Who Controls the Data
HummingSun, 1159, Palam Vihar, Gurgaon, HR, India, is responsible for website-related personal data. Contact info@hummingsun.co.in.
Scope
This policy covers website visitors, prospective clients requesting a demo or early access, and organisations and individuals who engage with HummingSun Workspace or HummingSun Core. Product-level data processed within an active Workspace subscription is governed by that organisation’s services agreement in addition to this policy.
Information We Collect
- name, work email, phone number, organisation, role and enquiry details;
- demo, early-access, partnership and support communications;
- technical information such as device, browser, approximate location, IP address, referral source and website activity;
- information voluntarily supplied through Advisor, email or WhatsApp.
Please do not submit health, assessment or other sensitive personal information through public website forms, Advisor, email or WhatsApp.
How We Use It
We use this information to evaluate early-access requests, provide requested services, secure and improve the site, understand aggregate usage, maintain records and comply with law. Depending on jurisdiction, processing is based on consent, steps requested before a contract, performance of a contract, legitimate interests or legal obligations.
Sensitive Data & Anonymity Commitment
Within HummingSun Workspace, individual survey responses are never shared with your employer in identifiable form. Results are reported to organisations only in aggregate, and only when a group has a minimum of five respondents, to protect individual anonymity.
Legal Basis
Depending on your jurisdiction, we process personal data based on your consent, steps you request before entering into a contract, performance of a contract, our legitimate interests, or a legal obligation – consistent with the EU/UK GDPR and India’s Digital Personal Data Protection Act, 2023.
Sub-processors and Hosting
We work with a small number of trusted service providers to run our website and product: Supabase (database and authentication infrastructure), Vercel (application hosting for HummingSun Workspace), Resend (transactional email delivery) and Google Analytics (aggregate website analytics). Our infrastructure is currently hosted in Asia-Pacific data centres, and we are progressively consolidating storage within an India region to further support data residency.
Sharing and International Processing
We may use carefully selected hosting, email, analytics, communications, security and professional-service providers. We do not sell personal data. Some providers may process data in other countries; where required, we use appropriate contractual and organisational safeguards.
Retention
We retain enquiry and account records for as long as needed to provide the requested service, plus up to three years afterward to meet legitimate business, accounting and legal record-keeping requirements. Workspace survey data is retained in aggregate or de-identified form for the duration of the engagement plus up to two years for benchmarking and service improvement; individually identifiable responses are retained only as long as needed to compile aggregate results. Analytics retention follows our configured Google Analytics settings. You may request earlier deletion, subject to any legal obligation to retain records.
Your Choices and Rights
Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, and the EU/UK GDPR where relevant, you may request access, correction, deletion, portability, or object to certain processing, or withdraw consent. For India DPDP Act requests, our Grievance Officer is Deepika S, Founder, reachable at info@hummingsun.co.in. Email us with enough information to verify and action your request.
Cookies & Tracking
hummingsun.co.in uses cookies and similar technologies as described in our Cookie Policy.
Security and Children
We use proportionate safeguards, but no online service is completely risk-free. This business website and platform are not directed to children, and we do not knowingly collect personal data from children.
Updates
We may update this policy as our services and legal obligations evolve. Material changes will be reflected by a new effective date.