01
Who we are
ReformTech Solutions is a software development company registered in India, operating remotely from Ahmedabad, Gujarat. We build software for clients in India, the United States, the United Kingdom and elsewhere.
For the purposes of the UK and EU General Data Protection Regulation we are the data controller for personal data submitted through this website. For India's Digital Personal Data Protection Act we are the data fiduciary.
Registered name
ReformTech Solutions
Address
A-902 Kavisha Amara, 150 ft VIP Main Rd, nr. Auda Auditorium, Ahmedabad, Gujarat 380058, India
Contact for data questions
info@reformtech.in
02
What we collect, and when
We only collect personal data that you enter into a form yourself. There is no tracking pixel, no data broker, no purchased list, and no attempt to identify you from your IP address.
Contact form
Name, company, email address, phone number, the service you selected, budget range and your project brief. Also your IP address and browser user agent, recorded for spam prevention and rate limiting.
Careers form
Name, email address, phone number, portfolio or repository link, the role applied for, your covering note and your CV file.
Insights subscription
Email address only.
Insights topic votes
A count against a topic, plus your IP address for rate limiting. Votes are not linked to any identity.
03
Why we process it
Under GDPR we rely on two lawful bases. For enquiries and job applications the basis is legitimate interest, specifically responding to a request you made of us. For the Insights list the basis is your consent, which you give by submitting the form and can withdraw at any time.
▸Enquiries: to reply to you, prepare a scope and price, and keep a record of what was discussed.
▸Applications: to assess you for the role, arrange interviews, and keep your details on file if you ask us to.
▸Subscription: to send you one email per published article, and nothing else.
▸Technical data: to prevent automated abuse of the forms.
04
Where your data is stored, and who processes it
This website runs on Cloudflare's network. Form submissions are stored in Cloudflare D1, a database, and CV files in Cloudflare R2, private object storage. Neither is publicly accessible.
We use a small number of third-party services to operate the site. Each is listed below with what it receives. We do not sell or share your data with anyone else, and we do not use it for advertising.
Cloudflare
Hosting, form storage and CV storage. Data is held in Cloudflare's network, with the storage bucket provisioned in the Asia-Pacific region.
Cloudflare Turnstile
Bot check on the contact, careers and Insights forms. It is not an advertising cookie.
Resend
Sends the notification and acknowledgement emails. Receives the contents of your submission in order to deliver it. Operates from the United States.
PostHog
Website analytics, configured without cookies and without building a profile of you. Receives page paths and anonymous event counts, not form contents.
Google Workspace
Our email. Once an enquiry reaches our inbox it is stored there, as any email would be.
05
International transfers
We are based in India and use service providers in the United States and Europe, so if you are in the UK or the EU your data leaves your jurisdiction when you contact us.
Our providers offer standard contractual clauses and data processing agreements for this purpose, and we rely on those. If your organisation has specific requirements about where data may be held, tell us before sending anything and we will work within them.
06
How long we keep it
We delete data rather than accumulating it. If you would like something removed earlier than the periods below, ask and we will do it.
Enquiries that did not become projects
24 months, then deleted
Enquiries that became projects
Kept for the duration of the engagement and 7 years after, as commercial records
Job applications and CVs
12 months, then deleted
Subscription email addresses
Until you unsubscribe
IP addresses used for rate limiting
30 days
Analytics events
Up to 12 months, and never identifiable to you
07
Cookies and analytics
This site sets no advertising cookies and no third-party tracking cookies. Our analytics is configured to run without cookies and without creating a persistent profile, which is why you are not being asked to accept a consent banner.
The events we record are contact form submitted, application submitted, insight subscribed, insight topic voted, and service page CTA clicked. They do not include the contents of your message or your CV.
One exception: if you vote on a topic on the Insights page, a value is stored in your browser's local storage so the page remembers you have voted. It stays on your device, is not sent to us as an identifier, and clearing your browser data removes it.
08
Your rights
Whether you are in the UK, the EU, India or elsewhere, you can ask us to do any of the following, and we will act on it within 30 days. There is no charge and you do not need to give a reason.
▸Tell you what we hold about you, and provide a copy.
▸Correct anything that is wrong.
▸Delete it. If you applied for a job and would rather we did not keep your CV, this is the one to use.
▸Stop using it for a particular purpose, or object to our processing it at all.
▸Withdraw consent for the Insights list, either by replying to any email or by using the unsubscribe link.
▸Complain to your data protection authority. In the UK that is the ICO; in India, the Data Protection Board.
09
Security
Form submissions travel over HTTPS. CV files are stored in private object storage under randomly generated keys, are not served publicly, and are never placed in a web-accessible directory. Access to the database and storage is limited to the people who need it.
We are a small team and we do not claim security certifications we have not been audited for. If your organisation has its own security or data processing requirements, raise them before engaging us and we will discuss what is workable.
10
Changes to this policy
If we add a service that processes personal data, or change a retention period, we will update this page and change the date at the top. Material changes affecting people already on the Insights list will be sent to that list.
Questions, requests or complaints about this policy or the data we hold should be sent to info@reformtech.in.