Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data Refactrix collects, why, how long we keep it and the choices you have. It covers our website refactrix.com, our contact form, the business outreach emails we send and the social media accounts we post from.

Who we are

Refactrix is a software engineering studio operated by Mohit Jeswani, an individual based in India (“Refactrix”, “we”, “us”). We are responsible for the personal data described in this policy. For anything about privacy, including requests to exercise your rights, email mohit.j@refactrix.com.

What we collect and why

When you contact us

If you use the contact form, we collect your name, email address, company (optional) and the project details you write. We check that your email domain can receive mail, store your message, and send a copy to our own inbox so we can reply.

We use this only to respond to your enquiry and, if you go on to work with us, to manage that relationship. Our legal basis is taking steps at your request before a possible contract, and our legitimate interest in answering enquiries.

When you visit the website

  • Hosting logs. Our hosting provider (Vercel) processes technical data such as your IP address, browser and the pages requested, to deliver the site and keep it secure.
  • Privacy-friendly analytics. Vercel Web Analytics counts page views in aggregate. It does not use cookies and does not track you across other websites.
  • Google Analytics (only with your consent).If you click “Accept” on our cookie banner, we load Google Tag Manager and Google Analytics 4 to understand how visitors use the site. Google sets cookies to do this (see our Cookie Policy). If you decline, these are not loaded. Our legal basis is your consent, which you can withdraw at any time.
  • Images. Some blog images are loaded directly from Unsplash and from our file host (UploadThing). Your browser therefore shares your IP address with them when it loads those images.

Business outreach emails

We occasionally email businesses we think could benefit from our services, typically small businesses in the United Kingdom. To do this we collect, from public sources such as business listings on Google Maps and the business's own website:

  • the business name, website, phone number, address and category;
  • a business contact email address published on that website;
  • an automated review of the public website (for example whether it has a page title or a mobile layout), which we use to personalise the email.

Every email is reviewed and approved by a person before it is sent, identifies us, and includes an unsubscribe link. Our legal basis is our legitimate interest in promoting our services to businesses. You can object at any time, and we will stop.

If you unsubscribe, we keep your email address on a suppression list so that we never contact it again. That is the only reason we keep it.

Social media

We publish posts about our blog articles on platforms such as LinkedIn, Instagram and X. We do not collect personal data about people who view or interact with those posts beyond what each platform shows to any account holder. Each platform's own privacy policy applies to your use of it.

Cookies

We only use strictly necessary storage (your theme and cookie choice) unless you accept analytics cookies, in which case Google Analytics sets its own cookies. Our Cookie Policy lists every cookie, what it does and how long it lasts. You can change your choice at any time: .

Who we share data with

We do not sell personal data. We share it only with providers that process it on our behalf:

  • Vercel — website hosting and cookieless analytics
  • Supabase — database for enquiries and outreach records
  • Resend — delivers contact form notifications to our inbox
  • Hostinger — our email provider, which sends outreach emails
  • GitHub — runs our automated outreach tasks
  • Groq — AI service that receives business names and public website text to review websites and draft outreach emails
  • Google — Tag Manager and Analytics, only if you consent
  • UploadThing and Unsplash — image hosting

We may also disclose data where the law requires it, or to protect our rights or the safety of others.

International transfers

We are based in India and our providers operate in several countries, including the United States and the European Union. When personal data from the United Kingdom or the European Economic Area is transferred to countries without an adequacy decision, we rely on the safeguards our providers offer, such as standard contractual clauses.

How long we keep data

  • Enquiries: as long as needed to respond and to manage any work that follows, then deleted.
  • Outreach records: deleted 12 months after we last emailed the business, or 12 months after we collected the details if we never emailed it. Records are kept longer only while we are in an active conversation with the business.
  • Suppression list: kept indefinitely, so that an address that unsubscribed is never contacted again.
  • Analytics: under Google Analytics' retention settings, if you consented.

Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act 2023 and the UK and EU GDPR, you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct, complete or update it;
  • delete it;
  • stop or restrict using it, including objecting to outreach emails at any time;
  • transfer it to you or another organisation, where applicable;
  • withdraw consent you have given, such as for analytics cookies.

Email mohit.j@refactrix.comand we will respond within one month. If you are not satisfied, you can complain to your data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk); in India, the Data Protection Board of India.

Security

Data is encrypted in transit, our databases are accessible only to our own servers, and our admin area is limited to authorised staff. No system is perfectly secure, but we work to protect your data and will act promptly if something goes wrong.

Children

Our website and services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will be highlighted on this page.