Analytics only with a yes
Google Analytics and our own visit log run only if you accept. Say no and nothing runs. Change your mind any time under Cookie settings.
Your data stays yours.
Nothing that tracks you runs until you say yes. With your yes we count visits, and if you later write to us, we link those visits to what you send.
The notice, in short.
Only what you send
When you fill in a form we keep your name, organisation, email, phone and message, so we can reply.
Never shared or sold
Your details are used to answer you and nothing else. They are not passed to anyone for marketing.
Yours to delete
Ask to see, correct or delete what we hold, and withdraw your consent at any time. One email does it.
The detail, in plain words.
Only if you say yes. With your yes, Google Analytics sets two cookies (_ga and one ending in its ID) that recognise you as the same visitor for up to two years, and our own visit log keeps a random visitor ID in your browser. Say no and none of this is set. Our staff also get a sign-in cookie on the editing area, which visitors never reach.
Which pages you open, how you arrived, roughly where you are (city level), your device and browser, and when you send a form or open Book a call. It never sees what you type into a form. Advertising features and Google signals are switched off, and the data is not used for ads.
No. Our visit log records the pages a browser opens under a random ID, with no name, email or IP address. With each page it keeps your approximate city, your device and browser (for example Chrome on a Mac), and, when you browse from an office network, the organisation that owns that network. If you accepted analytics and then send us any form on this site, that ID goes with it, so the people who answer enquiries can see which pages you read and when, before and after you wrote. The cookie banner says this before you accept.
No. We do not buy data about you, match you against other websites or data brokers, or try to find out who you are beyond what you tell us. The city and network come from the address your browser connects from, worked out by our host Cloudflare, and the address itself is not kept.
Yes. Write to us and we remove the link and those visits. Turning analytics off under Cookie settings stops any new visits being recorded, deletes the visitor ID from your browser, and means the next form you send is not linked. Visits never linked to anyone are deleted after 90 days.
Use Cookie settings at the foot of any page. Turning analytics off stops it at once, deletes its cookies and the visitor ID. We remember your choice in your browser for 12 months, then ask again. A browser that sends Global Privacy Control is treated as a no.
The site is hosted on Cloudflare, which handles every request and sees your IP address to deliver the page and block attacks. Our fonts and images are served from our own address, so no font company sees your visit. Google sees it only if you accept analytics.
Videos come from YouTube's privacy-enhanced service and load only when you press play. Until then nothing is sent to YouTube. Once you play one, YouTube's own privacy policy applies.
On Contact and Book a call: your name, organisation, email address, phone number if you give it, and your message. For the newsletter: only your email address. With each form we also note your approximate city, your device and browser, and the organisation that owns the network you sent it from. We ask for your consent before you send any of them, and use what you send only for that purpose. If you accepted analytics, your visits to this site are linked to it as well.
Enquiries and the visit log are stored in a database on Cloudflare, and each enquiry is sent to our team by email through Amazon Web Services in Mumbai. Only the people who answer enquiries can read them.
Enquiries, and visits linked to them, only as long as we need them to reply and follow up. Visits not linked to anyone are deleted after 90 days. Ask us and we delete yours, along with the emails it created.
Under India's Digital Personal Data Protection Act you can ask what we hold about you, have it corrected or erased, withdraw consent, name someone to act for you, and raise a grievance. Withdrawing is as easy as giving it.
Write to hello@commons.inc with "My data" in the subject. We answer every request, and if you are not satisfied with our answer you can complain to the Data Protection Board of India.
If we add anything new that collects data, we update this page first and ask for your consent again before it runs. Nothing changes silently.