Privacy Policy

1. Who we are and what this covers

Xhadow Media (“Xhadow”, “we”, “us”) is a technology and marketing company based in India. This policy explains what personal data we handle when you visit xhadow.in, contact us, apply for a role, or engage us for work, and what you can do about it.

It does not cover our product Klick.ing, which is a separate service with its own privacy policy, and it does not cover other companies’ websites we link to.

We are the data fiduciary for the processing described here. Questions go to hello@xhadow.in.

2. What this website collects

The website itself is deliberately plain. It has no contact form, no account system, no advertising, and no analytics or tracking scripts of any kind. We do not build visitor profiles and we do not sell data to anyone, in any circumstances.

Three things do happen when you load a page:

• Server logs. Our hosting provider records standard request data — IP address, date and time, the page requested, referring page, and browser user agent. This is ordinary web server operation, used for security and troubleshooting.
• A theme preference. If you switch between the light and dark theme, that choice is stored in your browser’s local storage under template.theme. It never leaves your device, it is not a cookie, it is not sent to us, and clearing your browser data removes it.
• Fonts. Our typefaces are served by Google Fonts, so your browser requests them from Google and Google receives your IP address and user agent as part of that request. This is the only third party that receives anything about your visit.

We do not use cookies for analytics, advertising or personalisation.

3. What you give us directly

The contact points on this site are email addresses, so anything we hold about you is what you chose to put in a message. Typically that is your name, email address, employer, and whatever you tell us about your enquiry.

• General and project enquiries to hello@xhadow.in.
• Job applications to careers@xhadow.in, including your CV and anything in it.
• Press and partnership enquiries to media@xhadow.in.

If you become a client, we also hold the contact, billing and project records needed to run the engagement.

4. Why we process it, and on what basis

• To reply to you. You contacted us and a reply is the obvious purpose of doing so.
• To assess a job application. Processing is necessary to take steps at your request before any employment contract.
• To deliver work we have been engaged for, and to invoice for it.
• To keep the site secure and working, which is our legitimate interest and, for logs, a practical necessity.
• To meet legal and tax obligations, where Indian law requires us to keep records.

Where consent is the basis, you can withdraw it at any time, and withdrawing it does not affect anything done beforehand.

5. Who we share it with

We do not sell, rent or trade personal data. We share it only where one of the following applies:

• Service providers who host our website, deliver our email or process payments, acting on our instructions and only for that purpose.
• Professional advisers such as accountants and lawyers, where they need it to advise us.
• Authorities, where we are legally required to disclose, or to establish or defend a legal claim.
• A successor, if the business or part of it is reorganised or acquired, with the same protections carried over.

Where a provider is outside India, we take reasonable steps to ensure the data continues to be protected to a comparable standard.

6. How long we keep it

• Enquiry emails: up to 24 months after the last exchange, unless they relate to an engagement.
• Job applications: up to 12 months, so we can come back to you about a later opening. Tell us if you would rather we deleted yours sooner.
• Client and financial records: for as long as the engagement runs and then for the period Indian tax and company law requires.
• Server logs: a short rolling window, typically weeks rather than months.

When a retention period ends we delete the data or irreversibly anonymise it.

7. Your rights

Under India’s Digital Personal Data Protection Act 2023, and other law where it applies to you, you can:

• ask what personal data we hold about you and get a copy of it,
• have inaccurate or incomplete data corrected or completed,
• have data erased where we no longer have a reason to keep it,
• withdraw consent where consent is what we relied on,
• nominate another person to exercise these rights on your behalf if you are incapacitated or die,
• complain to us, and then to the Data Protection Board of India if we have not resolved it.

Email hello@xhadow.in and we will respond within a reasonable period. We may need to confirm who you are first, so that we do not hand your data to someone else.

8. Security

We apply access controls, encryption in transit, and the principle of giving people access only to what their role requires. Only the people who need your data to do their job can reach it.

No system is perfectly secure, and we will not claim otherwise. If a breach occurs that is likely to affect you, we will notify you and the Data Protection Board as the law requires.

9. Children

This site is not aimed at children and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, write to hello@xhadow.in and we will delete it.

10. Other websites

Our site links to other websites, including our own product Klick.ing, our social profiles, and third-party coverage of our work. Once you follow a link you are on someone else’s site under their policy, and we are not responsible for what they do.

11. Changes

We may update this policy as our practices or the law change. The “last updated” date at the top of this page always reflects the current version. Where a change materially affects your rights we will take reasonable steps to highlight it rather than relying on the date alone.

12. Contact

For any privacy question, request or complaint:

Xhadow Media
Email: hello@xhadow.in
Website: xhadow.in