Skip to main content
Legal

Privacy Policy

Last updated: 08 July 2026

This Privacy Policy explains how Sanjoy Kumar Malik ("I", "me", "my") handles personal data in connection with the website www.sanjoykumarmalik.com (the "Site") and the Fractional CTO services offered through it. I am based in India and act as the data fiduciary / controller for the personal data described below.

If you have any questions, contact me at hellosanjoykumarmalik@gmail.com.

What this Site does — and doesn't — collect​

This Site is intentionally privacy-light. It sets no tracking, advertising, or analytics cookies, runs no analytics or advertising scripts, and makes no page-load requests to third-party servers. Fonts are self-hosted, so your visit is not shared with a font provider. The only browser storage used is a local setting that remembers your light/dark theme preference; this is functional and is not used to track you.

I collect personal data only when you choose to give it to me:

  • When you contact me or book a call — by email or through the contact details on the Site — I receive the information you send, such as your name, email address, and the contents of your message.
  • Server logs — my hosting provider may automatically record standard technical information (such as IP address, browser type, and pages requested) for security and to keep the Site running. This is ordinary infrastructure logging, not behavioural tracking.

I do not knowingly collect sensitive personal data through the Site, and I do not sell or rent personal data to anyone.

How I use personal data​

I use the information above only to:

  • respond to your enquiries and communicate with you;
  • schedule, prepare for, and hold calls and meetings;
  • provide, and discuss the scope of, my services;
  • keep the Site secure and operational; and
  • comply with legal obligations.

Depending on the situation, I rely on your consent (for example, when you contact me or book a call), the need to take steps at your request before entering into an engagement, my legitimate interests in operating and securing the Site, and compliance with law. Where you are in the EU/UK, these correspond to the lawful bases under the GDPR / UK GDPR.

Who I share data with​

I share personal data only with service providers who help me run the Site and my practice, acting on my instructions — for example, my hosting provider, my email provider, and the scheduling tool used for bookings. I may also disclose data where required by law. I do not sell or share personal data for advertising.

International transfers​

I operate from India, and some of the service providers above may store or process data on servers located in other countries. Where personal data is transferred across borders, I take reasonable steps to ensure it remains protected consistent with applicable law.

How long I keep data​

I keep personal data only as long as needed for the purpose it was provided — typically the duration of our correspondence or engagement and a reasonable period afterwards — unless a longer period is required by law, after which it is deleted or anonymised.

Your rights​

Subject to applicable law, you may request to access, correct, or delete your personal data, withdraw consent, or object to or restrict certain processing. You may also nominate another person to exercise these rights on your behalf where the law allows. To make a request, email hellosanjoykumarmalik@gmail.com and I will respond within a reasonable time.

  • India (DPDP Act, 2023): you have rights of access, correction, and erasure, the right to grievance redressal, and the right to nominate. My contact above serves as the channel for these requests and grievances.
  • EU / UK (GDPR / UK GDPR): you additionally have the right to data portability and the right to lodge a complaint with your local supervisory authority.
  • United States: I do not sell or share personal data; where state law applies, you may exercise the rights it grants by contacting me.

Children​

The Site and my services are intended for businesses and professionals and are not directed at children under 18. I do not knowingly collect children's personal data.

Changes to this policy​

I may update this policy from time to time. The "Last updated" date above shows when it last changed; material changes will be reflected here.

Contact​

Questions, requests, or grievances: hellosanjoykumarmalik@gmail.com.