Privacy Policy

1. Introduction

Designit ("we", "our", "us") is a research-led product design studio operating at designit.co.in. We provide UI/UX design, UX research, product strategy, and design systems services to startups and enterprises globally.

This Privacy Policy explains what personal data we collect when you visit our website or engage with our services, why we collect it, how we use it, and what rights you have over it.

By using this website, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

2. Information We Collect

Information you provide directly

When you fill in our contact form, project intake form, or book a call via Calendly, we may collect:

• Your name
• Email address
• Company name and website
• Project description and budget range
• Phone number (if provided)

Information collected automatically

When you browse our site, we automatically collect:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time on page, and scroll depth
• Referring URL and UTM parameters
• Device type (desktop / mobile / tablet)
• Session duration and interaction events

Information from third-party sources

If you connect with us via LinkedIn or other platforms, we may receive basic profile information consistent with your privacy settings on those platforms.

3. How We Use Your Information

We use the information we collect to:

• Respond to enquiries — reply to project requests, proposals, and general questions
• Deliver services — share project files, receive feedback, and manage ongoing engagements
• Improve our website — understand which pages perform well and where visitors drop off
• Marketing communications — with your consent, send relevant updates about our work or insights (you can unsubscribe at any time)
• Legal compliance — meet obligations under applicable Indian and international law
• Fraud prevention — detect and prevent spam, bot traffic, or malicious activity

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and analyse how our site is used. These fall into three categories:

Strictly necessary

Required for the site to function. No personal data is collected for marketing purposes via these cookies.

Analytics

We use PostHog and ContentSquare to understand visitor behaviour — pages viewed, scroll depth, click patterns, and session recordings. This data is aggregated and used solely to improve site experience.

Marketing / tracking

Google Ads conversion tags and remarketing pixels may place cookies if you visit our site via a paid ad. These help us measure ad effectiveness and show relevant ads to people who have shown interest in our services.

5. Third-Party Services

We use the following third-party tools, each with their own privacy policies:

Calendly

Used for scheduling discovery calls. When you book a call, Calendly collects your name, email, and meeting details under their own Privacy Policy.

ContentSquare

Session analytics and heatmap tool. Records anonymised interaction data including clicks, scrolls, and page journeys. See their Privacy Centre.

PostHog

Product analytics platform used to track events and user journeys on our website. Data is processed under PostHog's Privacy Policy.

Google Analytics / Google Ads

Used to measure website traffic and ad campaign performance. Data is processed by Google under their Privacy Policy. We do not share personally identifiable data with Google Ads.

Leadsy.ai

Visitor intent identification tool. May identify company-level (not individual) data from IP addresses. See their Privacy Policy.

6. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share it only in the following circumstances:

• Service providers — tools listed in Section 5, acting as data processors on our behalf
• Legal obligation — if required by Indian law, court order, or regulatory authority
• Business transfer — in the event of a merger, acquisition, or sale of assets, your data may be transferred with appropriate notice
• With your consent — for any other purpose, we will ask first

7. Data Retention

We retain your data only as long as necessary for the purposes described:

• Enquiry / contact form data — up to 2 years from last contact
• Project-related data — up to 5 years for record-keeping and dispute resolution
• Analytics data — as per each tool's default retention settings (typically 13 months for Google Analytics)
• Session recordings — up to 12 months in ContentSquare

You may request deletion of your data at any time (see Section 9).

8. International Data Transfers

Designit is based in India. Some of our third-party tools (including Google, Calendly, and PostHog) process data on servers in the United States or European Union.

When data is transferred internationally, we rely on standard contractual clauses, adequacy decisions, or the tool provider's own compliance mechanisms (such as EU-US Data Privacy Framework participation) to ensure your data remains protected.

By using our website, you acknowledge that your data may be processed outside your country of residence, subject to appropriate safeguards.

9. Your Rights

Depending on where you are located, you may have the following rights over your personal data:

All users (India — DPDP Act 2023)

• Right to access — know what data we hold about you
• Right to correction — request inaccurate data be corrected
• Right to erasure — request deletion of your data
• Right to nominate a representative for data management

EU / UK users (GDPR / UK GDPR)

• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with your local supervisory authority

US users (CCPA / California)

• Right to know what personal information is collected and how it's used
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

10. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption on all pages
• Access controls limiting who can view enquiry data
• Regular review of third-party tool security practices

No method of transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

11. Children's Privacy

Our website and services are intended for business professionals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us immediately at contact@designit.co.in and we will delete it promptly.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or applicable law. When we do, we will revise the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact

For any questions, requests, or concerns about this Privacy Policy or how we handle your data, please reach out:

• Email: contact@designit.co.in
• Website: designit.co.in
• Response time: Within 30 business days

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country.