- United States. Where a state privacy law applies to you, you have the rights it grants, including access, deletion and correction; we do not sell personal information or share it for cross-context behavioural advertising.
Cookies and similar technologies
This website sets no cookies of its own: pages, forms and the WhatsApp link work without them. The only cookies you may receive come from Google Analytics 4, if it is enabled, which sets _ga and _ga_<id> for up to two years to tell returning visits from new ones. We do not use advertising cookies.
You can block or delete cookies in your browser settings, or opt out of Google Analytics across all sites with Google's browser add-on. Doing so does not affect anything on this site.
How we protect it
The site is served over HTTPS. Form submissions are checked for abuse before they are sent, and personal data lives in systems with access limited to the people who need it. Please do not send passwords, access keys or sensitive personal information through the enquiry form or WhatsApp; once we are working together we will agree a secure channel for them.
Children
This website and our services are for businesses. They are not directed at anyone under 18 and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to info@expericia.com and we will delete it.
Links to other sites
We link to LinkedIn, Instagram, WhatsApp, our clients' and partners' websites and other third-party pages. Their privacy practices are their own; please read their policies.
Changes to this policy
When we change this policy we will post the new version here with a new "last updated" date. If a change is significant and we hold your contact details, we will tell you directly.