Privacy Policy
Privacy Policy
What this website collects, why, who handles it, and what you can ask us to do with it. Written to be read.
Effective 17 October 2026 · Version 1.0
Who we are
This website, purplegoat.studio, is operated by Purple Goat LLP, a limited liability partnership registered in India (LLPIN ACX-8199), with its registered office at 07/116 VM Tower, Manjeri, Nelliparambu Junction, Manjeri-kla, Ernad, Malappuram, Kerala 676121, India. In this policy, “we”, “us” and “Purple Goat Studio” mean that entity. For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for the personal data described here.
Scope
This policy covers personal data collected through this website and through email sent to our published addresses. It does not cover the products described on this site. wheneu and SortOut publish their own privacy policies on their own websites, and those policies govern data collected by them.
What we collect
Contact form
Your name, email address, company (if you give it), the type of enquiry and your message, together with the time you sent it and the fact that you agreed to this policy.
Career applications
Your name, email address, the role and discipline you are applying for, your location (if you give it), links to your work and your message. The form does not accept file uploads.
Internship applications
Your name, email address, college or university, course and year, the area you want to work in, your availability, your location and links (if you give them) and your message. The form does not accept file uploads.
If you write to info@purplegoat.studio or career@purplegoat.studio, we receive whatever your email contains, including your address and any attachments you choose to send.
Server logs
Like any website, our hosting provider records technical information about each request — such as IP address, browser type, the page requested and the time — in order to deliver the site and protect it from abuse. We do not use this information to identify visitors. The forms also use your IP address, briefly and in memory only, to limit repeated submissions.
What we don’t collect
This website does not set cookies, and does not use analytics, advertising or tracking tools. Its fonts are served from our own domain, so browsing it does not send requests to third parties. If that ever changes, we will update this policy before the change takes effect.
How we use it
- To read and reply to your enquiry, and to keep a record of our correspondence.
- To consider your application and contact you about it.
- To keep the website and its forms working and secure, including preventing spam and abuse.
- To meet legal obligations, where they apply.
We rely on the consent you give when you submit a form, and — when you write to us directly — on the fact that you have voluntarily provided your details for us to respond. Where the law that applies to you requires a different basis, such as our legitimate interest in running a secure website or taking steps at your request before entering into a contract, we rely on that basis. We do not sell personal data, use it for advertising, or make automated decisions about you.
Processors and sharing
We use the following service providers, who process personal data on our behalf:
- Netlify, Inc. (United States) — Hosts the website and processes server request logs (including IP addresses) to deliver and secure it.
- Resend, Inc. (United States) — Delivers contact-form and career submissions from the website to the studio’s inbox.
- Google LLC (Google Workspace), United States — hosts the mailboxes where enquiries and applications are received and stored.
We may also disclose personal data where the law requires it, or to protect our rights or the safety of others. Otherwise, we do not share it.
International transfers
Some of our providers are based outside India, including in the United States, so your data may be processed there. We use providers that protect data in transit and at rest, and we transfer data only as permitted by applicable law.
Retention
- Enquiries and correspondence: up to 24 months after our last exchange, unless a longer period is needed for an ongoing relationship or a legal obligation.
- Career and internship applications: up to 12 months after we have considered them, then deleted unless you agree to us keeping them longer.
- Server logs: for the period set by our hosting provider, after which they are deleted automatically.
- Rate-limiting data: held in server memory only, and discarded within minutes.
Security
The website is served only over HTTPS. Form submissions are validated on our server and sent over encrypted connections to our email delivery provider; they are not stored in a database on this website. Access to our mailboxes is limited to the people who need it. No method of transmission or storage is completely secure, but we take reasonable steps to protect the information you send us.
Your rights
Depending on where you live, you may have the right to:
- ask what personal data we hold about you and how we have used it;
- have it corrected, completed, updated or erased;
- withdraw your consent at any time — as easily as you gave it — without affecting what was done before;
- object to or restrict certain processing, or receive your data in a portable format;
- nominate another person to exercise your rights if you are unable to; and
- have a grievance addressed by us, and then, if you are not satisfied, complain to the relevant authority.
In India, the relevant authority is the Data Protection Board of India. If you are in the European Union or the United Kingdom, you may complain to your local data protection authority.
To exercise any of these rights, email info@purplegoat.studio with the subject “Privacy request”. We may need to confirm your identity before acting on a request, and we will respond within the time required by applicable law.
Children
This website is not directed at children, and we do not knowingly collect personal data from anyone under 18. Career and internship applicants must be 18 or older. If you believe a child has sent us personal data, please contact us and we will delete it.
Changes
We will update this policy when the website or our practices change, and record each version in the revision history below. Significant changes will be noted at the top of this page.
Contact
Questions about this policy, or about how we handle personal data, can be sent to info@purplegoat.studio. Details of the entity that operates this website are on the Studio page.
Revision history
| Version | Date | Change |
|---|---|---|
| 1.0 | 17 October 2026 | First published version. |