Who is responsible for your data
JwithKP is a founder-led IT consulting practice based in Bangalore, Karnataka, India. We decide why and how personal data collected through this website and your enquiries is used. In the language of the Digital Personal Data Protection Act, 2023 (the DPDP Act), we are the “Data Fiduciary” for that data.
Legal entity: JwithKP Technology (IT Consulting).
What we collect
- When you use the contact form: the details you choose to enter, which can include your name, email address, phone number, company name, city, team size, the kind of help you want, timeline, budget range and your message.
- When you email, call or message us on WhatsApp: your name and contact details, what you tell us, and the number or profile WhatsApp shows us.
- When you subscribe to the newsletter: your email address.
- When you visit the website: technical details such as your IP address, browser and device type, which our hosting provider needs to deliver the pages. If you accept analytics cookies, we also see which pages are visited and how people use the site.
- On your own device: small settings such as your light or dark theme, your cookie choice and your Startup IT Checklist ticks are stored in your browser. They stay on your device and are not sent to us.
- If you become a client: see “When we work on your systems” below.
Please do not send passwords, card numbers or government ID numbers through the contact form or email.
Why we use it
- To reply to your enquiry, understand what you need, and prepare advice, an estimate or a proposal.
- To carry out work you have asked us to do, and to stay in touch about it.
- To send the newsletter, if you subscribed to it.
- To understand how the website is used and improve it, if you accepted analytics cookies.
- To keep records and meet legal duties, such as tax and accounting rules.
- To keep the website working and protected from abuse such as form spam.
Where we rely on your consent, which is the newsletter and analytics cookies, you can withdraw it at any time. For enquiries and projects, we use what you voluntarily give us for the purpose you gave it (section 7(a) of the DPDP Act), and we stop if you tell us you no longer want us to. We do not sell your personal information, and we do not use your enquiry details for unrelated marketing.
Who we share it with
We share personal data only with providers that help us run the website and talk to you, and only as far as they need to:
- FormSubmit (formsubmit.co) delivers contact-form and newsletter messages to our email inbox.
- Google provides Tag Manager and Analytics (analytics storage stays off unless you accept).
- Cloudflare hosts the website and, like any web host, may log technical details such as IP addresses to deliver and protect it.
- The email and messaging services we use to reply to you, including WhatsApp if you message us there.
- Authorities and advisers, where the law requires it or we need professional advice.
The site’s fonts are served from our own domain, so no font provider sees your visit. Some of the providers above process data on servers outside India.
How long we keep it
We keep personal data only for as long as we need it for the purpose you gave it, or for as long as the law requires, for example for tax and accounting records. Newsletter email addresses are kept until you unsubscribe.
Cookies and analytics
The website uses Google Tag Manager and Google Analytics with Google Consent Mode v2 to measure traffic, page engagement and technical performance. A cookie banner lets you choose “Accept All” or “Necessary Only”. Until you accept, analytics storage is set to denied and analytics cookies are not stored on your browser. You can change your choice at any time with “Cookie Settings” in the footer of any page.
Newsletter
If you subscribe, you agree to receive our newsletter by email, about once a month, with practical IT and security tips for founders and small teams. We use your email address only for that. You can unsubscribe at any time by emailing us, and we will stop sending and remove your address.
Your rights
Under the DPDP Act you can:
- ask for a summary of the personal data we process about you and what we do with it, and who we have shared it with (section 11);
- ask us to correct, complete or update it (section 12);
- ask us to erase it, unless we need it for the purpose you gave it or the law requires us to keep it (section 12);
- withdraw your consent at any time, as easily as you gave it (section 6);
- use our grievance process below (section 13); and
- nominate someone to exercise your rights if you die or become unable to do so (section 14).
To make a request, write to us using the contact details below, preferably from the email address you used with us so we can find your details. Most of the DPDP Act’s duties for businesses are being phased in over eighteen months from the publication of the DPDP Rules, 2025 on 13 November 2025. We are writing this policy to follow them already.
Questions, requests and grievances
To ask a question about your personal data, make a request under “Your rights” above, or raise a concern, contact:
- Email: info@jwithkp.com
- Phone: +91 79829 12207
We will acknowledge your message and reply within a reasonable time. Please raise your concern with us first. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
When we work on your systems
If you hire us, we may get access to your systems and to personal data you hold, such as details of your staff or customers. That data stays yours. We use it only to do the work we agreed in writing. In that case you decide why and how the data is used, and we act on your behalf as a processor. When the project ends, you keep your configurations, runbooks and admin access, and credentials are handed over securely.
How we protect your information
We take reasonable steps to protect personal data, including serving this website over HTTPS and the practices described on our Security Practices page. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.
Children
Our services are for businesses. We do not knowingly collect personal data from anyone under 18. If you think a child has sent us their details, write to us and we will delete them.
Changes to this policy
We may update this policy as our services, providers or the law change. The effective date at the top shows when it was last updated.