Andifo emblem
Andifoby Anjaneya Digital Forge
LEGAL DRAFT // COMPLIANCE

Privacy Policy

LAST UPDATED: OCTOBER 2026 • STATUS: DRAFT FOR LEGAL REVIEW
Notice: This document represents a transparent draft privacy policy template. Before commercial publication in specific jurisdictions (e.g. European Union GDPR, California CCPA, or India DPDP), it should be reviewed by qualified corporate legal counsel.

1. Legal Entity & Controller Identification

This Privacy Policy governs the processing of personal data collected via the website located at https://www.andifo.agency operated by:

Legal Entity: Andifo (Operating Agency Placeholder)
Privacy Inquiries / DPO: contact@andifo.agency

2. Information We Collect

We collect information strictly necessary to provide agency communications and evaluate inbound project briefs:

  • Direct Contact Submissions: When you complete our contact or audit request forms, we collect your name, business email address, company name, website URL, approximate budget, and project description.
  • Telemetry & Usage Logs: Minimal server logs capturing anonymized IP addresses, browser user agent, referring URLs, and request timestamps to monitor server health and security attacks.
  • Cookie Preferences: Stored locally in your browser (via localStorage) to honor your consent choices.

3. Purposes and Legal Basis for Processing

We process your personal information exclusively for the following purposes:

  • To evaluate commercial project feasibility and respond to your direct inquiries (Contractual necessity & Legitimate interest).
  • To deliver requested audit teardowns and schedule video strategy calls.
  • To ensure edge infrastructure security and prevent malicious spam or automated attacks.

We do not sell, rent, monetize, or trade visitor or client personal data to any third-party data broker.

4. Third-Party Service Providers (Subprocessors)

We engage carefully vetted infrastructure providers to deliver our web experiences:

  • Hosting & Edge CDN: Cloudflare / Vercel (Edge server caching, DDoS mitigation, and SSL termination).
  • Meeting Scheduling: Cal.com / Calendly (When you explicitly choose to book a video meeting).
  • Telemetry / Analytics: Privacy-first analytics configured with anonymized IP telemetry where consent is granted.

5. Data Retention & Security Practices

Inquiry submissions are retained in our secure CRM only for the duration required to evaluate the commercial relationship (typically 12 months from last contact, unless an active client agreement is executed). We enforce TLS 1.3 encryption in transit, strict least-privilege credential access, and MFA across all agency systems.

6. Your Data Subject Rights

Depending on your geographic location, you hold the legal right to:

  • Request access to copies of your personal data processed by us.
  • Request rectification of inaccurate or outdated information.
  • Request complete erasure (deletion) of your contact records.
  • Restrict or object to processing based on legitimate interest.

To exercise any of these rights, contact our privacy coordinator at contact@andifo.agency. We respond to verified requests within 30 days.

7. Policy Modifications

We reserve the right to update this policy periodically to reflect evolving regulatory frameworks or architectural enhancements. Any updates will be published to this URL with a revised timestamp.