Privacy policy

We take your privacy and security very seriously and aim to be transparent about how we handle your data. You can read our practices below, and we welcome questions or feedback by email at hello@smallbaydigital.com.

This privacy notice is issued by SmallBay Digital LLP ('SmallBay Digital', 'Company', 'we', 'us', or 'our'). It describes how and why we collect, store, use, and share ('process') your information when you:

• Visit https://smallbaydigital.com or any other website of ours that links to this privacy notice
• Submit an enquiry, book a discovery call, request a workflow audit, or apply to one of our programmes
• Engage with us as a client, prospective client, or partner, including through sales, marketing, or events

Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at hello@smallbaydigital.com.

Summary of key points

We are a business-to-business services firm. We do not operate an online store, we do not sell products through this website, and we do not take payments on it. The information we collect is what you choose to send us so that we can respond to you and deliver our services.

What personal information do we process? Primarily your name, work email address, company name, phone number (if you provide one), and whatever you write in your message. We also process limited technical information such as IP address and browser type, which is standard for any website.

Do we process sensitive personal information? No. We do not collect or process special-category data such as health, biometric, or financial account information through this website.

Do we sell your information? No. We do not sell, rent, or trade personal information, and we do not share it for third-party advertising.

How do we keep your information safe? We use organisational and technical measures to protect personal information. However, no transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security.

How do you exercise your rights? Email us at hello@smallbaydigital.com. We will consider and act on any request in line with applicable data protection law.

1. What information we collect

Information you give us

We collect information you submit voluntarily through the forms on this website:

• Contact form: your name, company name, email address, the service you are interested in, and your message.
• Programme application and waitlist forms: your name, email address, phone number, company name, and the type of business or engagement you are enquiring about.
• Discovery call bookings: the details you enter when scheduling, which are handled by our booking provider.

Please do not send us confidential or sensitive information through these forms. If we go on to work together, we will agree in the engagement contract how any client data is handled.

Information collected automatically

When you visit the site, our hosting provider and analytics tools receive standard technical information such as your IP address, browser type and version, device type, referring page, and the pages you view. This is used to keep the site secure and to understand aggregate usage. Analytics is only loaded after you accept cookies.

2. How we use your information

We process your information in order to:

• Respond to your enquiry and provide the information you asked for
• Scope, quote, deliver, and support the services you engage us for
• Send you service-related communications about an active engagement
• Send marketing communications where you have asked for them. You can opt out at any time
• Maintain the security and integrity of our website and systems
• Meet our legal, accounting, and regulatory obligations

We rely on your consent, on our legitimate interest in operating and promoting our business, on the performance of a contract with you, and on compliance with legal obligations, as the circumstances require.

3. Consent

How do you get my consent?

When you send us your details through a form on this site, we take that as your consent to use them to respond to you and to discuss a potential engagement. If we want to use your information for a separate purpose, such as marketing, we will ask you or give you a clear way to decline.

How do I withdraw my consent?

You can withdraw consent at any time by emailing hello@smallbaydigital.com. You can also reject non-essential cookies using the banner shown on your first visit.

4. Service providers we share information with

We do not sell your personal information. We share it only with providers that help us operate the site and our business, and only to the extent they need it:

• Hosting and platform: our website and its form endpoints are hosted on Vercel.
• Transactional email: form submissions are delivered to our inbox using Resend.
• Customer relationship management: form submissions are also copied into our own CRM, hosted on Supabase, so we can follow up and keep a record of the conversation. The same retention periods apply.
• Voice conversations: if you start a conversation with our voice concierge or a voice agent demo, your voice and the transcript are processed by ElevenLabs to run it. Nothing is recorded unless you start a conversation, and you can end it at any time.
• Analytics: Google Analytics and Vercel Analytics, used to understand aggregate site usage. Google Analytics is blocked until you accept cookies.
• Scheduling: Cal.com, used for booking discovery calls.
• Forms: Fillout, used for our workflow audit request form.
• Fonts: Google Fonts, which receives a request from your browser in order to serve the typeface.

These providers have their own privacy policies, and we recommend reading them. We may also disclose information where we are required to do so by law, or to establish, exercise, or defend legal claims.

5. Payments

We do not take payments through this website and we do not collect or store card details on it. Where an engagement is paid for, invoicing and payment are handled separately under the terms of the signed proposal or contract.

6. International transfers

We are an Indian limited liability partnership and serve clients in many countries, so information crosses borders. Our providers process data in the United States and the European Union. Where your data leaves the UK or the European Economic Area, the transfer rests on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or on the provider's adequacy decision. Where Indian law applies, we transfer only to countries not restricted by the Government of India under the Digital Personal Data Protection Act 2023.

7. How long we keep information

We keep information only as long as it has a job to do:

8. Links to other sites

Our site links to third-party websites, including our booking, form, and social profiles. We are not responsible for the privacy practices of those sites and encourage you to read their privacy statements.

9. Security

To protect your personal information we take reasonable precautions and follow industry practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. This includes transport encryption (HTTPS), access controls on our systems, and rate limiting and bot protection on our form endpoints.

10. Cookies

We use a small number of cookies and similar technologies. Essential storage is used to remember your cookie choice and your light or dark theme preference. Analytics cookies are only set if you accept them, and you can reject them without losing access to any part of the site. For more detail, see our cookie policy.

11. Your rights

Wherever you are, you can ask us what we hold about you, have it corrected or deleted, object to or restrict how we use it, receive a copy in a portable format, and withdraw consent. Email hello@smallbaydigital.com and we reply within 30 days, sooner where the law requires it. We never charge for a request and we never treat you differently for making one.

If you are in the UK or the European Economic Area

The UK GDPR and the EU GDPR apply. Our legal bases are consent (forms and analytics), contract (client engagements), legitimate interest (responding to enquiries, securing the site) and legal obligation (accounting records). You may complain to your supervisory authority: in the UK the Information Commissioner's Office, in the EU the authority of your member state. We would rather hear from you first.

If you are in California

We do not sell or share personal information as the CCPA and CPRA define those terms, and we have not done so in the past 12 months. You have the rights to know, delete, correct and limit, and to non-discrimination. Email us to use them.

If you are in India

The Digital Personal Data Protection Act 2023 applies. You may access, correct and erase your data, nominate another person to exercise your rights, and raise a grievance with us. If we do not resolve it, you may approach the Data Protection Board of India. Our grievance contact is hello@smallbaydigital.com.

Client data inside an engagement

When we build for you, we handle your business data as a processor on your instructions, under the data processing agreement that comes with every statement of work. That data stays in accounts you own, we never use it to train AI models, and our access ends when the engagement does. The platforms a build runs on (for example Supabase, Vercel or n8n) are accounts in your name, so those providers process your data under your agreement with them, not ours. The agreement names any provider we use ourselves.

12. Age of consent

Our Services are intended for businesses and for individuals who are at least the age of majority in their state or province of residence. We do not knowingly collect information from children.

13. Changes to this privacy policy

We reserve the right to modify this privacy policy at any time, so please review it periodically. Changes take effect when posted on this page, and we will update the 'last updated' date above. If our business is acquired or merged with another company, your information may be transferred to the new owners so that they can continue to provide services to you under this policy.

Questions and contact information

If you would like to access, correct, amend, or delete any personal information we hold about you, register a complaint, or simply want more information, contact us:

Email: hello@smallbaydigital.com

Phone: +91 99015 71683