How PageX collects, uses, and protects personal information when you visit pagex.to, when you submit the contact form, or when you engage with the firm. Plain language. If something is unclear, email privacy@pagex.to.
v1 draft — please review with counsel before public launch.
Who we are
"PageX" refers to the firm operating pagex.to, based in Delhi NCR, India. The data controller for this policy is PageX. Contact at privacy@pagex.to.
What we collect
We collect data in three contexts only.
1. Contact form. When you submit the form at /contact, we collect your name, email, and one-sentence message. Submission is voluntary.
2. Server logs. Our hosting provider (Vercel) retains request logs containing IP, timestamp, response status, and user-agent. Logs exist for security, abuse prevention, and uptime monitoring.
3. Privacy-friendly analytics. Cookieless, GDPR-compliant analytics that record aggregated visit data without persistent identifiers. No advertising trackers.
How we use what we collect
Contact-form data is used solely to respond to your message and, if you become a client, to deliver the engaged service. Server logs keep the site secure and operational. Analytics help us understand what visitors find useful.
We do not sell or rent your information. We do not use your contact form submission to train AI models.
Third-party processors
The following processors handle your data on our behalf:
- Vercel — hosting, edge functions, server logs.
- Resend — transactional email delivery for contact-form responses.
- Cloudflare Turnstile — bot detection on the contact form.
Retention
Contact-form submissions are retained in our operator inbox for up to 24 months from last contact, then deleted. Active client records are retained for the duration of the engagement plus the legally required period for financial and tax records under Indian law (currently 8 years for accounting records).
Server logs are retained per Vercel's standard policy (typically 30 days). Analytics are aggregated and contain no identifiers; they are retained indefinitely in aggregate.
Your rights
Under applicable data-protection law — including GDPR and the Indian Digital Personal Data Protection Act, 2023 (DPDP) — you may access, correct, erase, object to processing of, or receive a portable copy of your personal data.
To exercise any of these rights, email privacy@pagex.to. We'll respond within 30 days.
Cookies
The PageX site does not set tracking cookies. Strictly necessary session-management cookies may be set by our hosting and bot-protection providers; these are not used for tracking.
International transfers
Because our processors operate global infrastructure, your data may be processed outside the country you connect from. Where transfers fall under GDPR jurisdiction, we rely on standard contractual clauses and the processor's own transfer safeguards. Where transfers fall under the Indian DPDP Act, we rely on the framework permitted by that Act.
Changes to this policy
We will update the Last updated date when we make material changes. We will not retroactively narrow the rights described above.
Contact
Privacy questions, requests, or complaints: privacy@pagex.to.