In short: we collect only what you choose to send us (for example an enquiry on WhatsApp or email) and what we need to deliver work you hire us for. We do not use analytics or advertising trackers, we do not sell personal data, and you can ask us to see, correct or delete your data at any time by writing to hello@sleekauralab.com.
This policy explains how SleekAura Lab handles personal data when you visit sleekauralab.com (including bgpl.sleekauralab.com), contact us, or work with us. It is written to meet the notice requirements of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the rules made under it.
Who we are
SleekAura Lab ("we", "us") is a creative studio, growth agency and AI automation practice based in Kolkata, West Bengal, India. SleekAura Lab is the name under which a small team of independent professionals works together.
The Data Fiduciary under the DPDP Act (the person who decides why and how the personal data described here is processed) is Ayushmaan Gupta, operating as SleekAura Lab.
- Email: hello@sleekauralab.com
- Phone / WhatsApp: +91 6290 558 070
- Location: Kolkata, West Bengal, India
What we collect and why
| When | Personal data | Why we use it | Basis |
|---|---|---|---|
| You use the project brief form | Name, email, service of interest, message | The form runs only in your browser. It prepares a message; nothing is sent to us or stored until you choose to send it by WhatsApp or email. | Not collected by the form itself |
| You contact us (WhatsApp, email, phone, social media) | Name, contact details, the content of your message, any files you share | To reply, understand your project, prepare a proposal and follow up on it | Data you voluntarily gave us for that purpose (DPDP Act s.7(a)); you can tell us at any time to stop |
| You hire us | Contact and billing details (name, business name, address, GSTIN if you have one, payment records), project materials, and access you give us to accounts such as social media or ad platforms | To deliver the agreed services, invoice, keep accounts and meet tax and legal obligations | Your consent when engaging us, and compliance with law (s.7) |
| We film or photograph for a client | Images, video and voice of people at shoots and events | To produce the content the client commissioned | Consent of the people featured, arranged with our client (see Terms) |
| You visit the website | IP address, browser and device details, pages requested, error reports | Processed by our hosting provider, Cloudflare, to deliver pages, keep the site secure and stop abuse. We do not run analytics, profiling or advertising trackers. | Necessary to provide the website securely |
We do not ask for, and ask you not to send us, sensitive information such as financial account passwords, health information or government ID numbers unless it is genuinely needed for an engagement (for example your GSTIN for your own accounts).
BGPL live scoring
We run the live scoring platform for the Bengal Gully Premiere League (BGPL) as its scoring partner.
- Players and teams: player names, team names and match performance (runs, wickets, dismissals, commentary) are entered by the tournament's scorers and shown publicly on the fan page, stadium screen and scorecards. This information is provided by the tournament organisers, who are responsible for informing players and obtaining their consent (and a parent's or guardian's consent for any player under 18).
- Removal: a player (or their parent or guardian) can ask us to remove or anonymise their name by writing to hello@sleekauralab.com; we will do so and inform the organisers.
- Scorer accounts: invited scorers sign in with an email address and password. The account and sign-in session are managed by Supabase (our database provider). Passwords are stored only in hashed form; we cannot see them.
- Fans watching scores are not asked for any personal data.
Cookies and storage
We use only strictly necessary storage (to remember your cookie choice, to keep scorers signed in, and security cookies set by Cloudflare). Embedded YouTube videos, which can set Google cookies, load only if you allow them. Details are in our Cookie Policy, and you can change your choice any time with Cookie settings.
Who we share it with
We do not sell or rent personal data. We share it only with service providers who process it for us (our "Data Processors") or where the law requires:
- Cloudflare, Inc.: website hosting, content delivery and security.
- Supabase, Inc.: database and sign-in for the BGPL scoring platform.
- Google LLC (YouTube): embedded videos and video thumbnails, only when shown or allowed by you.
- Unsplash: some website images are loaded from its servers, which see your IP address.
- Meta (WhatsApp) and email providers: when you choose to message us through them, their own privacy policies apply to that message.
- Platforms you ask us to work on (for example Google Ads, Meta Ads, social media accounts), under their terms.
- Professional advisers (accountants, lawyers) and authorities, when needed to meet legal obligations or protect our rights.
Data outside India
Some of our providers store or process data outside India. The DPDP Act allows this except to countries the Government of India restricts; we will stop any transfer to a country that is restricted.
How long we keep it
- Enquiries that do not lead to work: up to 24 months after our last conversation, then deleted.
- Client records, invoices and contracts: for as long as Indian tax and company laws require (currently up to about eight years), then deleted.
- Project materials and account access: access is removed when the engagement ends; materials are kept only as agreed in the engagement.
- BGPL match data: kept as the tournament's public record until the organisers ask us to remove it or a player asks for their name to be removed.
- Scorer accounts: until the account is removed at the organisers' or scorer's request.
- Website technical logs: short periods set by Cloudflare for security purposes.
When you withdraw consent or the purpose ends, we delete your data unless a law requires us to keep it.
Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with;
- Correction, completion and updating of inaccurate or incomplete data;
- Erasure of data we no longer need or for which you withdraw consent;
- Withdraw consent at any time, as easily as you gave it (withdrawal does not affect processing already done);
- Grievance redressal (see Grievances and complaints); and
- Nominate another person to exercise these rights if you die or become incapable.
To use any of these rights, email hello@sleekauralab.com with the subject "Data request". We may ask you to confirm your identity. We aim to respond within 30 days, and in any case within the time allowed by the DPDP rules. Under the Act you also have duties, including not impersonating anyone and not making false or frivolous complaints.
Grievances and complaints
If you have a concern about how we handle your personal data, contact the person responsible for answering on our behalf:
- Ayushmaan Gupta, Data Fiduciary, SleekAura Lab
- Email: hello@sleekauralab.com (subject: "Privacy grievance")
- Phone: +91 6290 558 070
We will acknowledge your grievance and resolve it within the period set by the DPDP rules (not more than 90 days). If you are not satisfied after using this process, you may complain to the Data Protection Board of India.
Children
Our website and services are meant for adults and businesses. We do not knowingly collect personal data from anyone under 18 without verifiable consent from a parent or guardian, and we do not track, profile or target advertising at children. If you believe a child has sent us personal data, contact us and we will delete it. For BGPL player information, see BGPL live scoring.
Security and breaches
We use reasonable security measures, including encrypted connections (HTTPS), access controls and least-privilege access for our team, database rules that let only invited scorers change match data, and providers with strong security practices. No system is completely secure. If a personal data breach occurs, we will inform affected people and the Data Protection Board of India as the DPDP Act and rules require.
Changes to this policy
We may update this policy as our services or the law change. The "Last updated" date at the top shows the latest version. If a change significantly affects how we use your data, we will make it clear on this page and, where appropriate, ask for your consent again.