Privacy Policy

1. Who we are

Geminate Solutions Private Limited ("Geminate Solutions", "we", "us") is the data controller for personal data collected through this website, geminatesolutions.com. Our registered office is in Surat, Gujarat, India.

For any privacy question or to exercise your rights, contact us at [email protected].

We target clients in the United Kingdom, European Economic Area, and the Gulf, so we treat UK GDPR, EU GDPR, and the ePrivacy rules as applicable. Where required, we will appoint an EU and a UK representative as our enquiry volume in those regions grows.

2. Scope

This policy covers visitors to geminatesolutions.com, including users in the UK, EU/EEA, the Gulf, and elsewhere, and explains your rights and how we handle your data.

3. What personal data we collect

Inquiry and contact data: your name, work email, company or website (optional), the details of your project, and the time you submitted the form.

Technical data sent with an inquiry: the page you submitted from, approximate location (city and country from your IP address), your network provider, browser type and IP address. We use this to answer you well and to protect the form from abuse. With the inquiry we also include the pages you read during that visit and how that visit began (search, ad or referring site, including campaign or ad click tags), so we know what you are interested in. If you accepted cookies, pages from your earlier visits are included too. Booking a call through our calendar sends us the same visit details. If you send more than one inquiry with the same email, we link them.

Returning visits: if you accepted cookies and later contact us, we may be notified when you visit the site again, so we can follow up at a useful moment. Reject cookies or clear your browser storage and this stops.

Usage and journey data: pages visited, scroll depth, buttons clicked, that a form was started (never what you typed before submitting), how you arrived (search, ad or referring site, including campaign tags), device type and approximate location, linked to a random first-party visitor ID. We collect this only after you click Accept in the cookie banner, in every country. If you reject, none of it is collected.

Cookies and similar technologies: see the Cookies section below and the cookie banner.

4. Why we use it and our lawful basis

Responding to your inquiry and pre-contract discussions: legitimate interests, and where relevant taking steps prior to a contract at your request.

Providing and improving our services: legitimate interests.

Analytics, journey data, heatmaps, session replays and advertising measurement: your consent, given through the cookie banner. You can withdraw it at any time.

Marketing emails, only if you opt in: consent.

Legal, compliance, and fraud prevention: legal obligation and legitimate interests.

5. Cookies and tracking

We use strictly necessary storage to make the site work and to remember your privacy choice, which needs no consent. Non-essential tools are: Google Analytics and Google Tag Manager (analytics), Microsoft Clarity (heatmaps and session replays, with form fields masked), the Meta Pixel (advertising measurement), and our own first-party journey log.

Every visitor, in every country, is asked first. These tools stay off until you click Accept in the cookie banner, and stay off if you click Reject. We use Google Consent Mode v2, so analytics and advertising storage are denied by default. Rejecting is as easy as accepting.

If you accept, a small signal is sent about every 15 seconds while our page is open in your browser, so we can see how many people are on the site right now and which page they are reading.

You can change your choice at any time with the Privacy choices link in the footer.

6. Who we share data with

EmailJS: our email provider, which processes and delivers your inquiry submissions. EmailJS may transfer data to the United States under Standard Contractual Clauses and a Data Processing Agreement.

Google (Google Analytics, Google Tag Manager, Google Ads): website analytics and measuring which ads lead to inquiries, in line with your privacy choice.

Meta (Meta Pixel and Conversions API): measuring which Meta ads lead to inquiries, in line with your privacy choice. Your email is sent only as a one-way hashed (SHA-256) value.

Microsoft (Clarity): heatmaps and anonymised session replays to improve the site, in line with your privacy choice. Text you type into forms is masked.

Google (Google Sheets and Gmail): our inquiry pipeline and email notifications, as a processor.

Cloudflare: hosts this website and stores inquiries and journey data on our behalf, as a processor.

Telegram: delivers an instant notification of a new inquiry to our team.

Our hosting and infrastructure providers, acting as processors.

We do not sell your personal data for money. Sharing data with Meta and Google for ad measurement may count as "sharing" under some US state laws (for example California). It only happens if you accept, and you can withdraw that with the Privacy choices link in the footer.

7. International data transfers

Your data may be processed outside the UK and EEA, in the United States (EmailJS, Cloudflare, Google, Meta), by Telegram, and in India (our own operations). Neither is covered by a UK or EU adequacy decision, so these transfers are protected by Standard Contractual Clauses (and the UK International Data Transfer Agreement where applicable). A copy of the safeguards is available on request.

8. How long we keep it

We keep inquiry leads for up to 24 months from your last contact with us, then delete them, unless a contractual or legal relationship requires us to keep them longer. Journey and usage data is deleted automatically after 180 days. Cookie-consent and marketing-consent records are kept for as long as we rely on that consent.

9. Your rights and privacy choices

Your privacy choices: use the Privacy choices link in the footer of any page to accept or reject analytics, journey logging, heatmaps, session replays and advertising measurement. Rejecting also works as a request not to sell or share your personal information.

Under UK and EU GDPR you have the right to access, rectify, erase, restrict, and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time.

You also have the right to complain to a supervisory authority, such as the UK Information Commissioner's Office (ICO) or your local EU data protection authority.

To exercise any right, email [email protected]. We respond within one calendar month.

10. Data security

We protect your data with TLS encryption in transit, access controls, and reputable processors. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

11. Children

Our website and services are for businesses and are not directed at children under 16. We do not knowingly collect their data.

12. Changes to this policy

We may update this policy from time to time. The version date below reflects the latest change. Last updated: 3 October 2026.

13. Contact

Geminate Solutions Private Limited, Surat, Gujarat, India. Privacy contact: [email protected].