Privacy policy

The short version

We collect what you type into the enquiry form and nothing else. There are no advertising trackers on this site, we do not sell or rent your information, and you can ask us to delete it at any time by emailing contact@ryha.in.

What we collect

When you submit the contact form, we store what you chose to enter:

• Your name and email address — needed to reply.
• Company name and phone number, if you provide them. Both are optional.
• The problem you described, plus any budget, timeline and divisions you selected.
• The page that referred you, so we know which part of the site brought you here.

We do not ask for and do not want payment details, identity documents, or anything about your customers. Please do not put sensitive personal information in the message field.

Where it is stored

Enquiries are stored in our database, hosted on Supabase, in a region we select. Access is restricted to named accounts with individual logins and multi-factor authentication. Passwords are only ever stored as bcrypt hashes, never in readable form.

Notification email is delivered through Resend so that a person sees your enquiry the same day. That means your message passes through their service in order to reach our inbox.

Who we share it with

Where a specialist partner company delivers part of an engagement, we share the information they need for that work and nothing beyond it, and they are bound by the same confidentiality terms we are. This is set out in full in how we deliver. If you would rather a piece of work stayed entirely in-house, ask and we will tell you honestly whether that is possible.

We do not sell, rent or trade your information. We disclose it otherwise only where the law requires it.

Analytics and cookies

This site sets one cookie, and only for people signing in to the admin panel: a session cookie that keeps you logged in. It is httpOnly and signed, and it is not used for tracking. There are no advertising or cross-site tracking cookies, so there is no consent banner to dismiss.

If we later add privacy-respecting analytics to understand which pages are useful, we will say so here before turning it on.

How long we keep it

Enquiries are kept while there is a realistic prospect of working together, and for as long afterwards as our records and tax obligations require. If an enquiry goes nowhere, tell us and we will delete it.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, or send it to you in a portable form. Email contact@ryha.in and we will action it within 30 days, usually much sooner. We will not ask you to justify the request.

Security

The database enforces row-level security, the public API roles are revoked, and every administrative action requires an authenticated session. Our own security division reviews this site the same way it reviews client work. If you find a vulnerability, email contact@ryha.in and we will respond — we will not threaten anyone who reports one in good faith.

Changes

If this policy changes in a way that affects what we do with your information, we will update the date at the top of this page. Material changes will be described here rather than quietly edited in.