Privacy notice.

The controller for personal data collected through this website is 3point3 Automation Labs Pvt Ltd, a company incorporated in India (CIN: U72200GJ2014PTC078522), registered office 310, Aditya Plaza, Third Floor, Nr. Karnavati Flat, Jodhpur Gam Rd, Satellite, Ahmedabad, Gujarat 380015, India. Reach our data protection contact at [email protected].

This website, including the contact form, is hosted on Amazon Web Services in the Frankfurt, Germany (eu-central-1) region, and is served through Cloudflare (DNS, CDN and WAF), which terminates TLS at edge locations worldwide.

Our team is based in India and reads contact-form enquiries from there (submissions are delivered to our email mailbox, see below). This means your correspondence is accessible from India, a country not covered by a UK or European Commission adequacy decision. That access happens within our own company and is protected by technical and organisational measures: TLS in transit, access limited to the people handling your enquiry, and short log retention.

Customer production environments with contracted EU data residency are likewise deployed in AWS EU (Frankfurt).

• Answering your enquiry: steps taken at your request prior to entering into a contract, and our legitimate interest in responding to business enquiries (Art. 6(1)(b) and 6(1)(f) GDPR).
• Keeping the site secure and available: our legitimate interest in preventing abuse, spam and attacks (Art. 6(1)(f)).
• Understanding aggregate traffic: our legitimate interest in measuring, without identifying visitors (Art. 6(1)(f)).

Providing the contact-form fields is voluntary, but we cannot reply to an enquiry without them.

We do not sell your data or share it with advertisers. We do use a small number of service providers who process it on our behalf:

• Microsoft (Microsoft 365 / Graph API): contact-form submissions are delivered as email to our [email protected] mailbox and stored there. Microsoft acts as our processor.
• Amazon Web Services: website and application hosting (Frankfurt, Germany).
• Cloudflare: DNS, CDN, TLS termination and WAF.
• Plausible Analytics: cookieless, aggregate traffic statistics, processed in the EU.

Microsoft, Amazon Web Services, Cloudflare and Google (if you choose to play the embedded video, see below) are United States companies. Each is certified under the EU-US Data Privacy Framework, and their data processing agreements incorporate the EU Standard Contractual Clauses as a fallback safeguard for any processing outside the EEA or UK.

We may also disclose data where we are legally required to, or to establish or defend legal claims.

We set no advertising, retargeting or behavioural cookies, and we run no third-party ad pixels. Our analytics are cookieless, and our web fonts are served from our own domain rather than a third-party CDN.

One page (Work) offers a video hosted on YouTube in privacy-enhanced mode (youtube-nocookie.com). The player does not load with the page: nothing is requested from YouTube or Google until you press play. If you do, your browser connects to Google, which receives your IP address and browser details from that point; YouTube states it does not set personalised-advertising cookies in this mode.

Separately, existing customers who sign in to the support portal served under this domain receive strictly necessary login and security cookies for their session. Those apply only to signed-in portal users and are governed by the applicable customer agreement.

• Contact-form emails: retained while the conversation is active and for as long as needed for potential follow-up, then deleted. Ask us and we will delete yours sooner.
• Server and edge logs: web server access and error logs, which include IP addresses, are rotated daily and deleted after 10 days; general system and application logs are kept for a limited period for troubleshooting.
• Analytics: aggregate counts only, with no record tied to you.

Contact details are never added to a marketing list without your explicit opt-in.

If the GDPR or UK GDPR applies to you, you can request access to the personal data we hold about you, correction, erasure, restriction, portability, and you can object to processing we base on legitimate interests. If India's Digital Personal Data Protection Act applies, you have rights of access, correction, erasure, grievance redressal and nomination. Write to [email protected] (the same address serves as our grievance contact) and we will respond within 30 days.

If you are in the EEA or UK and are dissatisfied with our response, you may lodge a complaint with your local supervisory authority. In India, you may approach the Data Protection Board once our grievance process is exhausted.

This notice covers this website only. Where we process personal data on behalf of a customer under a paid engagement, we act as a processor and that processing is governed by the applicable Data Processing Agreement, not by this notice.

We update this notice when our practices change. Material changes will be reflected by updating the "Last updated" date above.