Privacy Policy

Effective date: 21 October 2026

Last updated: 21 October 2026

This Privacy Policy explains how Kaushik Tripathi, trading as Fernbrick Studio ("Fernbrick Studio", "we", "us", "our"), collects, uses and protects personal information when you visit fernbrick.pages.dev (the "Website"), email us, speak with us on a call or otherwise contact us.

We have written this in plain English. If anything is unclear, email us at f3rnbrick@gmail.com.

1. Who we are

• Business: Kaushik Tripathi, trading as Fernbrick Studio (sole proprietor; no company or LLP registered).
• Address: D-54, Sector 58, Noida 201301, India
• Privacy contact: f3rnbrick@gmail.com

For the Website, we are the "controller" (UK GDPR and, where it applies, EU GDPR), the "business" or "controller" (US state privacy laws, where they apply) and the "Data Fiduciary" (India's Digital Personal Data Protection Act, 2023). This means we decide how and why your information is used.

2. What we collect

Information you give us

• Enquiries by email: you can email us directly, or use the website teardown request form on our home page. That form does not send anything to us or to any server: it opens your own email app with a prefilled message to f3rnbrick@gmail.com, and we receive only what you choose to send. When you email us, we receive your name, email address and anything you include, such as your phone number, business name, current website address, the type of website you need, your budget or timeline.
• Calls: if we arrange a call by email, the agreed time and time zone, and notes we take during the call. We do not record calls without asking you first.
• If you become a client: billing contact details, invoices and payment records, and project correspondence.

Information collected automatically

• No analytics or tracking cookies: we do not use analytics tools or tracking cookies on the Website.
• Cookies: only strictly necessary cookies. See Section 8.
• Server and security logs: IP address, date and time of requests, and error data, kept by our hosting provider (Cloudflare) to keep the Website secure and working.

Information from other sources

• If we contact you about our services, we may have found your business contact details (name, role, business name, work email or phone) from public sources such as your business website, business directories or professional profiles. You can ask us to stop contacting you at any time (see Section 10).

We do not intentionally collect sensitive information (such as health data, financial account details, government ID numbers or information about children). Please do not include sensitive or confidential information in your emails to us. Never send passwords or login details by email. If we need access to your accounts for a project, we will agree a secure method with you.

3. How and why we use it

We do not sell or share your personal information. We do not make decisions about you that have legal or similarly significant effects using only automated processing.

4. Third-party tools we use

We use a small number of third-party service providers to run our business (see Section 5). Some of them include automated or AI-assisted features (for example, spam filtering or writing assistance). Where we use them with your information, they act as our service providers ("processors") and may only use it to provide services to us, under their own terms. We do not use your enquiry details or messages to train AI models, and we choose tool settings that do not allow providers to do so where that option is reasonably available.

5. Who we share it with

We share personal information only with service providers who help us run our business, and only as far as needed. These are:

We may also share information if the law requires it, to protect our rights or safety or those of others, or as part of a business sale or reorganisation (including if we move our business into a company we set up). In that case, the new owner must respect this policy.

6. International transfers, including to India

We are based in India. If you are in the UK, the US or elsewhere, your information will be transferred to and processed in India, and some of our service providers are in the United States, the United Kingdom, the European Union or other countries. These countries may have data protection laws that are different from those where you live.

Where UK GDPR (or EU GDPR) applies, we take steps to protect your information when it is transferred, such as using service providers that rely on recognised safeguards (for example, the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, or the UK-US "Data Bridge" or EU-US Data Privacy Framework where a provider is certified), keeping access to the minimum needed, and using the security measures in Section 9. You can ask us for more information about these safeguards.

7. How long we keep it

• Enquiries that do not become projects: 24 months after our last contact, then deleted or anonymised.
• Client and invoice records (contracts, invoices, payment records, correspondence): 6 years after our work together ends, then deleted.
• Server and security logs: kept by our hosting provider (Cloudflare) for the periods set out in its own policies.
• Opt-out ("do not contact") list: kept for as long as needed so we remember not to contact you.

8. Cookies

We use only strictly necessary cookies that make the Website work and keep it secure. These do not need your consent.

We do not use analytics cookies, tracking cookies or advertising cookies.

You can block or delete cookies in your browser settings, but parts of the Website may then not work properly.

9. Security

We use reasonable technical and organisational measures to protect personal information. These include access controls, two-factor authentication on our accounts, a password manager, encryption in transit (HTTPS) and choosing reputable providers. No method of sending or storing data is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities where the law requires.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your information;
• Restrict or object to our use of it (including objecting to direct marketing at any time);
• Data portability (receive your information in a usable format);
• Withdraw consent at any time, where we rely on consent (this does not affect what we did before);
• Nominate someone to exercise your rights if you die or become unable to (India's DPDP Act).

To use your rights, email f3rnbrick@gmail.com. We may need to confirm your identity. We aim to respond within one month, or sooner where the law requires. We will not treat you unfairly for using your rights.

Complaints: please contact us first so we can try to fix the problem. You can also complain to a data protection authority, for example:

• UK: the Information Commissioner's Office (ico.org.uk)
• EU: your local supervisory authority
• India: the Data Protection Board of India
• US: your state Attorney General or privacy regulator (for example, the California Privacy Protection Agency)

To stop marketing emails: click "unsubscribe" or reply "stop" to any marketing email, or email f3rnbrick@gmail.com.

11. United States: state privacy notice

Several US states (including California under the CCPA as amended by the CPRA, and states such as Colorado, Connecticut, Virginia and others) have privacy laws. Many of these laws apply only to businesses above certain revenue or data volume thresholds, so they may not apply to us. Even so, we want US visitors to know:

• We do not sell or share personal information. This includes "selling" and "sharing" as those terms are defined in California law, and we do not use personal information for targeted or cross-context behavioural advertising.
• Categories we collect: identifiers (name, email, phone, IP address); commercial and professional information (business name, role, project details); internet activity (server and security log data); and anything you choose to send us. See Section 2.
• Sources, purposes and recipients: see Sections 2, 3 and 5.
• We do not use or disclose sensitive personal information to infer characteristics about you.
• We do not knowingly collect information from anyone under 16.
• Your choices: you may ask to know, access, correct or delete your information, or appeal our decision on a request, by emailing f3rnbrick@gmail.com. You may use an authorised agent. We will not discriminate against you for making a request.
• Opt-out signals: because we do not sell or share personal information, there is nothing for a browser opt-out signal (such as Global Privacy Control) to stop.

12. India: Digital Personal Data Protection Act, 2023

We are based in India and handle personal data in line with India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as their obligations come into force. Where that Act applies, you have rights to access information about how your data is processed, to correct, complete, update and erase it, to nominate another person, and to raise a grievance with us by emailing f3rnbrick@gmail.com. If you are not satisfied with our response, you may approach the Data Protection Board of India.

13. Children

Our Website and services are for businesses. They are not meant for children, and we do not knowingly collect personal information from anyone under 18. If you think a child has given us information, contact us and we will delete it.

14. Links to other websites and our portfolio

Our portfolio currently shows concept sites for fictional businesses, clearly labelled as concepts, until we have client work to show. The Website may link to other websites. We are not responsible for the content or privacy practices of those websites. Please read their own privacy policies.

15. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, if the changes are significant, tell you clearly (for example, with a notice on the Website).

16. Contact us

Kaushik Tripathi, trading as Fernbrick Studio D-54, Sector 58, Noida 201301, India f3rnbrick@gmail.com